Need help for the security of my website

[NimoCodex]

Hello babiato community !
I have a website and im using " sponzy script " , today i got a msg from someone, he got the path of stored videos and pictures of other members . you can see a picture , he send me a video and saying he got cpanel user name but he is thinking for decode the password of cpanel , so please advise me what should i do please @Babak .

 

[bluvia]

1- change Cpanel user name&password
2- install a firewall
3-lock this video section with a password
4-change admin URL and admin password
5- scan your server directory with antivirus

 

[NimoCodex]

1- change Cpanel user name&password
2- install a firewall
3-lock this video section with a password
4-change admin URL and admin password
5- scan your server directory with antivirus

How can i lock the video section with a password please ?

 

[bluvia]

. Login to cPanel.

2. Click Directory Privacy.

3. Click Edit next to the folder you want to protect.

4. Click the checkbox next to Password protect this directory and enter a name for the protected directory. Once everything is selected and the name is entered, click Save.

5. A green confirmation message appears signifying the directory is protected, requiring a password to enter it via a web browser.

6. You must create at least one user and assign them a password for them to access the directory. Navigate back to the Directory Privacy page by clicking Go Back. A Create User area is now there to be completed.

7. Enter the Username and then the password twice to confirm it, and click Save. Another green confirmation appears.

8. Click Go Back to view the Authorized Users section that is now viewable.

9. The protected directory now has one user who has access to it. Repeat this process for each additional user you want to grant access to.

10. The protected directory displays a Yes under the Private column.

 

[NimoCodex]

. Login to cPanel.

2. Click Directory Privacy.

3. Click Edit next to the folder you want to protect.

4. Click the checkbox next to Password protect this directory and enter a name for the protected directory. Once everything is selected and the name is entered, click Save.

5. A green confirmation message appears signifying the directory is protected, requiring a password to enter it via a web browser.

6. You must create at least one user and assign them a password for them to access the directory. Navigate back to the Directory Privacy page by clicking Go Back. A Create User area is now there to be completed.

7. Enter the Username and then the password twice to confirm it, and click Save. Another green confirmation appears.

8. Click Go Back to view the Authorized Users section that is now viewable.

9. The protected directory now has one user who has access to it. Repeat this process for each additional user you want to grant access to.

10. The protected directory displays a Yes under the Private column.

Thank you so much for saving me ! and thanks to babiato forums for having best experts here.

 

[d3v1l]

. Login to cPanel.

2. Click Directory Privacy.

3. Click Edit next to the folder you want to protect.

4. Click the checkbox next to Password protect this directory and enter a name for the protected directory. Once everything is selected and the name is entered, click Save.

5. A green confirmation message appears signifying the directory is protected, requiring a password to enter it via a web browser.

6. You must create at least one user and assign them a password for them to access the directory. Navigate back to the Directory Privacy page by clicking Go Back. A Create User area is now there to be completed.

7. Enter the Username and then the password twice to confirm it, and click Save. Another green confirmation appears.

8. Click Go Back to view the Authorized Users section that is now viewable.

9. The protected directory now has one user who has access to it. Repeat this process for each additional user you want to grant access to.

10. The protected directory displays a Yes under the Private column.

yaa but this will not help him. cause if directory will be have password then video will not be uploaded from his user end , video cant be played from his user end. Due to directory password script will unable to execute videos

 

[NimoCodex]

yaa but this will not help him. cause if directory will be have password then video will not be uploaded from his user end , video cant be played from his user end. Due to directory password script will unable to execute videos

if this happened then any solution for this matter please ?

 

[bluvia]

she can use below url for password protected directory to play video

http://usernameassword@url/videofile.

So lets say the directory is protected by the username FrancisFord and the password is Copola and the URL is http://www.myvideos.com/hitch.mp4, you would enter this address when streaming from a URL:

http://FrancisFord:[email protected]/hitch.mp4 .

 

[d3v1l]

she can use below url for password protected directory to play video

http://usernameassword@url/videofile.

So lets say the directory is protected by the username FrancisFord and the password is Copola and the URL is http://www.myvideos.com/hitch.mp4, you would enter this address when streaming from a URL:

http://FrancisFord:[email protected]/hitch.mp4 .

yaa but why his user will do this?? user need every thing easy

 

[bluvia]

Good question, best way to add some codes to script files so maybe you can help her with it.

 

[NimoCodex]

Good question, best way to add some codes to script files so maybe you can help her with it.

He just sent me this pictures

 

[d3v1l]

He just sent me this pictures
i can also give this you scaring from this sh*t. hehe dont this is just subdomain finder and nothing else

i can also give this you scaring from this sh*t. hehe dont this is just subdomain finder and nothing else

 

[bluvia]

yes this is not issue , he finds it like me

Screenshot

Captured with Lightshot

prnt.sc

 

[NimoCodex]

i can also give this you scaring from this sh*t. hehe dont this is just subdomain finder and nothing else

what is cdn , he is saying . he is searching for video cdn , after that he will watch all the paid videos and free videos

 

[NimoCodex]

yes this is not issue , he finds it like me

Screenshot

Captured with Lightshot

prnt.sc

But sir he saying that , he is searching for video cdn , after that he will watch all the paid and free contents.

 

[bluvia]

A content delivery network (CDN) refers to a geographically distributed group of servers which work together to provide fast delivery of Internet content.

A CDN allows for the quick transfer of assets needed for loading Internet content including HTML pages, javascript files, stylesheets, images, and videos. The popularity of CDN services continues to grow, and today the majority of web traffic is served through CDNs, including traffic from major sites like Facebook, Netflix, and Amazon.

so with cdn , I think this is not possible.

 

[d3v1l]

But sir he saying that , he is searching for video cdn , after that he will watch all the paid and free contents.

tell him to watch cause you even dont use cdn then how he will watch videos..

 

[NimoCodex]

tell him to watch cause you even dont use cdn then how he will watch videos..

His profile status is active but i did not ask him anything yet.

 

[NimoCodex]

tell him to watch cause you even dont use cdn then how he will watch videos..

 

[d3v1l]

nowadays every kids with laptop have feeling like hacker. you just keep daily backup and tell him do what you wanna do.