cPanel Tutorial

How to apply additional protection to your account and folders

The cPanel provides you with several options to apply different security settings to your account and folders.



The Password protection option allows you to protect a certain directory under your account with username and password to prevent direct access to it. From the password protection page, please select the desired directory.



On the next page check the box ‘Password protect this directory’ and set the message that will be displayed on the login pop up window. Then save your settings.



When you have your directory password protected you should add a new user which will be able to access the protected resource.



The IP deny manager allows you to ban access to your website from a certain IP address or network. Note: You can specify denied IP addresses in the following formats:

10.5.3.33    Single IP Address
10.5.3.3-10.5.3.40     Range
10.5.3.5-40    Implied Range
10.5.3.3/32    CIDR Format
10.    Implies 10.*.*.*



HotLink protection prevents other websites from directly linking to files on your website. Other sites will still be able to link to any file type that you don't specify in this section (ie. html files). An example of hotlinking would be using a <img> tag to display an image from your site from somewhere else on the net. The end result is that the other site is stealing your bandwidth. You should ensure that all sites that you wish to allow direct links from are in the list below. This system attempts to add all sites it knows you own to the list, however you may need to add others.

On the HotLink protection page, please set the URLs that should be able to access the protected files. Usually, you should set your domain name using both www and non www version. Additionally, you should specify the files extensions that you would like to be protected and the redirect URL to which all requests from other sites that are not allowed to embed your images will be redirected.



Leech Protect allows you to prevent your users from giving out or publicly posting their password to a restricted area of your site. This feature will redirect (and suspend if selected) accounts which have been compromised to a url of your choice.