Security

Security

26 Articles

Important PHP Security Advisory (October 2026)

What Website Owners Need to Know Last updated: 22 October 2026Please keep an eye on our status page for regular updates. On 21 October 2026, the PHP development team released emergency security updates addressing two critical vulnerabilities: CVE-2026-109618 CVE-2026-109619 Both vulnerabilities were rated 9.2 out of 10 in severity and…

How to Disable Directory Indexing and Prevent File Browsing

When a website folder lacks an index file (such as index.php or index.html), web servers often display a full list of all files in that directory. Known as directory indexing or directory browsing, this allows visitors to browse raw uploads, plugin files, or site assets, posing privacy and security risks.…

Using Scout‘s application firewall (WAF)

The Application Firewall adds an extra layer of protection to your website by checking incoming requests for patterns commonly associated with attacks. You choose which rules should block matching requests, so you stay in control of what gets filtered. Think of it as another layer of defence alongside keeping your…

Managing SFTP Access: Requesting Password Resets and User Changes

SFTP (Secure File Transfer Protocol) allows you and your developers to securely upload and edit files on your server. Because SFTP operates directly at the server level, managing users and passwords works a little differently than standard cPanel or website logins. This guide explains how SFTP user management works, why…

How to Reset a Lost cPanel Password

If you’ve lost or forgotten your cPanel password, don’t worry — you can reset it quickly without contacting support in most cases. Option 1 — Reset via the Login Page Go to your cPanel login page (e.g. yourdomain.com:2083 or cpanel.yourdomain.com) Click Reset Password Enter your cPanel username or the email…

How to Enable Two-Factor Authentication (2FA) on Your Account

Two-factor authentication (2FA) adds a second layer of protection to your account by requiring a time-based code from an authenticator app in addition to your password. This guide walks through enabling 2FA from your account portal. Step 1: Open Security Settings From your my.cloudabove.com account dashboard, open the account menu…

Password Management Approaches: A Practical Guide

Passwords remain the most common way to protect accounts, but choosing and managing them well makes the difference between strong security and easily compromised accounts. This guide outlines practical approaches to password management for both individuals and teams. Why Password Management Matters Weak or reused passwords are one of the…

How to Issue/renew Let’s Encrypt SSL on Plesk

1. Log in to Plesk Access your Plesk control panel using the login details provided by your hosting provider. From the left‑hand menu, select Websites & Domains. 2. Open the Let’s Encrypt Extension Locate the domain you want to secure. Click SSL/TLS Certificates. If you see an existing Let’s Encrypt…

How to Issue a Free SSL Certificate in cPanel (New Method)

Having a secure website isn’t just a nice-to-have anymore—it’s a must! A free SSL certificate ensures your visitors’ data stays safe, builds trust, and keeps Google happy. If you’ve looked for the old “AutoSSL or SSL/TLS Status” button recently and noticed it’s missing, don’t worry! cPanel updated its look. Issuing…

Managing Client Portal User Permissions

Your client portal supports multiple users under a single account. This means you can invite colleagues, team members, or contractors to access your account with their own login, without sharing your password. Each person can be given exactly the right level of access for their role, and that access can…