CMS prefix for URL to avoid top-level URLs being reserved for Concrete5
Permalink 5 2 Browser Info Environment
Where Concrete5 is used as a public facing CMS with pretty URLs where all maintenance occurs from internally Concrete5 still reserves commercially valuable URLs. I cannot underline enough how commercially sensitive urls like /account are.
For instance:
/dashboard
/login
/register
/account
These URLs should be usable by the end-user for their own pages/systems.
I propose all admin URLs such as the above AND:
!drafts
!trash
!stacks
Should be under an additional path element. This path element should be user-defined through the admin pages. This provides a minor security advantage (remembering that obscurity is not security) as different websites will not necessarily be running the same URLs. It additionally allows easier securing admin access on the CMS by only requiring a single rule in server configurations (such as Apache).
Thus we could specify all C5 admin should be under /cms of our website. Thus our own website (with pretty urls) can usehttp://example.com/login and Concrete5 usehttps://example.com/cms/login...or... evenhttps://example.com/8cf3ee9/login...
Thus instead of replacing index.php with nothing, the pretty URLs can replace it with an optional prefix.
For instance:
/dashboard
/login
/register
/account
These URLs should be usable by the end-user for their own pages/systems.
I propose all admin URLs such as the above AND:
!drafts
!trash
!stacks
Should be under an additional path element. This path element should be user-defined through the admin pages. This provides a minor security advantage (remembering that obscurity is not security) as different websites will not necessarily be running the same URLs. It additionally allows easier securing admin access on the CMS by only requiring a single rule in server configurations (such as Apache).
Thus we could specify all C5 admin should be under /cms of our website. Thus our own website (with pretty urls) can usehttp://example.com/login and Concrete5 usehttps://example.com/cms/login...or... evenhttps://example.com/8cf3ee9/login...
Thus instead of replacing index.php with nothing, the pretty URLs can replace it with an optional prefix.
Status: New
