Thread

Just curious as to what developers name their system directory to?

Do they use some name thats almost impossible to guess, with random long characters and numbers, easy words, underscores, or just something not too complicated?

And how many times do you rename the system dir in a year?

I change it to something easy to remember, but not guess—like a person’s name that has nothing to do with anything.

I don’t rename periodically.

PS - Shouldn’t this be in a different forum than tech support? Just sayin’.

I name mine something relevant to the domain name, or site I’m working on.
For instance, when I followed the tutorial at train-ee, I named my system dir ‘_jesus’.

I use the underscore, and that always puts that folder first when viewing via ftp, etc.

OrganizedFellow, thats a good tip. Ill keep the underscore in mind

I moved that thread to “General”, as it’s not really a Tech Support issue. That said, yes, it’s totally up to you: something short and easy to remember but hard to guess would be best 😊

If you have a password strong enough you don’t really need to rename it. But then again, the effort needed to rename the folder is so little, so why not 😊 .

I picked a random obsolete former random-string auto-generated password from more than ten years ago. I figure if it kept that account secure as long as it did, it can keep my EE system folder secure now.

I’ve seen everything from “system” to I think a 20+ digit random string of characters.  I’m somewhere in between. 😉

The idea of naming it with an underscore as the first letter is interesting.. I use admin.php to mask the path to the directory anyhow.

The idea of naming it with an underscore as the first letter is interesting.

Thanks!
😊

I use admin.php to mask the path to the directory anyhow.

Could you explain how you do that?

I use admin.php to mask the path to the directory anyhow.

Could you explain how you do that?

Let’s consult the docs: http://expressionengine.com/docs/installation/masked_cp_access.html

If you’re really paranoid, block access to the normal CP completely and run a masked version on an IP that’s only accessible on an authenticated VPN or SSH tunnel. Gives you some peace of mind of you must access the CP from insecure networks like a hotel network or a wireless hotspot.

If the site is internal to a business and behind a firewall, I generally either leave the foldername as system or make it a simple word. If it’s a public-facing site, I make it more complex and randomly generated. Most of the time, once I have it set, I don’t have to deal with it much afterwards anyway.