whmc and wordpress in same location issue.

[grapyhost]

We have whmcs in public_html directory and same we hosted wordpress in the same location.

As whmcs - bagful.net/manage

and WordPress - bagful.net

so the issue is whmcs and WordPress have index.php conflict issue whenever we update the whmcs.

so can you tell me .htaccess rules to access both in the same location?

 

Currently, the rule applied - 

# Send all remaining (routable paths) through index.php
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
# Determine and use the actual base
RewriteCond $0#%{REQUEST_URI} ([^#]*)#(.*)\1$
RewriteRule ^.*$ %2manage/index.php [QSA,L]
</IfModule>

If i removed manage from RewriteRule ^.*$ %2manage/index.php [QSA,L]  so wordpress all sub links work properly. if not so wordpress links get to redirect to whmcs 404. 

If anyone has an idea to get both works, please share. 

[Kian]

Don't do that 😟 Wordpress (or any other CMS) and WHMCS sharing the same hosting package is a security risk. Cracking Wordpress grants you access to WHMCS. The funny thing is that It happened to today to a client of mine.

I'm not saying that you can't have the structure you have in mind (bagful.net & bagful.net/manage) but keep them separated and not inside the same public_html.

[ooooyeahbabe]

On 2018/9/5 at AM4点00分, Kian said:

不要那样做 😟 Wordpress（或任何其他 CMS）和 WHMCS 共享相同的托管包是一种安全风险。破解 Wordpress 允许您访问 WHMCS。有趣的是，今天发生在我的一个客户身上。

我并不是说你不能拥有你想要的结构（bagful.net 和 bagful.net/manage），而是将它们分开而不是在同一个 public_html 中。

How to do that 

[leemahoney3]

11 hours ago, ooooyeahbabe said:

How to do that 

Either place them on separate hosting accounts, or separate servers. I'd recommend not placing any thing else on the same server/account as your WHMCS installation.

[ooooyeahbabe]

9 hours ago, leemahoney3 said:

将它们放在单独的托管帐户或单独的服务器上。我建议不要将任何其他东西放在与您的 WHMCS 安装相同的服务器/帐户上。

what i want is
for example:
www.***.com this is the wordpress site
www.***.com/members This is the whmcs site how can I compare the implementation of security

[leemahoney3]

It's possible to do that, however if the WordPress site gets hacked, its likely it could spread to your WHMCS installation.

You'd be better off having it as members.domain.tld which points to a different server/hosting account.