Showing posts with label Administrator. Show all posts
Showing posts with label Administrator. Show all posts

Thursday, April 25, 2013

Change Title of Administrator Backend

To change the title in joomla administrator backend login screen, which looks like "Joomla! Administration Login", the steps are :

1. Find the file /joomla_path/administrator/language/en-GB/en-GB.ini.
2. Then search for the text "Joomla! Administration Login", 
3. Replace the text to the right side of the equal sign to anything you like.


Remove GNU/GPL Licence?


If you want removing "Joomla! is Free Software released under the GNU/GPL License." at the footer of each page, the steps are :

Reguler Mode
1. Go to Extensions -> Module Manager -> Footer -> Unpublish
* for administrator page, go to administration tab


Syntax Mode
1. Go to the language folder
2. open en-GB.mod_footer.ini file
3. Replace the text as below for footer_line1 and footer_line2
FOOTER_LINE1=Copyright © %date% %sitename%. All Rights Reserved.
FOOTER_LINE2=


note : keep "FOOTER_LINE2=" as blank


Thursday, April 18, 2013

Change your Joomla Admin Folder Name or Path


If you would like to 'sort of' rename your Joomla administrator directory without having to modify any Joomla code or you don't want to have to use htpasswd to protect that directory, you can achieve it the following way. 
This may help limit issues for joomla security in the future.

Steps #1

1. Create a new directory in your root directory (eg. "myadmin")

2. Create an index.php file in your "myadmin" directory..
$admin_cookie_code="1234567890";
setcookie("JoomlaAdminSession",$admin_cookie_code,0,"/");
header("Location: /administrator/index.php");
?>

3. Add this to .htaccess of your real Joomla administrator directory
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/administrator
RewriteCond %{HTTP_COOKIE} !JoomlaAdminSession=1234567890
RewriteRule .* - [L,F]

To enter your Joomla administration page, you point your browser to "http://yoursite.com/myadmin/" The php code will set a cookie that expires at the end of the session and redirect you to your real administration page. No one will be able to load anything from the administrator directory without having gone through the "myadmin" directory first. 

Needless to say, you would choose another directory name for "myadmin" and change the cookie code "1234567890" to something else. Security through obfuscation is no substitute for the real thing but this might make you feel a little better.

Steps #2


1. define( ‘JPATH_ADMINISTRATOR’, JPATH_ROOT.DS.’administrator’ );
to
define( ‘JPATH_ADMINISTRATOR’, JPATH_ROOT.DS.’myadmin’ );

2. Create a new directory in your root directory (eg. “myadmin”)

3. Create an index.php file in your “myadmin” directory..
<?php
$admin_cookie_code=”999999999″;
setcookie(“JoomlaAdminSession”,$admin_cookie_code,0,”/”);
header(“Location: ../administrator/index.php”);
?>

4. Add this to the beginning of index.php in real administrator folder
#administrator/index.php (modify , **do not replace**)
if ($_COOKIE['JoomlaAdminSession'] != “999999999″)
{
header(“Location: ../index.php”);
}

Password protect your administrative area


Password protecting the "administrator" folder will add an additional layer of protection to your Joomla website. For more information on how to do that you should refer to our tutorial below. You should set username and password for your website different from the ones for your Joomla application.

Once you do this, you will have to login twice. First to access the login page of Joomla and then to login in the application itself.

That would make guessing your passwords a very difficult task for any attacker. In addition, even if there is a security breach within the Joomla script itself, a potential attacker won't be able to gain access to your administrative end even if s/he knows your login details.

Select the Password Protect Directories icon from your cPanel main page. A list of the directories on your account will appear.

cPanel - Password Protected Directories

Select the directory you wish to limit access to. In the new page, please create a username and a password for your user. Select a name that will appear in the login screen and click on the Save button to activate the protection.

cPanel - Password Protected Directories

ImportantPlease note that you have to create a directory before you enable the password protection for it. Also, using one and the same directory for the purpose of password protection and FTP storage at the same time is not recommended.

ImportantIt is also important to add that password-protecting your webroot (the www directory) will lead to inability of your website to be displayed directly.

Change the Administrative Username of Your Joomla website


By default your administrative username is admin. The majority of the attackers would expect the username to be admin. Changing it will protect you against many attacks.
To do this, you should:

 Step 1. Log in to the Joomla administrative area and click on the User Manager menu.


 Step 2. Click on your administrative user in order to edit it. You can either check the box next to the user and click the "Edit" button or directly click on the user's full name.


 Step 3. In the next page you should edit the Username field. Change it to something different than "admin" and click on the "Save" button.


Alternatively, you can do this by modifying the database of your Joomla website:

 Step 1. Open the phpMyAdmin tool in your cPanel and load your Joomla database.

 Step 2. Select the jos_users table from the left column and click on the Browse button to edit the rows in it.


 Step 3. Locate the line for the "admin" username and click on the pen icon next to it to edit it.


 Step 4. Change the value of the "username" field to something different than "admin". Using lower and upper case characters as well as numbers is highly recommended.

 Step 5. Once you change your administrative username, press the Go button at the bottom right part of the page.


Now you can login to the administrative area of your Joomla application with the new username.

Sunday, March 17, 2013

Change/Remove Administrator Page Footer


On standard package installation, Joomla displays some description on their footer in administrator page.  In some versions, it says "Joomla is free software ...." and also display the version being used.
You can change/remove in some steps :

1. Go to
   - /administrator/templates/(name of template being used)/login.php 
   - /administrator/templates/(name of template being used)/cpanel.php
   - /administrator/templates/(name of template being used)/index.php
2. Open file and edit/remove the bottom code (on <div> footer </div>) then save it

* do it on each administrator templates



Saturday, March 16, 2013

Change Admin Login Logo (Lock)



If you wish to change padlock image on Joomla Administrator Page, you can change this with some steps :
1. Open Administrator directory
    Joomla 1.5 :
     /administrator/templates/(name of template being used)/images/j_login_lock.jpg    

    Joomla 1.7-2.5     
    /administrator/templates/(name of template being used)/images /j_login_lock.png
2. Open and edit the image with exact size and save on its place