miniBB ® miniBB®
miniBB Support Forums
 | Forums | Register | Reply | Search | Statistics | Manual |
The Other miniBB Support Forums / The Other /   

Renaming files for security

Author Grateful
Guest
#1 | Posted: 20 Sep 2003 00:35 
Can someone please help me out by telling me what files need to be renamed after installing? I'm very confused. Wouldn't renaming the any file break the script?

No?

Author Anonymous
Guest
#2 | Posted: 20 Sep 2003 21:46 
rename bb_admin.php.

then put the new name in setup_options.php

Author Anonymous
Guest
#3 | Posted: 21 Sep 2003 19:13 
What is the consequence if the file is not renamed? Mine works without renaming anything.

Author Team
8-)
#4 | Posted: 22 Sep 2003 10:35 
Renaming is just for your security (so noone will know which file to force). Remember that miniBB is open source, and everyone knows default admin panel's name. So, of course it will work with default name, but it is better to rename it.

Author Anonymous
Guest
#5 | Posted: 24 Sep 2003 04:07 
I see.. thanks!

Author Excalibor
Guest
#6 | Posted: 8 Jan 2009 14:37 
Hello,

Why these pages are accessible by html?

admin_addforum1.html
admin_banusr1.html
admin_deleteban1.html
admin_editforum1.html
admin_editforum2.html
admin_export_emails.html
admin_login.html
admin_panel.html
admin_removeuser1.html
admin_searchusers.html
admin_searchusersres.html
admin_sendmails1.html
admin_viewsubs.html

Is dangerous to my forum?

Thank

Author marsbar
Associated Member
#7 | Posted: 8 Jan 2009 14:55 
Excalibor:
Why these pages are accessible by html? [...] Is dangerous to my forum?

Hmm ... I shouldn't think so. HTML template files found in the templates directory are meant to be world readable.
- mb

Author Excalibor
Guest
#8 | Posted: 8 Jan 2009 20:16 
Marsbar,

Thank!

Author Paul
Lead Developer
#9 | Posted: 9 Jan 2009 03:16 
Excalibor
These are just plain HTML templates which do not contain any security information. After parsing they all are transformed into "live" HTML which anyone can see by viewing the source of the web page.

.html extension is also because to show those files are allowed to modify in any HTML editor.

If you would like to prevent viewing HTML templates by public directly, you may use .htaccess directive like this:

<Files ~ "\.html|\.htaccess">
order allow,deny
deny from all
</Files>

and put .htaccess file under your templates/ folder.

Author Excalibor
Guest
#10 | Posted: 12 Jan 2009 17:43 
Hello Paul,

Thank you very much!.

:)

The Other miniBB Support Forums / The Other / Renaming files for security Top

Your Reply Click this icon to move up to the quoted message

 Short link for this topic:

 ?
Only registered users are allowed to post here. Please, enter your username/password details upon posting a message, or register first.


Before posting, make sure your message is compliant with our forum posting rules. If not, it may be locked or deleted with no explanation.
 
miniBB Support Forums Powered by Forum Software miniBB ® Features  Requirements  Demo  Download  Showcase  Gallery of Arts
Compiler  Premium Extensions  Premium Support  License  Contacts
Proceed with the Captcha add-on: protect your miniBB-forums from the automated spam and flood.
Captcha Addon for miniBB