change admincp path

[info.backstreet]

how is this possible to change admincp url?

[Mark.B]

Sorry, this is not possible in vBulletin 5.

[info.backstreet]

Sorry, this is not possible in vBulletin 5.

I see
is there any way that at least i hide version number in admincp login page?

[glennrocksvb]

vBulletin version can also be seen in the front end in vBulletin.version js variable.

[info.backstreet]

vBulletin version can also be seen in the front end in vBulletin.version js variable.

where is that variable?

[Mark.B]

The version number can be found in all sorts of places, for instance in the source code it can be found by looking at some of the Javascript URLs.

Why are you looking to hide it so keenly? It won't deter a hacker, if that's the intention.

[glennrocksvb]

View-source any page and you will see the js variable at the bottom. As Mark asked, why do you want to hide the version?

[info.backstreet]

View-source any page and you will see the js variable at the bottom. As Mark asked, why do you want to hide the version?

Yes it's for security, every version of vbulletin has specific security bugs
so can i hide it?

[glennrocksvb]

You can hide some but not all. Fot example, version in JavaScript URLs cannot be hidden.

[Mark.B]

In terms of security....what you're trying to do is security by obscurity, which is no security at all.

Hackers don't sit there checking version numbers, they'll go off and attack any number of sites they choose, in the hope that one will be successful. My site logs regularly show people attempting what I know to be exploits from early versions of vB3, despite the fact I run vB4 4.2 and 5.1. If I hid the version number visually, they wouldn't decide not to bother. It is in many cases done by automation anyhow.

Keep vBulletin up to date within its branch, be careful what modifications you install, and keep the server software up to date also. Piut your admincp behind .htaccess, make sure all staff have strong passwords and change them regularly.