Sitefinity admin security

Posted by Community Admin on 03-Aug-2018 14:02

Sitefinity admin security

All Replies

Posted by Community Admin on 26-Jun-2013 00:00

I found the following in the Sitefinity Security and Best Practices white paper and have a few questions about it:

Define the IP range that is allowed to access Sitefinity’s back-end and lock the ~/Sitefinity folder by IP. Since ~/App_Data/Sitefinity is mapped to the /Sitefinity virtual folder you can either change this virtual mapping or transfer all public resources (static CSS, JavaScript and images) to a folder different from this one.

First, how would we change the virtual mapping?

Second, it seems that this is suggesting moving the theme folder from out of the /App_Data folder, but every post I have found for Sitefinity 5+ says to put the App_Theme folder at ~/App_Data/Sitefinity/WebsiteTemplates/[TemplateName]/. If it is recommended that these files are not in that folder, why do all of the instructions say to put them there?

Posted by Community Admin on 01-Jul-2013 00:00

Hi,

Regarding your first questions I would suggest you to review this KB article:


support.microsoft.com/.../172138 

There is no problem to register a different path for your themes. In our documentation:

www.sitefinity.com/.../registering-a-theme

we have given a sample with:
/App_Data/Sitefinty/WebsiteTemplates/YourTemplate/App_Themes/YourTheme

App_Data and App_Theme are NET application folders and this is the reason why we recommended placing the theme inside these folders.

You could find useful information regarding these folders in the URL below:
http://www.codeproject.com/Articles/31557/A-Beginner-s-Guide-to-ASP-NET-Application-Folders

However, this path might be different. Please note that once you have register a theme using the path above and you decide to move the theme, you need to go to App_Data -> Sitefinity -> Configurations, open AppearanceConfig.config file and change the path of the theme. (The other option that you have is to change it from the backend of Sitefinity Administration -> Settings -> Advanced -> Appearance -> Frontend themes).

Regards,
Stefani Tacheva
Telerik
Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items

This thread is closed