Introduction
Basic Concepts
Understanding Routing
Intercepting Requests
Module Fundamentals
Database Operations
Templates
Helpers
Form Handling
Form Validation
Working With Files
Image Manipulation
Working With Dates & Times
Language Control
Authorization & Authentication
Hiding The Admin Login URL
When you initially install Trongate, your admin login URL is:
https://yoursite.com/trongate_administrators/login
The following shorter URL also works:
https://yoursite.com/tg-admin
Hackers know this. You do not want them knocking.
So, let us fix it.
Step 1: Pick your secret word
Choose something random but memorable. No spaces. No special characters. Use a single, made-up word that you can remember.
Example:
fantasticola
Your new admin login URL becomes:
https://yoursite.com/fantasticola
Step 2: Update custom routing
Open config/custom_routing.php. You should see something like this:
<?php
$routes = [
'tg-admin' => 'trongate_administrators/login',
'tg-admin/submit_login' => 'trongate_administrators/submit_login'
];
define('CUSTOM_ROUTES', $routes);
Replace both occurrences of tg-admin with your secret word. For example:
<?php
$routes = [
"fantasticola" => "trongate_administrators/login",
"fantasticola/submit_login" => "trongate_administrators/submit_login"
];
define("CUSTOM_ROUTES", $routes);
Step 3: Lock the back door
Open:
modules/trongate_administrators/Trongate_administrators.php
Around line 12 you will see this commented line:
//private $secret_login_segment = "tg-admin";
Uncomment it and replace tg-admin with your secret word:
private $secret_login_segment = "fantasticola";
Congratulations!
Now:
trongate_administrators/login- returns 404.tg-admin- no longer works.- Only your secret URL (
fantasticola) grants access.