নিরাপত্তা, সফটওয়্যার ও অ্যাডভান্সড টুল

These are the tools of the Security, Software and Advanced groups in the hosting panel. Which of them a customer sees depends on the account's feature list.

Password & Security and two-factor sign-in

Preferences → Password & Security has Old Password, New Password (with a strength meter and a Generate button) and Options, such as also changing the passwords of the account's databases. The host sets the minimum strength in the Host Manager (50 by default).

Security → Two-Factor Authentication protects the sign-in with a second step. Press Set Up Two-Factor Authentication. Step 1: Scan the QR Code with an authenticator app (Google Authenticator, Authy, Microsoft Authenticator); if you cannot scan, type the secret key by hand. Step 2: Confirm with the six-digit Security code. From then on sign-in asks for a code that changes every 30 seconds. To switch it off, use Remove Two-Factor Authentication and enter your password.

SSL/TLS

Security → SSL/TLS is the classic four-part page:

1. Private Keys - generate a key (2048 or 4096 bits) for a domain, or upload one.
2. Certificate Signing Requests - make a CSR from a key. Fill in the domain, country (two letters), state, city, company, division and e-mail, and send the result to your certificate authority.
3. Certificates - paste or upload a certificate you received, or make a self-signed one. The panel checks that the key matches.
4. Install and Manage SSL for your site (HTTPS) - pick a domain, paste the Certificate (CRT), Private Key (KEY) and the Certificate Authority Bundle (CABUNDLE), and install. Apache is reconfigured at once.

SSL/TLS Status shows every domain with its certificate, the issuer, the days left and whether Auto SSL manages it. Most customers need nothing else: Auto SSL issues a free certificate for every domain. See DNS and SSL.

Manage API Tokens

Security → Manage API Tokens makes tokens for the hosting panel API (Panel API). Give a Token Name, an optional Expires date and Restrictions (the addresses that may use it), and press Create. The token is shown once; copy it. Revoke it from the list at any time. See The APIs and the command line.

SSH Access

Security → SSH Access manages the account's SSH keys, when the account has shell access. Generate a New Key (key name, size, password) and Import Key (paste a public key, or a private and public pair) are side by side. The key lists then offer View, Download, Authorize or Deauthorize, and Delete. Authorize the public key to sign in with it. Connect with ssh user@hostname.

Protecting your site

• IP Blocker denies an IP address, a range or a domain from reaching the site.
• Hotlink Protection stops other sites from showing your pictures: list the URLs to allow access, the extensions to block, whether to Allow direct requests, and a URL to redirect to.
• Leech Protection limits how many times one user name may sign in to a password-protected folder in 2 hours, and can disable the account and e-mail you.
• ModSecurity has a table of domains with an on or off choice for the web application firewall on each.
• Directory Privacy (in Files) puts a password on a folder.
• Malware Protection and Virus Scanner appear if the host enables them. The premium Malware Scanner plugin adds its own page here. See Malware Scanner.

Software

• PHP Version Manager shows each domain's PHP version (7.4, 8.1, 8.2, 8.3 where installed) and changes it; inherit follows the host's default. PHP INI Editor edits the common settings (memory limit, upload size, execution time, display_errors) per domain or as raw text. Select PHP Version is the same choice as a list of versions and extensions.
• Site Software installs WordPress, Joomla, Drupal, Laravel and more. See Site Software.
• WordPress Toolkit manages WordPress sites. See WordPress Toolkit.
• PHP PEAR Packages, Perl Modules, Optimize Website (compression and caching headers), and Setup Node.js App, Setup Python App, Setup Ruby App and Application Manager for application servers. The package limit Max Passenger Applications caps them.

Advanced

• Terminal is a shell in the browser, inside the home folder. See Terminal.
• Cron Jobs schedules commands. Choose a time with the Common Settings menu or type minute, hour, day, month and weekday, then the Command, and press Add New Cron Job. The list shows each job with Edit and Delete. Cron output can be e-mailed to the contact address.
• Track DNS runs dig-style lookups and a trace for a name.
• Indexes chooses how a folder without an index file is shown (no listing, names only, names with details).
• Error Pages edits the 400, 401, 403, 404 and 500 pages of the site.
• Apache Handlers and MIME Types map file extensions to a handler or a content type.
• Virus Scanner scans the home folder with ClamAV where it is installed.

Metrics, briefly

Visitors, Errors, Bandwidth, Raw Access, Awstats, Analog Stats, Webalizer and Resource Usage read the account's logs. Metrics Editor chooses which statistics tool runs for each domain.