Add authentication to the administration area.

[lewisgoddard]

Provide some basic password security.

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[lewisgoddard]

Maybe not? Lets not give people a false sense of security.

[lewisgoddard]

Okay, let's add some basic auth for management.

[lewisgoddard]

I keep yo-yo-ing on this. Basic auth is awful, but proper auth is complicated. Maybe later.

[RavenNull]

This can easily be done with both Apache and Nginx. At least, that's what I did. I see no reason to include this as an enhancement.

[lewisgoddard]

Maybe we could just add a snippet on securing that with rate limiting and call it implemented.

[RavenNull]

That sounds good to me. Maybe even throw in a mock .htaccess and .htpasswd file for those using Apache.

While you're at it, you could also cover how to use rewrite so instead of https://domain.tld/announce.php you could use https://domain.tld/announce since that's how most other trackers look.