Developer info: Pimcore at basilicom
This Pimcore http://www.pimcore.org plugin disables admin access on main domain and enables it on another subdomain/domain set in Website Settings.
After installing the plugin there is a new website setting available (under Settings > Website) with name subdomainAdmin. Set it to the domain that you want admin accessible from (e.g. admin.yourdomain.com).
Even though Pimcore comes with great security it still makes sense to prevent access to admin through the main domain, especially to any bots, script kiddies, ...
Add "basilicom-pimcore/subdomain-admin" as a requirement to the composer.json in the toplevel directory of your Pimcore installation. Then enable and install the plugin in Pimcore Extension Manager (under Extras > Extensions)
Example:
{
"require": {
"basilicom-pimcore-plugin/subdomain-admin": ">=1.0.0"
}
}
In case you lose access to the admin area due to misconfiguration you have two options:
- disable plugin by editing /website/var/config/extensions.xml (change the value to 0 or delete the whole line)
- remove Website Setting by deleting the corresponding row (subdomainAdmin) in website_settings table in the database
- Igor Benko igor.benko@basilicom.de
- BSD-3-Clause