Who can be authorized?
You can use the following three settings to register a new administrator. If you do not need to change the current admin password, leave the Password and Confirm Password fields blank.
To enhance site security, you can generate a random password using the button located inside the password field.
Timeouts
The following settings defines safety timers for various activities. They set a pause in seconds that the user must wait before performing the next action of a certain type.
For example, if an administrator logs out, he will be able to log in only after waiting 20 seconds. The same rule will apply to an error during authorization.
Another example: if an admin deletes a page, he can delete another page only after waiting 10 seconds. The same rule will apply to errors between deletions.
Launch options
The first option below is a switch that allows you to launch this site in showcase mode. Unlike production mode, showcase mode will prevent any page from saving changes made during the demo run, all those changes will only simulate saving.
The second option above is a launch mode for the Session module. It can take one of 3 values:
- Classic is a completely randomly generated session ID. Note that is not tamper-proof because allows an attacker to hijack your session simply by intercepting the session ID.
- Tied to IP is strictly associated with the visitor's IP. It provides good security but is not suitable for use through a public proxy since all users using that proxy will have the same session ID.
- Optimal is tied to the visitor's IP with some randomness.
"Database"
The following setting is relative subpath to the "database" directory where your site's static pages are stored as TPL files. It must end with a slash. Note that this subpath is relative to the root directory of your site.
If you want to hide the "database" storage as efficiently as possible, you can click the button located inside the path field to generate a random path.
However, this only makes sense if you are using HTML markup on the page without any secondary elements (such as images, for example) that would be loaded directly from the same storage.
CKEditor
The built-in HTML editor supports a certain set of paid and free plugins depending on which license key is used for this editor.
This key should be set to "GPL" if you are using the freeware version of CKEditor.
If you have any questions about the field above, contact your webmaster, who will configure the built-in HTML editor, and your content manager, who will tell you what editor tools he needs to edit the site pages.
Metrics
Sometimes you may need to embed third-party JavaScript into the page, for example an analytics counter, a call tracking script, or something else. Typically, such a script is launch first on the page, i.e. before the page starts loading. In this case, its program code should be written below:
If you want, you can also use client-side JavaScript, which will launch after the page has finished loading.
If you have any questions for two fields above, contact your SEO master.