I've a phpbb site and I've swapped preview and submit buttons, since
all other forums work this way, it's very handly to write the post, then <tab>
and enter.
Another suggestion for the website administrator, I've protected /admin directory with apache directive, yes this make an additional login, but at least it will protect any new hack using admin pages.
This is valid also for other section admin zones.
The code for apache is:
Code: Select all
<Location /admin/>
AuthUserFile /etc/apache/admin.passwd
AuthName "Restricted Area"
AuthType Basic
require valid-user
</Location>