Security

Securing your hosting: SSL certificates, hardening and attack mitigation.

10 guides in this section.

Attack Mitigation

Custom ModSecurity Rules for WordPress and WooCommerce AttacksUse custom ModSecurity rules to rate-limit WordPress login floods, XML-RPC abuse and WooCommerce checkout abuse, and...

How to Block an IP Address Using an htaccess RuleBlock IP addresses or ranges from an Apache website with a Require not ip rule in .htaccess, and avoid the mistake...

Why ModSecurity Collection Files Grow Without Limit, and How to Compact ThemModSecurity stores its rate-limiting counters in SDBM files that grow forever and never reclaim space. Learn how to...

Best Practices

How to Disable Directory Browsing Using .htaccessStop Apache listing the contents of folders that have no index file by adding Options -Indexes to .htaccess, then...

How to Protect the htaccess FileCheck that your .htaccess file cannot be read over the web, add an explicit deny rule, and block .env files, backups,...

How to Restrict Access to Directories by IP AddressLock a directory such as wp-admin to trusted IP addresses with an Apache Require ip rule in .htaccess, covering...

SSL

How to Generate a CSR (Certificate Signing Request) in cPanelGenerate a CSR in cPanel for an OV, EV or wildcard SSL certificate, and avoid the country, state and company details...

How to Install an SSL Certificate on Your Domain Using AutoSSL in cPanelForce AutoSSL to secure a domain from SSL/TLS Status in cPanel, read the failure reason and fix common DNS, redirect,...

How to Remove a CSR Code in cPanelDelete an old certificate signing request from the cPanel SSL/TLS page safely, and learn why removing a CSR never...

How to Retrieve a Saved CSR in cPanelFind and copy a certificate signing request you generated earlier from the cPanel SSL/TLS page, and fix the usual...