Protect your Admin and Custom 404 errors

Just another way to protect your Joomla Admin.  Remember, leaving your Joomla Admin open to the public is a big no-no!

Heres what I do.  

1. Create an error page (article).
2. Add it to a hidden menu and publish it.
3. In templates/system/error.php:

4. if($this->error->getCode()=="404" || $this->error->getCode()=="403"):
    $app->redirect( "/404-error" );
   endif;
   

5. Add a .htaccess file in the administrator folder and put your public IP address there.  This means you will only be able to access the admin from that ip, so add all the ips you work from.

6. ErrorDocument 403 /404-error
   Order deny,allow
   Deny from all
   Allow from 111.11.11.111