Re: Securing the admin site

2007-04-05 Thread trickyb
> To change the URL root to something else, did you just have replace > r'^admin/' with something else in the URL conf file? Or, did you have > to also do some other hacking? Yes, just change the r'^admin/' to something else. Richard --~--~-~--~~~---~--~~ You r

Re: Securing the admin site

2007-03-30 Thread trickyb
On Mar 30, 2:37 am, "James Bennett" <[EMAIL PROTECTED]> wrote: > I guess I'm not sure what's meant by "securing" here; accessing > anything in the admin app requires the user to be authenticated and > marked as staff first. And there's really no harm in someone stumbling > across the admin login

Re: Securing the admin site

2007-03-29 Thread trickyb
> on how to restrict access and redirect to ssl based on many criteria (url, > username, certificate ...) I'd wondered about using SSL for securing the admin site, just wasn't sure if it was worth the effort. I guess that the fact that my question did not generate 10 immediate "OMG The Admin Site

Securing the admin site

2007-03-29 Thread trickyb
Hello, This is a somewhat open-ended question: what are people doing to secure their admin sites against unwelcome visitors? On my site, what I've done is change the URL root from /admin/ to something else so that casual visitors do not know where to look. I'm wondering now if that's enough, or