First of all - I LOVE this extension. It was easy to install and easy to use and works perfectly. My admin site is completely hidden from the world and works flawlessly otherwise....but just one small issue. It wont let me logout of Admin. It just sits there. When I turn the plugin off, I can logout easily. When its on, no joy.

But Still - Love it. I'll wait for a patch?

This is a MUST HAVE security feature for anyone operating a Joomla site, especially one with lots of traffic and community users. It helps me sleep at night. With this module you can choose a secret keyword (of any complexity) to change the location of your Admin page:
www.mysite.com/administrator/?mysecretkeyword

Up until now, I always had to worry about someone easily locating the default Admin page. Now I sleep easy knowing that I have made it even harder for any would-be hacker to mess with my site.

I like that you can set the "404 Error" page to either a custom 404 page or redirect the hacker directly to the front page of your site.

My advice for anyone using this is to always use an ALPHANUMERIC keyword combination and change that keyword periodically. Don't end up in the forums saying "My site was hacked!"

And make sure to write down your keyword! You won't get back into your admin screen without it!

This is a NEEDED security plugin... I Love it! I installed [and YES READ the instructions!!] and it works like a charm.. I would HIGHLY suggest you get this one!

Anyone that make a living of setting Joomla and has got his sites hack will love this line of defense. Having exposed the folder /administrator/ have become more like a nightmare in today’s internet environment so masking and redirecting to a 404 the regular access is a plus. The only thing to make this a perfect plug-in is some sort of SSL support to exchange passwords encrypted.

Keep the good work guys.

Simple yet effective. Makes the site a bit more fun when the obvious is hidden.
thanks for your work on this plug-in.

Something you normally don't think about. I love it and now I feel its really necessary plugin. I would consider it MUST HAVE plugin. But remember understand the plugin first before you activate it cause i got really panic when i couldn't get into my joomla login page. later i realized It was easy to get in. just write www.yourDomainName.com/administrator/?yourKey and that it!

NICE WORK!!

The issue that this plugin solves so elegantly and simply is one that has always concerned me since I started developing with Joomla! What is even more amazing is the fact that so many "Joomla! Website Design" sites do NOT have this must-have plugin installed!

As others here mentioned, use a plain, generic 404 redirect; do not give away any more info than required. My hosting provider has their own so that's the one I redirect to; looks "legit" :)

Very simple to implement. I think this extension is going to be added to my list of "Must Haves" for all my Joomla sites. Thanks!!!

This is a very good plug-in, and does exactly what it says; however, for me, it may turn out to be useless. I have many people who contribute content to my site, and so I would have to widely distribute the keyword over open channels. Also, I'd probably have to periodically change the password, and so the task of distribution would never go away.

So, I am going to look in to other solutions to avoid this problem.

Very easy to use - Very quick set up Thanks for this amazing Plugin ;0)

simplifies the process of doing this with .htaccess, which has other problems as well...

WARNING: If you create a custom redirect (like mistabasta) to a "scary" warning page to people who try to access /administrator, all you are doing is telling them you are indeed using Joomla, if they don't already know, and they may guess you are also using jSecure. Don't feed crackers with information.

***You are always MORE secure when crackers know LESS about your system.***

Hides your site's login url perfectly.

On the plugin config I used a default url of:

/404.html

instead of the the plugins' 404 url. This redirects to the default site 404 instead of the custom jSecure 404.html.

Otherwise the browser shows the full plugin path which might give an attacker a clue about your site.

Easy installation and setup.

Read the notes at the developers' site and you won't run into any problem.

The only thing I changed (except from the standard code :D) is I created a 'scarier' warning page, instead of the default page 404 redirection.

Very smart plugin. HIGHLY RECOMMENDED!

Thank you guys! Your component its really great! I had 2 hacker attack and JFirewall protect my site! Its fantastic! I recommend 100%.

Maribel

I had this thing up and running in seconds. It certainly adds an extra little bit of security.