Basic security questions
1. I already have SA login rules applied to admin pages. What benefit is there to putting these administration pages in their own folder? Does that imply that pages not in a folder are vulnerable to inspection?
2. Is it safe to put a separate navigation menu on an unsecure page which points to admin pages, if it is protect it from view with a SA show-if based on an admin rule. If not, is there a better way to do the navigation to the admin pages?
Thank you.