WHMCS API security question...

[savehost]

Using the API, I can connect to my WHMCS from abroad but my question is, what security featrues does WHMCS have with it's API to prevent other people from hammering my server with username/password attempts until it finds the correct one?

 

Also, is there a way to turn API on and off and to only allow certain IP addresses to connect to the API? Or do I have to add that code myself?

 

 

Thanks,

Chris

[brianoz]

As far as I'm aware, WHMCS doesn't have a security feature like that itself, but if you install and use the excellent CSF you can catch and block attempts like that, and a whole lot more.

 

http://www.configservers.com/cp/csf.html