Admin stuff in separate directory

Try the search function.
Somebody has done and explained this somewhere here AFAIK

You are right.
Elzar kept this secret so far.

I want to do the same so I'll try to find a solution myself and post it then.
I think it is at least an option for extra security and I agree it should be standard.
Not alone for the security reason but also because it makes the directory structure more readable.

There's a lot of handwork involved. I found a lot of parts to change, hope that's all.
So, here we go:
1. create a directory "admin" in your pun root and move all file sthere that start with "admin_"
2. open function.php and replace the complete function confirm_referer() with

function confirm_referrer($script)
{
  global $pun_config, $lang_common;
## ADMIN DIR CHANGE 
  if(ereg("/admin/",$_SERVER['HTTP_REFERER'])) {
    $ref_url = $pun_config['o_base_url'].'/admin';
    }
  else $ref_url = $pun_config['o_base_url'];
  if (!preg_match('#^'.preg_quote(str_replace('www.', '', $ref_url)."/".$script, '#').'#i', str_replace('www.', '', (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : ''))))
    message($lang_common['Bad referrer']);
}

3. still in function.php,
find the function generate_navlinks() (somewhere around line 230)
In this function, replace ALL occurences of

<a href="

with

<a href="' . PUN_ROOT . '

4. Around line 887 in function.php, replace

<link rel="stylesheet" type="text/css" href="style/<?php echo $pun_user['style'].'.css' ?>" />

with

<link rel="stylesheet" type="text/css" href="<?php echo PUN_ROOT ?>style/<?php echo $pun_user['style'].'.css' ?>" />

5. Open ALL admin_ files and replace everywhere

define('PUN_ROOT', './');

with

define('PUN_ROOT', '../');

It's always on top of the scripts.

6. Open header.php and find around line 66

<link rel="stylesheet" type="text/css" href="style/<?php echo $pun_user['style'].'.css'

replace it with

<link rel="stylesheet" type="text/css" href="<?php echo PUN_ROOT ?>style/<?php echo $pun_user['style'].'.css'

7. and around line 70, replace

    echo '<link rel="stylesheet" type="text/css" href="style/imports/base_admin.css" />'."\n";

with

    echo '<link rel="stylesheet" type="text/css" href="'.PUN_ROOT.'style/imports/base_admin.css" />'."\n";

Let's hope that's it. If not let me know.
(It's basically about adding PUN_ROOT before most of the links...)

As I was hacked 10 mn ago ... I think YES for an ADMIN DIR more protected