'Copyright'

[derfy]

Have an .htaccess file password protect the AdminCP and ModCP. That sorts that problem out.

Rename them, also. I think that's the best you can do.

[Floris]

Yep, I don't mind the copyright at all, but I do like to keep things clean and I also remove the <br /> so everything is on one line.

[JakeS]

The point is if you remove the version number you also remove a (very small) security risk that someone will visit your forum and see that you are running an out of date version and then decide on the off chance to hack you.

It still requires you to keep up to date, but makes it that little bit harder to find what version you are running. Whether or not it makes much of a difference is not really the point. Why have a sign on your front door saying your out for the day when you could just leave the house without anything on it at all.

removing version number just makes us wonder what version your using say like one of us couldn't hack 'the latest' and you have an older version, we would be able to say look at that i can hack that version so removing version number can help slightly.

[Floris]

And hackers can still go to modcp/ to find the version number or open one of the .js files.

[JakeS]

also gives makes them wonder what version your using so they hack you to find out, but you could go to modcp etc but, if you .htaccess protect it its still easy because then they just find the .htpsswd file and decript the password .

[Floris]

I highly doubt they can just download the .htaccess and .htpasswd file. Especially the latter is a file you don't have to save in the same dir but somewhere outside the public html directory.

Adding .htaccess to your modcp/ and admincp/ and removing the install/ directory is a good additional security layer.

[JakeS]

Indeed, but being a white hat hacker (dont do any damage) its still pretty easy to get to those files.

[Icheb]

also gives makes them wonder what version your using so they hack you to find out, but you could go to modcp etc but, if you .htaccess protect it its still easy because then they just find the .htpsswd file and decript the password .

You can't download .ht* files in the first place. And even if you could, you can't "decode" password hashes. But please, go ahead and hack those sites if it's so easy.

[JakeS]

You can't download .ht* files in the first place. And even if you could, you can't "decode" password hashes. But please, go ahead and hack those sites if it's so easy.

don't ask me to hack sites because when people ask me to hack something i hack them instead.

[Icheb]

First of all, it was sarcasm. And if you are such a great hacker that you hack sites all the time, you should know that you can't download .ht* files.
Btw, you should do something about your ego problems.

[JakeS]

I Never said download them.

i said view them.

ie in there cpanel etc.

and i never said i hack all the time.

[Icheb]

Why do you need to view the .htaccess file and "decode" the passwords to that account if you already have access to cpanel?

[melefire]

Why do you need to view the .htaccess file and "decode" the passwords to that account if you already have access to cpanel?

Agree, if you want to destroy there site and you have accses to there cPanel why not just delete there database?

And ~Biker~, hacking is not nice!!

[JakeS]

When you go to cpanel you click cancel on the .htaccess one, and then takes you to the login error page which has a login part so you just crack that haha

you view htaccess to find out where .htpsswd is ie it would be like this most of the time

AuthGroupFile /dev/null
AuthName "Admin's Only"
AuthType Basic
AuthUserFile /home/*****/*******/*******/.htpasswd/******/******/.htpasswd
require valid-user

[JakeS]

Agree, if you want to destroy there site and you have accses to there cPanel why not just delete there database?

And ~Biker~, hacking is not nice!!

Because A , thats not my catagory, and B its to easy that way.