Keep Admin Panels Off the Public Internet
Added 2026-10
Keep Admin Panels Off the Public Internet — Chinese original prompt
管理后台 [后台域名或路径] 目前和主站同一个域名、直接暴露在公网。请设计入口收敛方案：独立域名或路径、来源限制、额外认证、以及与主站共享登录态时的风险。输出：方案对比与推荐、访问控制的具体配置要点、运维与外包人员的接入方式、以及改造后的验证步骤。
Site original
Chinese original
Example
Sample input
管理后台和主站同域名直接暴露公网，设计入口收敛方案并说明共享登录态的风险。
The output should include
- 比较独立域名与路径收敛方案
- 给来源限制与额外认证要点
- 说明运维和外包人员接入方式
Replace these placeholders 1
Swap the bracketed parts for your own details before sending.
[后台域名或路径]
How to use
来源限制要考虑移动办公和外包，别做出一个谁也进不去的方案。
Try tweaking it
- Have it restate requirements and constraints before writing code.
- Ask for the smallest change plus a rollback path, not a full-file rewrite.
What you should get
- A minimal, runnable change with copy-ready code
- Impact list: which files and call sites must follow
Common mistakes
- Asking it to touch ten files at once, then losing track of what broke what.
- Pasting only the error, with no code or version, and getting an unfixable answer.
How to check the output
- The change runs, can be rolled back, and touches nothing unrelated.
- Edge cases (empty, oversized, concurrent) are covered or explained.
Where it works
- Good for: having it restate requirements and constraints, then propose the smallest runnable change.
- Watch out: include versions and a minimal reproduction with the error, or the fix may look plausible but not fit.