A few security questions

1nv1s1bl3 · Post by **1nv1s1bl3** » Tue Jun 09, 2015 12:30 pm

Hello,

1. I'd like to ask if there is a way to disable deletion of admin logs from the admin panel for all users (founders & administrators).
2. Is there a way to add email notification to founders if someone logs into their account?
3. How to change the admin panel link and to secure the actual admin panel?

For 1 & 3 i found tutorials for phpbb 3.0, but they aren't compatible for 3.1.x.

Thanks in advance.

Post by **Mick** » Tue Jun 09, 2015 1:38 pm

Please describe your issue and why you want to do this as there's no reason for it with phpBB.

1nv1s1bl3 · Post by **1nv1s1bl3** » Fri Jun 12, 2015 1:14 pm

1. I want to see what the admins on the forum are doing (they are a few).
2. Just for security reasons (there are a few admins and everything can happen).
3. Same as above^

Nikola · Post by **Nikola** » Fri Jun 12, 2015 1:21 pm

ACP > Permissions > User Groups > (group) > Administrative Permissions > Limit the access.
as for renaming the acp link, you may want to play around with the phpbb files on the server. More precisely:

Code: Select all

board_name/adm/index.php

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Fri Jun 12, 2015 2:52 pm

1. as was said, I believe that is a admin permission you can remove . as founder , it would not apply to you.

2. the only way that can happen is if you give them your founder account details. If that has happened then change your founder password

3. completely not necessary as I have not heard of a single case where someone has gained access to the adm folder without having a valide username/password.

and here is a #4.
If you don't trust your admins then why are they admins?

robert

Nikola · Post by **Nikola** » Fri Jun 12, 2015 4:00 pm

Lumpy Burgertushie wrote: If you don't trust your admins then why are they admins?

What he said.

Khaos-Rage · Post by **Khaos-Rage** » Fri Jun 12, 2015 4:03 pm

1nv1s1bl3 wrote:How to change the admin panel link

Just rename the /adm directory on the server to /xyz and then go into config.php and change

Code: Select all

$phpbb_adm_relative_path = 'adm/';

to

Code: Select all

$phpbb_adm_relative_path = 'xyz/';

As to "secure the actual admin panel" It is secure it asks for re authentication of username and password anyway.

Oyabun1 · Post by **Oyabun1** » Sat Jun 13, 2015 3:14 am

NikolaCR wrote:as for renaming the acp link, you may want to play around with the phpbb files on the server. More precisely:
Code: Select all
board_name/adm/index.php

That is really bad advice. index.php is referred to in many other files, so if you just change its name you will break the board.

advertisements