Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Securing Files

...

We You need to secure the config.php file. Let's set the permissions to 444.

...

2. CHMOD / change file permissions of config.php to 444.

That's it. Modifying the permissions of this file is necessary , and the easiest security method you can apply to your HostBill install.

...

In order for HostBill to operate in a safe environment, you 'll want need to prevent anonymous users from uploading content to your server. We already know that  templates_c has folder permissions of 777, and users can upload files to the attachments folder through support tickets. Let's You need to secure these folders to protect your server.

...

2. Move the attachments, downloads, and templates_c folders outside of the public directory. 

3. We're using hostbill HostBill user as our example. Your new hierarchy should be /home/hostbill/ for the mentioned folders.

...

HostBill has an admin access restriction feature that controls what IPs may access the administrative interface. To utilize this feature, do the following.

1. Navigate to Security Settings > Administrative Settings → Administrative Allowed IPs.

2. Allow your IPs first.

...

The following is just an example if . If you are using Apache as webserver, you may add it in your .htaccess file and configure as needed.

...