how do you secure your whmcs ?

[rob2]

Hi,

 

i must say i had not find any security issue related to whmcs,

 

but because we save more and more data in whmcs,

 

and let whmcs connect other server or payment gateway ...etc,

 

it means whmcs has more and more authority to access other service,

 

so,i think secure whmcs and it's server is very important.

 

 

i host whmcs on a dedicated cpanel server with csf,

 

i add some 3rd party and customized addon modules for my whmcs,

 

do you have any suggestion about how to secure my whmcs and my server ?

 

i hope it can as strong as possible.

 

 

 

thank you

[TommyK]

I would move from a shared environment to a vps or dedicated server. Also make sure you search this forum on how to harden your installation of whmcs (rewrite rules for tmp, change name for admin folder, protect access to admin folder with password, move writable folders out of public root, etc).

 

If you do get a server and you dont know how to harden it, hire an admin to do it for you.