Using a Custom Admin URL
As a security best practice, Magento recommends that you use a unique, custom Admin URL instead of the default “admin” or the often-used “backend,” Although it will not directly protect your site from a determined attacker, it can reduce exposure to scripts that try to break in to Magento sites.
Check with your hosting provider before implementing a custom Admin URL. Some hosting providers require a standard URL to meet firewall protection rules.
In a typical Magento installation, the Admin URL and path is immediately below the Magento base URL. The path to the store Admin is one directory below the root.
-
Default Base URL http://yourdomain.com/magento/
-
Default Admin URL and Path http://yourdomain.com/magento/admin
Although it is possible to change the Admin URL and path to another location, any mistake removes access to the Admin, and must be corrected from the server.
As a precaution, do not try to change the Admin URL by yourself unless you know how to edit configuration files on the server.
Method 1: Change from the Magento Admin
| 1. | On the Admin menu, select System > Configure. |
| 2. | In the panel on the left, under Advanced, select Admin. |
| 3. | Click to expand the Admin Base URL section, and do the following: |
| a. | Set Use Custom Admin URL to “Yes.” Then, enter the Custom Admin URL in the following format: |
-
http://yourdomain.com/magento/
Important! The Admin URL must be in the same Magento installation, and have the same document root as the storefront.
| b. | Set Custom Admin Path to “Yes.” Then, enter the name of the Custom Admin Path in the following format: |
-
backend
| 4. | When complete, click the Save Config button. |
After the changes are saved, you must log in to the Admin using the new Admin URL and path.
Method 2: Change from the Server Command Line
| 1. | Open the app/etc/local.xml file in a text editor, and change the name of the [admin] path. Make sure to use only lowercase characters. Then, save the file. |
On the server, the admin path is located in the app/etc/local.xml file. Look for the <adminhtml> argument in the <admin> section:
-
Default Admin Path # <frontName><![CDATA[admin]]></frontName>
-
New Admin Path # <frontName><![CDATA[backend]]></frontName>
| 2. | Do one of the following methods to clear the Magento cache: |
- On the Admin menu, select System > Cache Management. Then, click the Flush Magento Cache button.
- On the server, navigate to the
var/cachefolder, and delete the contents of thecachefolder.
Was this helpful?
A quick rating takes only 3 clicks. Add a comment to help us improve Magento even more.