I have my Mage2 site set up on an EC2 and use ssl access, plus a custom admin url and the permissions are all correct. However, I want to add .htaccess to my admin. What file do I need to add this too? The root .htaccess? And can I use order deny,allow or is there a better way? What other things should I be focused on (I have added captcha to admin and forced password change) to increase security?


There is some information here http://devdocs.magento.com/guides/v2.1/config-guide/secy/secy.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.