now.. i give you the choice:
1. do a php mod in your admin files so you can still use the session hash but if an admin that is not created by you wants to edit any of the atributes of any admin, will get a nice error message.
2. secure the folder with unique passwords. in this way nobody but your designated users will have access to the folder.. any file will be locked until you enter the right password. that's the one i like the most. the only disadvantage is that you have to ener your password twice. if u care about security, go for the second option.
|