[WHMCS] Admin Failed Login Ban Settings

Last Updated on Saturday, 27 April 2013 09:39 Written by Alex Ali Thursday, 2 May 2013 12:00

By default WHMCS will ban any IP address for a period of 15 minutes if they fail to login the admin area (invalid username and / or password) 3 times. This prevents people from being able to use multiple login combinations until they find one that actually works. You can alter the ban settings (minutes & the number of failed login attempts) by:

[WHMCS] Changing Admin Directory

Last Updated on Tuesday, 12 March 2013 07:21 Written by Alex Ali Friday, 15 March 2013 12:00

A good (and highly recommended) security measure is to change the location of your admin directory. Essentially if a hacker was to obtain access to your admin area the amount of damage that can be done is huge with WHMCS containing all your customers’ details, servers’ details among other things.

Step 1: Rename your admin directory