• I have my blog on my root folder, as I want it to be http://www.mydomain.com
    I have lock down plugin,

    But say for example, can someone hack your cpanel from your host, and change the paypal or other payment company? or just redirect users???

    I’m guessing it cant be done, unless you access wordpress admin, but then again, Im a noob so thats why I’m asking.

    Thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • In theory, if someone has access to your cPanel, they have access to your database, and with that they could do anything…

    Thread Starter wplover101

    (@wplover101)

    But its MUCH harder to change a wordpress post from cpanel then a reg html page??

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    Can’t really answer that one way or the other.

    If you have access to someone’s cPanel, you can seriously hose their site. You can delete data, webpages, munge sql. I mean, seriously. If someone hacks your cPanel, it’s all over but the crying. Is it harder than cracking WordPress’s php code? Probably. But that doesn’t mean it’s any more or less safe.

    If someone gets into your WP admin side, they can easily fubar your content. If someone gets into your cPanel admin, they can fubar everything. So don’t give ANYONE your password, not even your hosting company.

    Thread Starter wplover101

    (@wplover101)

    Thanks,

    So how do I make my cpanel more secure???
    I mean i use hostgator (shared server)
    And been trying to figure out how to lock down my cpanel.

    So how do I make my cpanel more secure???

    you cant, its not in your path.

    youre on shared hosting, and cpanel is the host’s responsibility to secure.

    To answer the larger question, if someone with malicious intent gains access to your cpanel, you have larger issues than just files at stake.

    you can TRY this in your .htaccess:

    <Files "cpanel">
      Order Deny,Allow
      Deny from all
    </Files>

    but I’m fairly confident that the redirect happens before actually reading your .htaccess

    or this maybe:

    RewriteCond %{REQUEST_URI} ".*cpanel$"
    RewriteRule .* - [F]
Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Can someone/hack change YOUR post by cpanel??’ is closed to new replies.