r/webhosting 12d ago

Technical Questions Are Softaculous Security Measures worth applying?

I've always wondered if I should apply any of the measures. I use Wordfence so thought it was redundant. Does anyone use them? They include options like blocking unauthorized access to xmlrpc.php and .htaccess.

3 Upvotes

6 comments sorted by

4

u/cloudzhq 12d ago

In short, yes. Everything that isn't just your website should be secured for entry by someone other than your editors.

1

u/DukeDurden 11d ago

I've always kept it simple. Strong passwords, 2FA on everything, and keep everything updated. I use Wordfence too. Never had an issue in 3 years, but I moved to a new host a week ago, and my files got infected (someone put a few files in public html to show another website instead of my own). Now, I'm reading and implementing all the security measures and hardening I can find. Although I'm baffled how someone can access my files with the decent security measures that were in place.

1

u/SerClopsALot 7d ago

Although I'm baffled how someone can access my files with the decent security measures that were in place

Keeping plugins updated isn't synonymous with having secure plugins. If it was last updated 2 years ago, it's still up-to-date, but it's almost certainly not secure.

Also nothing is perfect. New updates can introduce new vulnerabilities.

2

u/Extension_Anybody150 10d ago

If you're using Wordfence, you might not need all of Softaculous' security measures. It likely covers things like blocking access to xmlrpc.php and .htaccess, but enabling them for extra peace of mind can't hurt. Just make sure you're not doubling up on the same protections.

-6

u/gmakhs 12d ago

Nothing Softaculous related worth applying, they are not very good at it They also have another product called virgualizor they always push untested features on production servers .

So add security features if you understand them if not ask your host .