I had a member brag he found the admin login page. I checked and sure enough you can go to the /forum/admin.asp and get the login page. I would like to see admin.asp file part of the common file so we can change the location of the admin login page.
Until then I would like to make the admin.ap point to a fake file name so it will get the oops page. Only a admin that is loged into the forums will see the admin.asp login page once they click the admin link.
I also changed the common.asp file and the db files to
common.asp file - line 4
<!-- #include file="_xyz_folder/xyz_filename.asp" -->
database_connection.asp or now the new xyz_filename.asp - line 63
<!-- #include file="xyz_settings.asp" -->
Topic Options
Post Options
Thanks(0)
