Məlumat bazası

This guide explains how to use the security tools available in cPanel to protect your website, email accounts, and hosting environment. You will learn how to manage SSL certificates, enable two-factor authentication, block unwanted IPs, configure hotlink protection, and secure sensitive files.

1. Accessing the Security Tools

1. Log in to your cPanel dashboard.
2. Scroll to the Security section.

You will see several tools, including SSL/TLS, IP Blocker, Hotlink Protection, SSH Access, and more.

2. Managing SSL Certificates

SSL certificates encrypt data between your website and visitors.

Checking SSL Status

1. Open SSL/TLS Status.
2. You will see a list of domains and subdomains with their certificate status.

Enabling AutoSSL

Most hosting plans automatically issue free SSL certificates.
If not:

1. Click Run AutoSSL.
2. Wait for the process to complete.

Forcing HTTPS

1. Go to Domains.
2. Click Manage next to your domain.
3. Enable Force HTTPS Redirect.

This ensures all visitors use the secure version of your site.

3. Using the IP Blocker

The IP Blocker allows you to block specific IP addresses or ranges from accessing your site.

1. Open IP Blocker.
2. Enter the IP address or range you want to block.
3. Click Add.

This is useful for stopping repeated login attempts or unwanted traffic.

4. Enabling Hotlink Protection

Hotlink protection prevents other websites from using your images or files directly, which can waste your bandwidth.

1. Open Hotlink Protection.
2. Enable the feature.
3. Add any allowed domains (your own domains should be listed automatically).
4. Specify which file types to protect, such as .jpg, .png, .gif.
5. Save your settings.

5. Managing SSH Access

SSH provides secure command-line access to your hosting account.
Not all hosting plans allow SSH, but if yours does:

1. Open SSH Access.
2. Download or generate SSH keys.
3. Authorise your public key.
4. Connect using an SSH client like PuTTY or Terminal.

SSH should only be enabled if you need it and understand how to use it safely.

6. Protecting Sensitive Files and Folders

Password Protect Directories

1. Open Directory Privacy.
2. Select the folder you want to protect.
3. Enable password protection.
4. Create a username and password.

This is useful for admin areas or private content.

Editing .htaccess

You can add security rules to .htaccess using File Manager, such as:

• Blocking access to specific files
• Disabling directory browsing
• Restricting access to admin panels

Always back up .htaccess before making changes.

7. Enabling Two-Factor Authentication (2FA)

2FA adds an extra layer of security to your cPanel login.

1. Open Two-Factor Authentication.
2. Click Set Up Two-Factor Authentication.
3. Scan the QR code with an authenticator app (Google Authenticator, Authy, etc.).
4. Enter the generated code to confirm.

Once enabled, you will need both your password and a one-time code to log in.

8. Managing Email Authentication (SPF, DKIM, DMARC)

These settings help prevent email spoofing and improve deliverability.

1. Open Email Deliverability.
2. Review the status of SPF and DKIM.
3. Click Repair if any issues are detected.
4. Add DMARC records manually if required by your email provider.

These records help mail servers verify that your emails are legitimate.

9. Using Leech Protection

Leech Protection prevents users from publicly sharing passwords to restricted areas of your site.

1. Open Leech Protection.
2. Select the folder you want to protect.
3. Set the number of allowed logins per hour.
4. Configure a redirect URL for violations.

This is useful for membership sites or private directories.

10. Troubleshooting Common Security Issues

SSL Not Working

• AutoSSL may not have completed.
• DNS may not be pointing to your hosting server.
• The domain may be too new for certificate issuance.

Blocked IP Cannot Access Site

• Check the IP Blocker list.
• Remove the IP if it was added by mistake.

Email Going to Spam

• Ensure SPF, DKIM, and DMARC are correctly configured.
• Check for blacklisted IPs.

Unauthorized Login Attempts

• Enable 2FA.
• Use strong passwords.
• Block suspicious IPs.