Drawback:

Joomla! ® has one drawback, any web user can easily know the site is created in Joomla! ® by typing the URL to access the administration area (i.e. www.site name.com/administration). This makes hackers hack the site easily once they crack id and password for Joomla! ® .

Information:

jSecure Authentication module prevents access to administration (back end) login page without appropriate access key.

1. Login to administration area.
2. Unzip the downloaded file.
3. Go to Installer -> select the jSecure as per Joomla! ® version.  
4. Select the jsecure_joomla1.5.x.zip for Joomla! ® 1.5.x or jsecure_joomla1.6.x.zip for Joomla! ® 1.6.x
5. Click on Install & upload.

Once the plugin is installed there are few manual steps which needs to be followed to make the plugin work:

1. Login to Administration area
2. Go to the Plugin Manager
3. Enable the System - jSecure Authentication plugin
4. Go to the jSecure Authentication component configuration in components>jSecure Authentication and set the parameters if you like. By default jSecure is set up so that you will need to enter a secret key that will serve as the new administrator URL. The default key to access login page is "jSecure", so if your website is www.website.com then the new URL for the Joomla! ® administration would be www.website.com/administrator?jSecure. Make sure you change the default key!
5. You can also set jSecure Authentication to display a custom form on the administrator page instead of a new URL. If you choose this option then you will still access your administration area with the default URL of /administrator. However, you will have a new login page where you will need to enter the jSecure key.
6. Make sure that you set the "enabled" field to "Yes" otherwise jSecure will not be activated.

Note: The key is case sensitive and can **ONLY** contain alphanumeric values. PLEASE don't use numeric values

How to Use jSecure Authentication:

By default the component is set to replace the default Joomla! ® URL with one that you will set with this component. For example:

http://www.site name/administrator/?keyname

keyname: key name is the key specified in the jSecure Authentication component.

You can also choose to maintain the default Joomla! ® administrator URL and to add an extra login form) If you choose this option, then the Key will become the new password for the form. Once the key has been entered in the new form, the user will be directed to the administrator page.

COMPONENT PARAMETERS:

jSecure Authentication component provides following parameters:

Enable: For jSecure to be activated set this to yes and go to the plugin manager and set the jSecure plugin to "enabled".

Pass Key: Select whether you want jSecure to create a new URL for the admin area (most popular) or if you want to create a second administrator login form (the "form" option).

Key: This is secure key which will be used to grant access to administration area. If you chose the URL option (most popular) then the new URL for your administration area will be http://www.site name/administrator/?keyname. You set the Keyname by inputing your new key in the Key field. The key is case sensitive and can **ONLY** contain alphanumeric values. PLEASE don't use purely numeric values.

Redirect Options: This parameter specifies what action to take if the key does not match. There are two choices:

• Redirect to index page: Redirect unauthorized user back to home page
• Custom Path: Provide relative path to custom page, for example 404 page not found.

Send Mail: You can set jSecure to email on or more email addresses with an alert if someone tries to unsuccessfully access the Joomla! ® administration area.

Send Mail Details: You can have jSecure mail the wrong Key that was used, the correct Key, or both.

Email Ids :If you chose the "Send Mail" option, then enter the email addresses here. Separate multiple emails with a comma.

Email Subject: Choose an email subject for the email alert.

Blocked IPs/ White Listed IPs: User can choose the options to configure with blocked IPs or white listed IPs.

Add a new IP address to the list: User friendly to add the IPs.

IP addresses: Displayed the added IP addresses.

Enable the Master Password: To prevent the access from change the configuration of jSecure Authentication.

Master Password: Configure the master password to prevent from accessing.

Master Password Send Mail: To send the mail when admin change the any configuration of jSecure Authentication.

Master Password E-Mail Subject: Configure the subject of email.

E-Mail Id: Add the email id where you get the mail when any changes happen in configuration of jSecure Authentication.

1.0: Initial Version 1.0.1:
Fix for J1.5 Native

1.0.2(30-Aug-08):
Fix for J1.5 params (Thanks to Christer)

1.0.3(15-Sep-08):
Fix for J1.5 call to admin login page using index2.php, please update your copy of jSecure Authentication.

1.0.4(26-Sep-08):
Fix for J1.5 to use proper custom tag and fixed a php error.

1.0.5(16-Oct-08):
Fixed redirection issue.

1.0.6(23-Dec-08):
Fixed security bug. Updated the readme file.

1.0.7(21-Mar-09):
Fixed the code for redirection.

1.0.8(02-Jun-09):
Fixed the case sensitivity check.

1.0.9(10-Jun-09):
Fixed warning message.

2.0(01-Apr-10):
Added new features

2.0.1(14-Apr-10):
1. Optimized the code.
2. Fixed the IP issue in mail.
3. Added Licenses information in files.

2.1.0(19-Apr-10):
Fixed security bug.

2.1.1(31-May-10):
1. Added Master Password to access the jSecure Authentication.
2. Added E-mail option to send the change log in jSecure Authentication.
3. User can choose from White Listed IPs / Blocked IPs.
4. User Friendly option to add ip address.
5. Enter specific IPs(White Listed IPs) that will allow access to administration area.

License: This is free software and you may redistribute it under the GPL. jSecure comes with absolutely no warranty. Use at your own risk. For details, see the license at http://www.gnu.org/licenses/gpl.txt Other licenses can be found in LICENSES folder.