Skip to content

Commit b4e2608

Browse files
committed
(WIP #77) Syntax (Lists + to -)
Signed-off-by: Josh Harmon <[email protected]>
1 parent bffd28e commit b4e2608

File tree

2 files changed

+38
-31
lines changed

2 files changed

+38
-31
lines changed

1.8/administration/security/2fa.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,4 +37,4 @@ The following apps can be used as Two-Factor Authentication Apps. Note that this
3737

3838
# Troubleshooting
3939

40-
+ Verify that the server and authenticator device are in the same timezone. The codes are dependent upon time, within a 30 second time span.
40+
- Verify that the server and authenticator device are in the same timezone. The codes are dependent upon time, within a 30 second time span.

1.8/administration/security/protection.md

Lines changed: 37 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -26,67 +26,73 @@ When finished with one of the instruction sets below, browse to your Admin CP ag
2626

2727
Similar to Apache, but with the cPanel UI on shared hosts.
2828

29-
+ Search for the `Directory Privacy` menu item (icon: blue folder with lock)
30-
+ Select the directory you wish to protect (your Admin CP directory)
31-
+ **Check** the `Password protect this directory.` checkbox.
32-
+ Fill out the given form with a username and strong password (>85 score)
33-
+ Click `Save`.
29+
- Search for the `Directory Privacy` menu item (icon: blue folder with lock)
30+
- Select the directory you wish to protect (your Admin CP directory)
31+
- **Check** the `Password protect this directory.` checkbox.
32+
- Fill out the given form with a username and strong password (>85 score)
33+
- Click `Save`.
3434

3535
## Apache Basic Auth Configuration (with or without SSH)
3636

3737
Requirements:
38-
+ SSH access to site
39-
+ If not available, use [DynamicDrive's generator tool](http://www.tools.dynamicdrive.com/password/) and upload the files, as if you followed the directions below to create them.
40-
+ Apache configured to allow .htaccess files to override configuration values
38+
- SSH access to site
39+
- If not available, use [DynamicDrive's generator tool](http://www.tools.dynamicdrive.com/password/) and upload the files, as if you followed the directions below to create them.
40+
- Apache configured to allow .htaccess files to override configuration values
4141

4242
First, create a new file in the Admin CP directory named .htaccess. Apache will interpret the file as a local configuration file in the directory and any subdirectories inside of it.
4343

44-
+ Open the `.htaccess` file
45-
+ **ADD**:
44+
- Open the `.htaccess` file
45+
- **ADD**:
4646
AuthUserFile /path/to/.htpasswd
4747
AuthGroupFile /dev/null
4848
AuthName Restricted
4949
AuthType Basic
5050
require valid-user
51-
+ Run shell command:
51+
- Run shell command:
5252
htpasswd -c -b /path/to/.htpasswd desired_username desired_secure_password
53-
+ **NOTE:** Replace `/path/to/.htpasswd` in both places with the respective file location.
53+
- **NOTE:** Replace `/path/to/.htpasswd` in both places with the respective file location.
5454

5555
## Nginx Basic Auth Configuration (with SSH)
5656

5757
Requirements:
58-
+ SSH access to site configuration file
58+
59+
- SSH access to site configuration file
5960

6061
Let's begin:
61-
+ Open your nginx site configuration file.
62-
+ Within the `server` block, **ADD**
63-
location /path/to/ACP {
62+
63+
- Open your nginx site configuration file.
64+
- Within the `server` block, **ADD**
65+
66+
location /path/to/ACP {
6467
auth_basic "Restricted";
6568
auth_basic_user_file /path/to/.htpasswd;
6669
}
67-
+ Run shell command:
68-
htpasswd -c -b /path/to/.htpasswd desired_username desired_secure_password
69-
+ If the command is not found, install the `apache2-utils`, `httpd-utils`, or similar package for your Linux distribution.
7070

71-
+ **NOTE:** Replace `/path/to/.htpasswd` in both places with the respective file location.
71+
- Run shell command:
72+
73+
htpasswd -c -b /path/to/.htpasswd desired_username desired_secure_password
74+
75+
- If the command is not found, install the `apache2-utils`, `httpd-utils`, or similar package for your Linux distribution.
76+
77+
- **NOTE:** Replace `/path/to/.htpasswd` in both places with the respective file location.
7278

7379
# Configuring an Admin CP PIN
7480

7581
With MyBB 1.8, an Admin Control Panel "Secret PIN" setting was added to the core, inspired by a popular community tutorial. To enable the PIN:
7682

77-
+ Open `inc/config.php`
83+
- Open `inc/config.php`
7884

79-
+ **FIND** or **ADD**:
85+
- **FIND** or **ADD**:
8086

81-
{% highlight php startinline %}
82-
$config['secret_pin']
83-
{% endhighlight %}
87+
{% highlight php startinline %}
88+
$config['secret_pin']
89+
{% endhighlight %}
8490

85-
+ Set the variable to a value, such as `'S0me p1n'`.
91+
- Set the variable to a value, such as `'S0me p1n'`.
8692

87-
+ **DONE**
93+
- **DONE**
8894

89-
Example:
95+
**Example:**
9096

9197
{% highlight php startinline %}
9298
$config['secret_pin'] = 'S0me p1n';
@@ -104,8 +110,9 @@ Permissions for each Administrator can be configured at `Admin CP > Users & Grou
104110
If you have multiple administrators, assign specific roles to apply a "divide and conquer" strategy across your administrators.
105111

106112
Examples:
107-
+ If one is strong in design, give them access to Templates and Style ACP features, but not settings, users, or system tools. They shouldn't need them for design tasks, and if they do, they can ask someone else to perform those actions.
108-
+ Perhaps another admin is great with managing community members. Give them access to Users and Groups, but nothing more.
113+
114+
- If one is strong in design, give them access to Templates and Style ACP features, but not settings, users, or system tools. They shouldn't need them for design tasks, and if they do, they can ask someone else to perform those actions.
115+
- Perhaps another admin is great with managing community members. Give them access to Users and Groups, but nothing more.
109116

110117
The more features you give to each administrator, the more power you grant to each of them over your community and its security.
111118

0 commit comments

Comments
 (0)