Search code examples
codeigniterauthenticationion-auth

ION Auth Default URL and Controller

I am using the ION Auth library for Codeigniter. For security purposes, should I change the default URL/Controller from "/auth" to something that's unknown and more difficult to guess?

Solution

  • The "default controller exists purely as an example, you should not assume it is perfect.

    That said changing it would be pointless. As soon as you provide a "login" link you would be telling people where it is...

    The salts and encryption should be strong enough to keep people out. If you are REALLY worried about security, set up HTTPS.