I got it myself! I should disable admin interface at all on a production server! And make another local web2py just in case:
http://web2py.com/books/default/chapter/29/13/deployment-recipes?search=administrative+interface#Securing-sessions-and-admin On Sunday, January 8, 2017 at 9:37:03 AM UTC+3:30, Sepehr Mohamadi wrote: > > Hi every body! > > I wonder how to limit access to administrative interface? > I read a lot how to grant access control to users in a project, > But found no document about how to limit access to administrative > interface? > > Can I limit it to special IPs? > Can I add 2FA? > Can I add Captcha? > ... > -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.