Video: WHMCS Security Checklist

[zomex]

In this video I show my 7 step WHMCS security checklist.

[SimpleSonic]

Good info for beginners!

Another thing admins should do if they access WHMCS from a static IP address, is lock down the admin folder using .htaccess to allow access from their static IP address only.

Edit the .htaccess file in the root of your WHMCS admin folder and add the following:

allow from xxx.xxx.xxx.xxx
deny from all

Replace xxx.xxx.xxx.xxx with the static IP address of the device you want to allow access to the WHMCS admin area.

If you have multiple admins/agents accessing the WHMCS admin area and they also have static IP addresses, you can add additional lines (allow from xxx.xxx.xxx.xxx) for each admin/agents static IP address .

Note: Do not use the above if you or any others are accessing the WHMCS admin area from a dynamic IP address.

[zomex]

On 5/20/2023 at 6:44 PM, ResellerWiz said:

Good info for beginners!

Another thing admins should do if they access WHMCS from a static IP address, is lock down the admin folder using .htaccess to allow access from their static IP address only.

Edit the .htaccess file in the root of your WHMCS admin folder and add the following:

allow from xxx.xxx.xxx.xxx
deny from all

Replace xxx.xxx.xxx.xxx with the static IP address of the device you want to allow access to the WHMCS admin area.

If you have multiple admins/agents accessing the WHMCS admin area and they also have static IP addresses, you can add additional lines (allow from xxx.xxx.xxx.xxx) for each admin/agents static IP address .

Note: Do not use the above if you or any others are accessing the WHMCS admin area from a dynamic IP address.

That's good advice.

I did touch on using a directory password which is suitable for those with a dynamic IP:

 

[SimpleSonic]

3 hours ago, zomex said:

That's good advice.

I did touch on using a directory password which is suitable for those with a dynamic IP

I did see that. Again, good video for those getting started with WHMCS!