Greetings - I'm building a site in PHP with a database backend that will require some administration pages to handle various functions. In the past, I have simply added an "admin" section to the website, and password protected it. I'm wondering what the pros/cons of having the administration section on the website itself (if secured properly) vs. having it on the internal network (still password protected) are. On one hand, I see the advantage of being able to update the site from anywhere if the admin section is on the website. On the other, there are less security concerns if the section is on our internal network. What have some of you done for CMS on your sites? I've never heard one way or another what the common practice is for this.