Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Dibs 170 posts 834 karma points
    Aug 02, 2019 @ 10:21
    Dibs
    0

    Change back office url Umbraco 8

    Dear Umbraco Team

    How can you change the url to the back office in Umbraco 8 ?

    like in Umbraco 7

    <add key="umbracoReservedPaths" value="~/customPath,~/install/" />
    <add key="umbracoPath" value="~/customPath" />
    

    Thanks Dibs

  • Erik-Jan Westendorp 29 posts 281 karma points MVP c-trib
    Aug 02, 2019 @ 11:15
    Erik-Jan Westendorp
    100

    Hi Dibs,

    I didn't test it but in 8 you have those appSettings:

     <add key="Umbraco.Core.ReservedPaths" value="" />
     <add key="Umbraco.Core.Path" value="" />
    

    You have to rename the umbraco folder as well. For more information see;

    https://www.perplex.nl/media/107928/codegarden-18-umbraco-security.pdf

  • Dibs 170 posts 834 karma points
    Aug 02, 2019 @ 12:42
    Dibs
    0

    Hi Erik-Jan

    I had already seen that pdf, you may be right that the app settings and renaming of Umbraco folder will do the job, just thought with Umbraco 8 it may be done differently.

    reminder to self, read web.config file : (

    Dibs : )

  • Thomas Hansen 164 posts 391 karma points
    Sep 03, 2019 @ 20:08
    Thomas Hansen
    1

    Hey, did you get this to work ? :) I change the values in

        <add key="Umbraco.Core.ReservedUrls" value="~/***" />
        <add key="Umbraco.Core.ReservedPaths" value="~/***" />
        <add key="Umbraco.Core.Path" value="~/***" />
    

    But the path for font en BO text are not changed

  • Dibs 170 posts 834 karma points
    Sep 06, 2019 @ 13:19
    Dibs
    1

    Hi Thomas

    The following are my changes in the web.config

    <add key="Umbraco.Core.ReservedPaths" value="~/DibsUmbraco" />
    <add key="Umbraco.Core.Path" value="~/DibsUmbraco" />
    

    link to back office on local dev becomes

    http://localhost:1234/DibsUmbraco

    Dibs

  • Dean Wiseman 21 posts 90 karma points
    Nov 05, 2019 @ 17:04
    Dean Wiseman
    0

    Found that this breaks the following:

    enter image description here

    Renamed the Umbraco folder to "backoffice" and added the recommended app settings as per "https://our.umbraco.com/documentation/Reference/Security/Security-hardening/"

    Umbraco assets still pointing to the Umbraco folder despite the recommended changes being made.

  • Ken Schnell 31 posts 141 karma points
    17 days ago
    Ken Schnell
    0

    This should actually be included in the configuration somewhere , so nothing breaks when the folder name is changed . For example if in my webconfig I name the folder BlahBlahBackend , everything should use what I changed it to , Developers of modules should be made aware to look at the web.config for that value and use it so all modules should be reading that element to know the folder , so if I have an add in it can acquire the folder name and copy to it.

    All css and script references through out the code should reference it via its alias from the config file. Reading about the hardening rule it seems some of this basic stuff is missed.

  • Liam Dilley 78 posts 204 karma points
    Jun 18, 2020 @ 06:59
    Liam Dilley
    0

    I have been just doing a rewrite rule int he web.config

    <rule name="Admin redirect">
        <match url="admin" />
        <action type="Redirect" url="umbraco" />
    </rule>
    
  • Ken Schnell 31 posts 141 karma points
    18 days ago
    Ken Schnell
    0

    Doesn't that rewrite rule still allow for the path myWebSite/umbraco ?

    The whole point is to name it something inconspicuous so your average hacker does not come and start Hacking..

  • Liam Dilley 78 posts 204 karma points
    17 days ago
    Liam Dilley
    0

    Thats the basics. You can of course add in all the rewrite options in there to do that if you wanted that. We just do it mainly for client migrations from other platforms when they are used to doing something like /admin.

Please Sign in or register to post replies

Write your reply to:

Draft