Protecting the Forum/admin folder

Involved Joined: Feb 08, 2005 Posts: 290 Location: USA

Thanks alot Guardian ... worked great! A couple more questions:

1) Should I cPanel pw protect any other nuke directory?
2) What login/pw should I use for the folders? Same as what I used for nuke admin?
3) For .htaccess, .staccess and ultramode.txt, do those still need to be 777 or can they be something else? I change them to 777 and within 24 hours they're reset, I'm contacting my host about the problem now but just wanted to know if 777 is a must of if it can be something else after I've gotten everything set up and working right and hopefully secure?

Thanks!

Posted: Sun Sep 03, 2006 2:35 am

1 No
2 Anything you can remember but preferably use a password that you have not used before.
3 See the How to Install instructions.
.htaccess does not need to be 777 - use the lowest setting that still allows Sentinel to write to it (it may vary from server to server.
.staccess does not need to be written to once you have the password protection set up in Sentinel
ultramode only needs to be 777 if you are using it.

registered · Posted: Sun Sep 03, 2006 8:24 am

Regarding 3), once the files are created, then can be 666 I believe... Not sure about "ultramode", but to be honest with you, I see no value in using it. You can turn it off in the Admin --> Preferences.

Posted: Mon Sep 04, 2006 1:06 pm

I put in my nuke username & pw and I do get prompted to enter those now but when I go to delete a post which is an Admin only function I get a page that says only Admin can delete ... I'm logged in under Admin so I shouldn't be getting that ... do I need to make sure all Admin accounts are in .staccess as in the normal nuke .staccess?

Posted: Mon Sep 04, 2006 3:21 pm

Your problem has nothing to do with htaccess or staccess files.
If you are getting an eror message to the effect that only admins can delete posts then you need to make sure you are logged in as an admin via the www.yoursite.com/admin.php log-in.
If that doesnt work then you need to look in the forum admin area to see why your username is not assigned as an admin which it should be.

Posted: Mon Sep 04, 2006 3:40 pm

I am logged into admin correctly. I am also showing in forums as admin ... I've only had this problem since doing the suggested above.

Posted: Mon Sep 04, 2006 5:09 pm

I'm not seeing this issue on my own RN test site.
The only way I can reproduce this is by adding password authentication to the admin file not the admin folder.

Worker Joined: Jan 17, 2007 Posts: 170

How do I know if its working.

I have added the .staccess and .htaccess files and set the setting 'Admin Auth' to: CGIAuth in nuke sentinel.

Is it supposed to ask from the password a second time. I have loaded /mysite/admin.php but nothing seems different.

Posted: Wed Feb 07, 2007 11:42 am

I believe this thread is about protecting the Forums admin folder.
If you can post in the Nuke Sentinel forum as your post was about that, we can keep things clean and hopefully you'll get a faster response Smile

Posted: Wed Feb 07, 2007 4:23 pm

Ah my mistake I was thinking of the nuke admin folder. however I would also like to protect my forum admin folder too, so I'll give this another go and place the files in there and see what happens.