Sections
Security and SSL
Application protection
Harden WordPress, PrestaShop and Joomla: captchas, ModSecurity, Imunify360 and form spam.
21 articles in this topic
21 of 21 articles
- Stop WordPress comment spam with Akismet and reCAPTCHA Explains how to combine moderation, Akismet and reCAPTCHA to stop automated comments and how to find another form if the spam continues. 3 min · Reviewed 09/2026
- Configure session cookie security in GLPI Check HTTPS and GLPI's effective PHP configuration to resolve Secure cookie warnings, without confusing them with HttpOnly or SameSite. 3 min · Reviewed 09/2026
- WordPress security plugins: do you need them at Hostsuar? Why we do not recommend security suites such as Wordfence, AIOS or Kadence Security on our hosting, and which small plugins are worth it: two-step verification, activity log and changing the login URL. 4 min · Reviewed 10/2026
- Critical vulnerability in PrestaShop 1.6.0.10 to 1.7.8.6 (Smarty MySQL cache) How to close the July 2022 PrestaShop vulnerability (SQL injection plus the Smarty MySQL cache): the version that fixes it, a patch in smarty.config.inc.php for shops that cannot update, and signs that the shop was attacked. 5 min · Reviewed 10/2026
- Imunify360: your hosting's security system and how to use it from cPanel What Imunify360 does on your hosting (firewall, malware scanner, Proactive Defense, outgoing antispam) and how to view and clean infected files, handle false positives and review the history from cPanel. 5 min · Reviewed 10/2026
- Restrict PHP functions without breaking your application Explains where to restrict sensitive PHP functions from cPanel, gives a reference list and reminds you to test every application afterwards. 2 min · Reviewed 09/2026
- Restrict Magento admin access to allowed IPs .htaccess rules so that the Magento admin panel only opens from your IPs or from your country: one or several IPs, a custom admin path and an alternative based on geolocation. 4 min · Reviewed 10/2026
- Show a temporary notice by replacing the index file Explains how to show a temporary page while keeping the original index and warns that this method does not block access to the rest of the content. 2 min · Reviewed 09/2026
- GnuPG in cPanel: manage keys to encrypt email Summarises how to use cPanel's GnuPG tool to manage key pairs and makes clear that email encryption must be done by a compatible client. 2 min · Reviewed 09/2026
- Set up reCAPTCHA in PrestaShop 1.6 with eicaptcha Install the free eicaptcha module in PrestaShop 1.6 and use Google reCAPTCHA to protect customer registration and the contact form against fake accounts and spam. 7 min · Reviewed 10/2026
- Set up reCAPTCHA in PrestaShop 1.7 and 8 with eicaptcha Install the free eicaptcha module in PrestaShop 1.7 or 8 and protect customer registration, the contact form and the newsletter with Google reCAPTCHA against fake accounts and spam. 8 min · Reviewed 10/2026
- Secure WordPress and keep its access under control Brings together measures to harden WordPress through updates, unique passwords, 2FA and extra protection for the admin routes. 3 min · Reviewed 09/2026
- Disable public user registration in Joomla Explains how to prevent public user sign-up in maintained versions of Joomla when the website does not need registrations, and how to review existing accounts. 1 min · Reviewed 09/2026
- ModSecurity: investigate blocks and false positives Explains how the WAF blocks requests using rules, how to investigate a false positive and why a specific exception is better than disabling it. 2 min · Reviewed 09/2026
- Unmaintained WordPress plugins: how to spot them and why they are a risk How to check the last update date and compatibility of WordPress plugins and themes, before installing them and for the ones you already have, and what to do with abandoned ones. 5 min · Reviewed 10/2026
- Stop other websites embedding your files: hotlink protection Explains how to stop external domains from embedding images or files from your hosting in cPanel, limiting extensions and authorised origins. 2 min · Reviewed 09/2026
- Protect wp-admin and wp-login.php with the WPS Hide Login plugin Change the WordPress login address with WPS Hide Login so that wp-admin and wp-login.php return an error to bots, and recover access if you forget the new URL. 4 min · Reviewed 10/2026
- Historical notice about mass registrations in PrestaShop 1.6 and 1.7 Documents the flaw fixed in PrestaShop 1.6.1.24 and 1.7.5.2 and explains what to do if you still find an affected version. 1 min · Reviewed 09/2026
- Renaming wp-login.php to protect access: how to do it today without breaking WordPress Why renaming wp-login.php by hand is no longer a good idea and how to achieve the same thing: change the login URL with a plugin or limit wp-login.php to your IP from the .htaccess. Includes how to undo the old change. 4 min · Reviewed 10/2026
- Identify and stop abuse of a website's forms Explains how to tell whether bounces come from an abused form and how to protect it with server-side validation, rate limits and anti-bot controls. 2 min · Reviewed 09/2026
- Stop spam sent from PrestaShop forms Explains how to confirm whether bounces come from a PrestaShop form and how to contain the abuse with updates, validation and rate limits. 2 min · Reviewed 09/2026
No articles match “”.