Security Settings

When you run initial setup, most of the settings have already been set. There are however a few options, settings and configurations, which you might need to adjust for final board personalization. You may easy identify whether you logged as admin, by the indicator at the top-right corner with link to Admin tasks.

But before you start board configuration, make sure to consider the following:

• Always delete the following pages from your installation before going live:
  !setup.asp, !access_setup.asp, !mssql_setup.asp, !mysql_setup.asp.
• When you have finished board configuration (or even before that), remove an "Admin" link form navigation bar, rename Admin Logon page and create a bookmark to a new page in your browser so you can easily logon to admin section of the board. Do the following:
  - Open config/config.asp in an editor
  - Change value for variable adminPage. You may give it some cryptic name. For instance: [adminPage = "foobar_area"]
  - Rename physical admin_logon.asp page to foobar_area.asp
  - Set [showAdminLink = False] in config/config.asp (this would remove "Admin" link at the top navigational menu and may be done at any time; but make sure to set it before opening your board to clients)
  - Manually navigate to foobar_area.asp in your browser and create a bookmark for this page.
  
  Note: The other setting - "Display admin menu on all administration pages" only switches on/off a drop-down menu and does not pose a security threat. If you wish not to have it, set [showAdminMenu = False] in config/config.asp.

• The content management page requires an additional logon. The initial security code logon to "Content Management" page is "admin". Make sure to change it. Open admin_template.asp page in an editor. At the top of the page change the security code: [secure_content = "admin"] to some other value. For instance:
  [secure_content = "mypassword"]. The [mypassword] is your new logon code to "Content Management" page.
• Change the Admin ID and password by going to "Admin Preferences" page, typing new ID and password in [Reset Admin ID and Password] section and then clicking [Reset] button.
  While at the "Admin Preferences" page, select the [Enable Turning Number] check box to enable turning number (requires to type a 6 digit number during user registration and ads posting - prevents automated registration and ads posting).
• In addition you may select [Enable Secure Logon] check box at "Admin Preferences" page. Secure Logon means the password will be posted to the server MD5 hashed and/or RSA encrypted with randomly generated seed/key sent by a server.
  Note: For the secure logon to work properly, it is advisable to select Admin ID/password and Users password in English. If your board is running in language other than English and you are using Secure Logon, advise your clients to use English passwords. Else, test it thoroughly making sure it functions properly under your character set.
  After you enable Secure Logon never set your Admin ID or Password to empty values. Else, you will not be able to logon anymore.