UBB.Developers Forums UBB.classic V6 Mod Questions Security Risk?

Is it somehow possible to change the name of the Control Panel file (cp.cgi)?
It seems like a security risk not to be able to change the filename. I really don't want my moderators (or anyone who knows anything about UBB) to have access to that page.

Not as good as changing the name of the file, but I did manage to hack the code so no one but myself can access the control panel - not even other administrators.

In cp_lib.cgi:

----Find:

$public_name = $profile[15];
if ($public_name eq "") {
$public_name = $profile[0];
}

----Add Below It:

if ($public_name ne "YourPublicNameHere") {
$profile[8] = "Moderator";
}


----Find:

if (($profile[8] ne 'Administrator')) {
print qq%Content-type: text/htmlnn%;
&StandardHTML("Sorry, you are not an administrator, so you may not gain access to the control panel.");
}

----Change To:

if (($profile[8] ne 'Administrator')) {
print qq%Content-type: text/htmlnn%;
&StandardHTML("Sorry, you are not Lead Administrator, so you may not gain access to the control panel.");
}

heh thats really paranoid. you still have to be an admin to use it (or mod i suppose) its not like anyone that knows the name of the file can use it. i guess thats a good enough solution if you dont want anybody but you using it.

use .htaccess password protection. I use it and it worked well for me without any problems.

just be sure to use different username and password.