I have a dispute with my father about the following ...
I want to make a website (with MySql database) and use the root/index - page for BOTH the log in entry for normal visitors AND log in for admins.
My father does not agree as he said the following ...
You should NEVER use the same page for both visitors and admins as (I repeat his words) "you want to keep the door for admins secret which is not possible if you use the same page for both".
He prefers to place the admin log-in page in a separate directory which also enables him to protect it from normal user interfacing (using the HTTP server's authentication abilities), so that the user has to authenticate himself first on the HTTP server and then secondly on the log-in panel for the admin-user.
He also says that if you give this sub directory some obscure name as
u7Vf% instead of
admin - having directory listing off - you make this admin-door almost invisible for almost everyone. Which may enhance the safety of the system.
I however say that security through obscurity is not a better way of guaranteeing the integrity of the website. I would prefer one log-in panel and focus all my attention toward securing that.