I think it would be nice to have a seperate site for the admin of Kooboo so you can set up something like admin.mydomain.com or whatever rather than mydomain.com/admin this way we can stop people even seeing the admin screen at the domain becauses its very common and first things hackers look for.

Hi that was just an example about the domain I understand that both would be the same for hackers, the point was to make a usrl that would normally be hard to guess, not sure how an IIS Module would do this, maybe we could have a route someowhere that wold allow a complete rewrite. You could do what NopCommerce have done and allow the person to only allow certain IP addresses or something like that. Just a suggestion.