About the cPanel on a domain at co.cc

[TrOjAnZ]

I would like to ask if is it normal when you go to your domain on the directory cpanel (domain.co.cc/cpanel) it automatically log's in and you can already upload index files and etc? :-/

[jje]

If you have logged in in the past then it may login automatically. If you haven't logged in before it will ask for a username and password

 

Don't worry; your cPanel isn't exposed to your users

[Krydos]

I would like to ask if is it normal when you go to your domain on the directory cpanel (domain.co.cc/cpanel) it automatically log's in and you can already upload index files and etc? :-/

 

If you don't like cPanel saving your passwords -- for instance if you log in from a shared computer -- it might be a good idea to disable cookies on your browser. It should prevent anyone who uses the computer after you from being able to log in. Also note the logout button in the top right corner of cPanel once you're logged in. If you remember to click this each time you're done editing your account settings it would help security too.

 

Another issue is if hackers can find a username/password box it means that they can try to brute force your password. If you're worried about this you could use an addon domain whose root points to a subfolder of your main domain. Example: trojanz.heliohost.org is your main domain. Then setup mywebsite.co.cc as an addon domain to point to public_html/mywebsite. Then if people try to find http://mywebsite.co.cc/cpanel they can't even get at the password box like they could if you had mywebsite.co.cc pointed as your main domain and therefore pointed at your html root.

 

The steps you can take to increase security are only limited by your paranoia and how much work you want to put into it.

[Guest Geoff]

HelioHost has also enabled brute force protection, making it difficult for hackers to gain access.