Admin link in navbar should be disabled by default.

[rollthebones]

For people who are too lazy to turn this off, it just screams "Hack me!". I think it should not be in the navbar by default.

[zzbomb]

I rather like it

Lets new people to script know how to get to admin, and it's super easy to remove. due to menu manager

[KuJoe]

I agree with rollthebones. It's usually the first change I make is to remove it.

[Kevin]

I agree, but honestly, /admin/ is guessable. And if you can "hack" the client area, chances are you can use a similar exploit on the admin form.

[rollthebones]

I suppose, but if MyBB had a visible "Admin" button for guests, its hack rate would probably be higher.

[Kevin]

(04-18-2010 04:48 PM)rollthebones Wrote:  I suppose, but if MyBB had a visible "Admin" button for guests, its hack rate would probably be higher.

I doubt it. MyBB is fairly popular and anybody that has the intention of exploiting it knows its default admin directory. MyBB does let you change the name of it, however.

[KuJoe]

.htaccess FTW!

[Kevin]

(04-18-2010 05:11 PM)KuJoe Wrote:  .htaccess FTW!

it's a configuration value.

[Jonny]

THT would also allow custom directory naming as there is nothing minus the navbar hard coded for it. This is ofcourse if you like obsessive security.

[KuJoe]

(04-18-2010 05:12 PM)Kevin Wrote:  

(04-18-2010 05:11 PM)KuJoe Wrote:  .htaccess FTW!

it's a configuration value.

I'm taking about password protecting the whole /admin/ directory with .htaccess for those paranoid about security.