I had already seen that pdf, you may be right that the app settings and renaming of Umbraco folder will do the job, just thought with Umbraco 8 it may be done differently.
Renamed the Umbraco folder to "backoffice" and added the recommended app settings as per "https://our.umbraco.com/documentation/Reference/Security/Security-hardening/"
Umbraco assets still pointing to the Umbraco folder despite the recommended changes being made.
This should actually be included in the configuration somewhere , so nothing breaks when the folder name is changed . For example if in my webconfig I name the folder BlahBlahBackend , everything should use what I changed it to , Developers of modules should be made aware to look at the web.config for that value and use it so all modules should be reading that element to know the folder , so if I have an add in it can acquire the folder name and copy to it.
All css and script references through out the code should reference it via its alias from the config file.
Reading about the hardening rule it seems some of this basic stuff is missed.
Thats the basics. You can of course add in all the rewrite options in there to do that if you wanted that. We just do it mainly for client migrations from other platforms when they are used to doing something like /admin.
Change back office url Umbraco 8
Dear Umbraco Team
How can you change the url to the back office in Umbraco 8 ?
like in Umbraco 7
Thanks Dibs
Hi Dibs,
I didn't test it but in 8 you have those appSettings:
You have to rename the umbraco folder as well. For more information see;
https://www.perplex.nl/media/107928/codegarden-18-umbraco-security.pdf
Hi Erik-Jan
I had already seen that pdf, you may be right that the app settings and renaming of Umbraco folder will do the job, just thought with Umbraco 8 it may be done differently.
reminder to self, read web.config file : (
Dibs : )
Hey, did you get this to work ? :) I change the values in
But the path for font en BO text are not changed
Hi Thomas
The following are my changes in the web.config
link to back office on local dev becomes
http://localhost:1234/DibsUmbraco
Dibs
Found that this breaks the following:
Renamed the Umbraco folder to "backoffice" and added the recommended app settings as per "https://our.umbraco.com/documentation/Reference/Security/Security-hardening/"
Umbraco assets still pointing to the Umbraco folder despite the recommended changes being made.
This should actually be included in the configuration somewhere , so nothing breaks when the folder name is changed . For example if in my webconfig I name the folder BlahBlahBackend , everything should use what I changed it to , Developers of modules should be made aware to look at the web.config for that value and use it so all modules should be reading that element to know the folder , so if I have an add in it can acquire the folder name and copy to it.
All css and script references through out the code should reference it via its alias from the config file. Reading about the hardening rule it seems some of this basic stuff is missed.
I have been just doing a rewrite rule int he web.config
Doesn't that rewrite rule still allow for the path myWebSite/umbraco ?
The whole point is to name it something inconspicuous so your average hacker does not come and start Hacking..
Thats the basics. You can of course add in all the rewrite options in there to do that if you wanted that. We just do it mainly for client migrations from other platforms when they are used to doing something like /admin.
is working on a reply...