Re: Securing the admin site

2007-04-05 Thread trickyb
> To change the URL root to something else, did you just have replace > r'^admin/' with something else in the URL conf file? Or, did you have > to also do some other hacking? Yes, just change the r'^admin/' to something else. Richard --~--~-~--~~~---~--~~ You r

Re: Securing the admin site

2007-04-04 Thread John DeRosa
trickyb wrote: > This is a somewhat open-ended question: what are people doing to > secure their admin sites against unwelcome visitors? On my site, what > I've done is change the URL root from /admin/ to something else so > that casual visitors do not know where to look. Richard, To change the

Re: Securing the admin site

2007-03-30 Thread trickyb
On Mar 30, 2:37 am, "James Bennett" <[EMAIL PROTECTED]> wrote: > I guess I'm not sure what's meant by "securing" here; accessing > anything in the admin app requires the user to be authenticated and > marked as staff first. And there's really no harm in someone stumbling > across the admin login

Re: Securing the admin site

2007-03-29 Thread James Bennett
On 3/29/07, Jeremy Dunck <[EMAIL PROTECTED]> wrote: > Eh, it depends what you're doing. Entering CC numbers? You probably want > SSL. I'd want much more than SSL ;) I guess I'm not sure what's meant by "securing" here; accessing anything in the admin app requires the user to be authenticated

Re: Securing the admin site

2007-03-29 Thread Jeremy Dunck
On 3/29/07, trickyb <[EMAIL PROTECTED]> wrote: > is in itself an answer: the admin site is safe > enough as it is :-) Eh, it depends what you're doing. Entering CC numbers? You probably want SSL. Entering blog posts? Not so much. --~--~-~--~~~---~--~~ You rece

Re: Securing the admin site

2007-03-29 Thread trickyb
> on how to restrict access and redirect to ssl based on many criteria (url, > username, certificate ...) I'd wondered about using SSL for securing the admin site, just wasn't sure if it was worth the effort. I guess that the fact that my question did not generate 10 immediat

Re: Securing the admin site

2007-03-29 Thread Robert Smol
> > > This is a somewhat open-ended question: what are people doing to > secure their admin sites against unwelcome visitors? On my site, what > I've done is change the URL root from /admin/ to something else so > that casual visitors do not know where to look. > I guess apache is quite powerful

Securing the admin site

2007-03-29 Thread trickyb
Hello, This is a somewhat open-ended question: what are people doing to secure their admin sites against unwelcome visitors? On my site, what I've done is change the URL root from /admin/ to something else so that casual visitors do not know where to look. I'm wondering now if that's enough, or