How to secure your WHMCS installation



How to secure your WHMCS installation

This demo assumes you've already installed WHMCS.

Now let's take some steps to bolster its security.

Open your favorite FTP client or your control panel's File Manager.

We recommend moving all writeable directories to a non-public location above your web root to prevent web based access.

Let's create a new directory at the root level.

Then navigate back to our main WHMCS directory...

... and select the attachments, downloads and templates_c directories.

Next, move these folders to the new root-level directory we created.

That's it! The folders have been moved.

Next, let's rename the admin directory to add some security through obscurity. This will help prevent malicious users from attempting to login to the admin area.

Finally, we need to tell WHMCS of the changes to its directory structure.

Click to edit the configuration.php file.

Update the $templates_compiledir variable as follows.

Then add the $attachments_dir and $downloads_dir variables as follows.

Finally, add a variable to tell WHMCS the new name of the admin directory.

When finished, Save and Close the editor.

That's it! Now let's just make sure we can login using the new admin location.

Success! Our WHMCS installation has now been secured.

This is the end of the tutorial. You now know how to secure your WHMCS installation.

  • 0 Users Found This Useful
Was this answer helpful?

Related Articles

How to login to the WHMCS admin area

How to login to the WHMCS admin areaThis demo assumes you've already installed and secured...

How to setup the WHMCS cron job for automated tasks

How to setup the WHMCS cron job for automated tasksIn order for WHMCS to be able to perform...

How to change your account settings in WHMCS

How to change your account settings in WHMCSThis tutorial assumes you've already logged in to...

How to setup support departments in WHMCS

How to setup support departments in WHMCSThis tutorial assumes you've already logged in to...

How to manage administrators in WHMCS

How to manage administrators in WHMCSThis tutorial assumes you've already logged in to your...