AdminExile
AdminExile has long been a favored and highly rated extension in the JED. Read the reviews and try it yourself.
Key features:
* Access key(s) - key only, or key + key value. Others provide one or the other. AdminExile provides BOTH.
* Front-end Restriction - Restrict certain accounts from logging into the front-end with accounts intended only for back-end use.
* Lost Key Recovery - Useful for individuals using extremely difficult keys, or teams who change the keys frequently.
* IP White and Black Lists - Use individual addresses, or CIDR netmasks to define your lists.
* Brute Force Protection - Penalize users who abuse your system.
* Management of blocked addresses - See a list of blacklist attempts and bruteforce attempts, as well as the ability to reset those IP addresses.
* Admin Notification - When abuse comes from a blacklisted address or brute force is detected, an administrator can be sent a notification.
* Stealth Mode - Prevents tell-tale signs that something exists at /administrator, like the session cookie!
There are far too many features to describe in this page. Visit the documentation link to get the bigger picture.
Version 2.0.0 - Massive rewrite, more features, now featuring kitten whispers - recommended upgrade!
Version 2.0.1 - resolves an issue on systems that do NOT have the GMP library (because I thought everyone had it!)
Version 2.0.2 - file missing from previous version
Version 2.0.3 - resolved issue with valueless key
Version 2.0.4 - JRequest was so much better than JInput. RIP JRequest!
All of my extensions are free and none of my extensions display advertisements or links to my sites or services. If you feel that I have blessed you, then you can bless me by making a contribution to fund future development. Visit the "Website" link to make a contribution.
this does te trick...and very well indeed.
nomore people trying to login as admin :)
i seriously hope lots of ppl will let you make extentions without buying full rights...that may sound harsh. but hey,
i really enjoy your plugins and will deffo donate when i finished this website ;)
Will use your donate button later as soon as I get the next paycheck.
How do I make money... Well, I don't - not from free extensions anyway.
Most of these extensions were built for my clients. Because they opted to NOT purchase full rights, I released them for free. So my clients paid me to create them, but they didn't pay to own them.
There are several extensions I've created that are, sadly, not mine to give away anymore.
Fast and easy. I am impressed.
Excellent point Jody -
AdminExile isn't the only thing an administrator/owner should do to secure the administrator area. It is, however, a good first step. Strong passwords should be the next consideration.
Paranoia is a good trait for webmasters.
Today when I try to log in again, I can't get the login page! (by the url cached on my firefox)
... ...
Problem solved by removing the www. on the url.
Not sure if it is because that url is itself a subdomain or why, anyway, hope this piece of infn is useful to those who encounter similar situation.
Subdomain you say... I'll look into that!
Send me a message through my site!
i have read all the coments , every one was agree this extension is perfect but i cant donwload , if some one have this for joomla 2.5 pls email to me :)
thanks for help
light_servent@yahoo.com
Click the download button on this page. You will arrive at my site on the AdminExile page. Near the bottom, press the button labeled "Download AdminExile for Joomla 1.6, 1.7 and 2.5".
You will be prompted to download "plg_adminexile_j16.zip" which works for Joomla versions 1.6, 1.7 and 2.5
You cannot paste the download URL into the extension manager.
It works as advertized, I had it up and running in less than 1 minute. I was using another extension, however the programmer failed to support J1.6~ when I made the transition, so now I only use AdminExile on all my sites.
I love the new feature in Version 1.6 - Option to use key + value.
I also use Clean Response on all my sites.
Michael Richey please keep up the great work!
I was happy to see the added feature which would allow me to block a Manager from logging into the front end (solving another of my needs), but it does not work as I expected. I'm emailing Michael for help. AdminExile still gets an Excellent rating, as the primary function works flawlessly.
Thanks!
wweb pointed out a bug with the front end restriction option which turned out to be an out-of-place quotation mark (it's always something silly/simple).
One side note: In 1.5.25 it first redirects you to your homepage and after one more try you can login in your admin backend.
It's definitely a bug and should be removed, otherwise I would say KUDOS to you guys, keep the good work!
Greetings from Croatia!
Miro
The problem you describe is caused by a Joomla bug introduced in Joomla 1.5.22. The issue is documented in the Joomla bug tracker in issues 23216 and 24976 (it's actually just 1 issue). There are several proposed fixes, but none have been implemented.
This one has been open for more than a year.
http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=23216
This one has been open for almost a year.
http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=24976
I agree that it should be removed. Unfortunately, I've done all I can to resolve it - the issue is within Joomla.
It works fine, easy to install and add a first step of security to your Joomla site.
This plugin is very simple, so there is nothing else to write.
Thanks to the author.
