I’m building a community site using PHP/MySQL, I was thinking of just letting admins login where normal users log in, and then present them with a “Admin Control Panel” link. So that the control panel platform is hosted on the same site. Is this secure? Should there be a different “gateway” for admins instead i.e. http://admin.example.com? Or should i host the Control Panel on an entirely different domain?
Thanks for your time.
I would prefer to use a directory with limited access using .htaccess.
If the user-account of an admin will be hacked, his access to the ACP is still secure.