Search code examples
phpsecurityadminuser-accounts

In what scenario is having separate login pages for users and administrators better?

I am creating my first web app from scratch using PHP. I won't be using a framework. My proposed file structure looks something like:

index.php
/images
/css
/js
/classes
/includes
/views
/modules (blog, forum, etc.)

I'm also considering including /admin maybe.

What concrete decisions/considerations do I need to make before taking an approach, i.e. choosing between {mywebapp}.com/login (for both users and admin) or {mywebapp}.com/admin (for just the administrators)? And why?

Solution 
  • /public
   /images
   /css
   /js
   index.php
/classes
/includes
/views
/modules (blog, forum, etc.)

    Your doc_root would by site-path/public.

    An admin should be a user with extra privileges. As long as your login process is secure, there is no reason for a separate admin login.