Page 1 of 1

Change joomla administrator login page URL

Posted: Wed Nov 24, 2010 6:57 am
by aihra
Hi,

I want to change the url of my joomla administration login page.

My url is http://www.sampledomain.com/administrator

I want to change it to

http://www.sampledomain.com/administrator/password

How can I do that?

Help please.

Thanks!

Re: Change joomla administrator login page URL

Posted: Wed Nov 24, 2010 7:25 am
by richardphilips
Hi Aihra,
There are many components, hacks out there.
But i will recommend you that do not go for it.

Why you want to change the administrator url?

Joomla is very secure if your password is strong. You can even change the default "admin" username or create new super admin and delete the default!!

You can even change the look and feel of the default joomla administrator login, if that will help.

The disadvantage of using hack is that when every you will update your joomla , the changes will be lost. Also what if the hack is not perfect??

Re: Change joomla administrator login page URL

Posted: Wed Nov 24, 2010 7:41 am
by aihra
Hi,

thanks for the reply.

I have RS Firewall installed on the website.

It sends me notification everytime someone is trying to login on the backend of the website.

As of yesterday, a certain IP address tried to access the backend of the website more than 10 times using different passwords.

I understand that the hack is not advisable.


Anyways, thank you.

Re: Change joomla administrator login page URL

Posted: Wed Nov 24, 2010 3:50 pm
by richardphilips
Hi Aihra,
Thank you for the information, i will try RS Firewall soon.
How was your experience with RS Firewall?

Is it advisable to install it.

Re: Change joomla administrator login page URL

Posted: Tue Feb 01, 2011 5:32 pm
by diorist
Aihra,

A couple of extensions in the JED do what you're seeking. Search for JSecure or "Backend Token." There may be others, too. These plugins append a custom text string the default admin URL: something like "http://www.yoursite.com/administrator/?secretword."

In any case, the string shouldn't be your password. Since the URL is sent and stored unencrypted in any number of places (network logs, browser logs, etc.) and also subject to scanning on public networks, including your admin password in a URL would be like broadcasting it.