Mobile app version of vmapp.org
Login or Join
Odierno851

: How to hide the admin login form? In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to

@Odierno851

Posted in: #Authentication

In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to these people.

I thought of using a weird URL for the login form like example.com/1a79a4d60de6718e8e5b326e338ae533 that only admins and mods would know. But it's a quite impractical solution, besides if someone would want to login in another computer and forgets this URL, then is unable to. Is there any more effective way?

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Odierno851

2 Comments

Sorted by latest first Latest Oldest Best

 

@Angela700

On top of PatomaS's answer, you need to place the .htpasswd file in the same directory as the admin login page.

You can use this .htpasswd generator to create the file and then simply upload it to your directory.

10% popularity Vote Up Vote Down


 

@Cugini213

If you want a completely private solution, then tell the admins and moderators to log to www.example.com/login/, there you can have a security measure with .htpasswd to prevent the access to any other person.

If the login fails, the system will just tell the user that he/she can't log and that's it.

If you know the ip's of those users that you want to let in, you can restrict access to that page according to those ip's, but that could be troublesome.

Then, since you won't have any link pointing to that folder, no robot will find it. Although heuristically they can try that url. You can forbid that in your robots.txt and or siteap, but the best option is to just use the .htpasswd to restrict access.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme