Leech Protection
The Leech Protection interface allows you to detect unusual levels of activity in password-restricted directories on your site. After you set the maximum number of logins within a two-hour period, the system redirects or suspends users who exceed that maximum. This is useful if, for example, someone posts a user's credentials on a public site, which allows unauthorized users to access restricted content.
Enable leech protection
To enable Leech Protection for a directory, perform the following steps:
-
The Leech Protection window will appear. Select which of the four main directories you wish to view in the file window:
- Web Root (
/public_html/www) - Public FTP Root (
/public_ftp) - Document Root (
/public_h - Home Directory (
/home/user) tml)
- Web Root (
-
Select the directory that you wish to protect.
-
Click the appropriate
icon to navigate to a different folder. -
Click the desired folder's name to select it
-
.Enter the maximum number of logins that you wish to allow each user within a two-hour period.
-
- To redirect users who exceed the maximum number of logins within a two-hour period, enter a URL to which you wish to redirect them.
- To configure the system to send an email alert when Leech Protect activates, select the Send Email Alert To checkbox and enter the email address to alert.
- To disable an account that exceeds the maximum number of logins within a two-hour period, select the Disable Compromised Accounts checkbox.
- Click Enable.
Disable leech protection
To disable leech protection, perform the following steps:
-
The Leech Protection window will appear. Select which of the four main directories you wish to view in the file window:
- Home Directory (
/home/user) - Web Root (
/public_html/www) - Public FTP Root (
/public_ftp) - Document Root (
/public_html)
- Home Directory (
-
Select the directory that you wish to protect.
-
Click the appropriate
icon to navigate to a different folder. -
Click the desired folder's name to select it.
-
-
Click Disable.
Manage users
To add, edit, and delete users, click Manage Users to navigate to cPanel's Directory Privacy interface (Home >> Security >> Directory Privacy).
Note:
To manage the users manually, edit the /home/USERNAME/.htpasswds/public_html/passwd file, where USERNAME represents the account name.
