Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Dibs 174 posts 858 karma points
    Aug 02, 2019 @ 10:21
    Dibs
    0

    Change back office url Umbraco 8

    Dear Umbraco Team

    How can you change the url to the back office in Umbraco 8 ?

    like in Umbraco 7

    <add key="umbracoReservedPaths" value="~/customPath,~/install/" />
    <add key="umbracoPath" value="~/customPath" />
    

    Thanks Dibs

  • Erik-Jan Westendorp 29 posts 282 karma points MVP c-trib
    Aug 02, 2019 @ 11:15
    Erik-Jan Westendorp
    101

    Hi Dibs,

    I didn't test it but in 8 you have those appSettings:

     <add key="Umbraco.Core.ReservedPaths" value="" />
     <add key="Umbraco.Core.Path" value="" />
    

    You have to rename the umbraco folder as well. For more information see;

    https://www.perplex.nl/media/107928/codegarden-18-umbraco-security.pdf

  • Dibs 174 posts 858 karma points
    Aug 02, 2019 @ 12:42
    Dibs
    0

    Hi Erik-Jan

    I had already seen that pdf, you may be right that the app settings and renaming of Umbraco folder will do the job, just thought with Umbraco 8 it may be done differently.

    reminder to self, read web.config file : (

    Dibs : )

  • Thomas Hansen 192 posts 419 karma points
    Sep 03, 2019 @ 20:08
    Thomas Hansen
    1

    Hey, did you get this to work ? :) I change the values in

        <add key="Umbraco.Core.ReservedUrls" value="~/***" />
        <add key="Umbraco.Core.ReservedPaths" value="~/***" />
        <add key="Umbraco.Core.Path" value="~/***" />
    

    But the path for font en BO text are not changed

  • Dibs 174 posts 858 karma points
    Sep 06, 2019 @ 13:19
    Dibs
    1

    Hi Thomas

    The following are my changes in the web.config

    <add key="Umbraco.Core.ReservedPaths" value="~/DibsUmbraco" />
    <add key="Umbraco.Core.Path" value="~/DibsUmbraco" />
    

    link to back office on local dev becomes

    http://localhost:1234/DibsUmbraco

    Dibs

  • Dean Wiseman 21 posts 90 karma points
    Nov 05, 2019 @ 17:04
    Dean Wiseman
    0

    Found that this breaks the following:

    enter image description here

    Renamed the Umbraco folder to "backoffice" and added the recommended app settings as per "https://our.umbraco.com/documentation/Reference/Security/Security-hardening/"

    Umbraco assets still pointing to the Umbraco folder despite the recommended changes being made.

  • Ken Schnell 35 posts 145 karma points
    Jul 20, 2020 @ 15:36
    Ken Schnell
    0

    This should actually be included in the configuration somewhere , so nothing breaks when the folder name is changed . For example if in my webconfig I name the folder BlahBlahBackend , everything should use what I changed it to , Developers of modules should be made aware to look at the web.config for that value and use it so all modules should be reading that element to know the folder , so if I have an add in it can acquire the folder name and copy to it.

    All css and script references through out the code should reference it via its alias from the config file. Reading about the hardening rule it seems some of this basic stuff is missed.

  • Liam Dilley 82 posts 208 karma points
    Jun 18, 2020 @ 06:59
    Liam Dilley
    0

    I have been just doing a rewrite rule int he web.config

    <rule name="Admin redirect">
        <match url="admin" />
        <action type="Redirect" url="umbraco" />
    </rule>
    
  • Ken Schnell 35 posts 145 karma points
    Jul 19, 2020 @ 03:48
    Ken Schnell
    0

    Doesn't that rewrite rule still allow for the path myWebSite/umbraco ?

    The whole point is to name it something inconspicuous so your average hacker does not come and start Hacking..

  • Liam Dilley 82 posts 208 karma points
    Jul 20, 2020 @ 03:30
    Liam Dilley
    0

    Thats the basics. You can of course add in all the rewrite options in there to do that if you wanted that. We just do it mainly for client migrations from other platforms when they are used to doing something like /admin.

Please Sign in or register to post replies

Write your reply to:

Draft