Results 1 to 4 of 4

possible to rename vbseocp.php file

This is a discussion on possible to rename vbseocp.php file within the General Discussion forums, part of the vBSEO SEO Plugin category; Is it possible to rename the vbseocp.php file? Any forum that has vbSEO installed, would be rather easy to locate ...

  1. #1
    Senior Member
    Real Name
    dave
    Join Date
    Jun 2006
    Posts
    348
    Liked
    0 times
    Blog Entries
    1

    possible to rename vbseocp.php file

    Is it possible to rename the vbseocp.php file?

    Any forum that has vbSEO installed, would be rather easy to locate the CP, and simply try to brute force it.

    Not that much harm can be done, its just the headache that would be caused from the whole thing.

  2. #2
    Senior Member
    Real Name
    Future
    Join Date
    Mar 2006
    Posts
    579
    Liked
    1 times
    Blog Entries
    1
    good request..
    | F | U | T | U | R | E |

  3. #3
    vBSEO Staff Oleg Ignatiuk's Avatar
    Real Name
    Oleg Ignatiuk
    Join Date
    Jun 2005
    Location
    Belarus
    Posts
    25,741
    Liked
    168 times
    This is currently not supported. You can use the following in .htaccess though:
    Code:
    <Files vbseocp.php>
    deny from all
    allow from YOUR_IP_HERE
    </Files>

  4. #4
    Member
    Join Date
    Sep 2005
    Posts
    50
    Liked
    0 times
    Here's something I am using

    Code:
    # deny access to it directly unless referer is correct
    RewriteCond &#37;{HTTP_REFERER} !^http://(www\.)?YOURDOMAIN\.com/ [nc]
    RewriteRule ^vbseocp\.php$ http://www.YOURDOMAIN.com/ [R=301,L]
    
    # initial request should be from seocp.php
    RewriteRule ^seocp\.php vbseocp.php?$1
    I'm not good with rewrite to throw 404 error and still look 'normal' per rest of your site, so someone else can fix that, maybe. But in all cases, if someone punch in the URL http://www.yourdomain.com/vbseocp.php, it would redirect them back to your domain. If they punch in seocp.php, then they get the login screen. All requests there after (due to hardcoded post link) will be sent to vbseocp.php. But since the post data have a http referer data from your domain, it'll get through just fine.

    I placed that code above the sitemap rewrite line and below RewriteBase line, but it should work as long as you place it before the last set of RewriteRule and Condition which directs everything to vbseo.php.

    A problem with this is if someone post a link on your forum which points to vbseocp.php (which, can be stopped by making yourdomain.com/vbseocp.php a replacement variable that replaces it into something else) then it'll be just fine... or at least it should be.

Similar Threads

  1. Hotlink Protection Tutorial (Apache Server - .htaccess files)
    By NeutralizeR in forum Member Articles
    Replies: 15
    Last Post: 06-08-2011, 02:25 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •