+1-855-211-0932 (ID:189424)
Don't have an account yet? Sign up now!

Now our users can use their social account to login true their web hosting control panel easily, here full steps:
1 - users will first need to link their hosting account(s) with their social media account(s). They can do that from the Social Media Login tab in the upper right-hand corner of the Control.
2 - All they need to do is click on the icon associated with the social media channel they want to link their account with , check screenshot:
Social Login true control panel
3 - Right after that, an icon informing them that they have connected with the respective social media profile successfully.
4 - The next time a user opens the login page of the Control Panel, they will see a list of social media buttons for instant access through their social profiles, check screenshot:
Social login true control panel
ModSecurity module

ModSecurity is best solution for minimizing the number of hackers attacks to websites and web applications.

the ModSecurity firewall is enabled by default on your VPS also already enabled in shared web hosting, so you don’t have to configure anything in order to have your websites protected.

ModSecurity is running in a blocking mode, so it will automatically block all incoming requests that are flagged as insecure according to the commercial rules at http://www.atomicorp.com
Installation & Troubleshooting service

After numerous requests from end customers having cloud hosting accounts for more in-depth advice on managing their sites, we decided to compile an Installation & Troubleshooting package to the demands of the rest of our users too.

As of today, users can “steal” from our busy technicians’ and administrators’ time and get timely help with more cumbersome tasks like:

Soon, we’ll be adding new valuable upgrades to the Control Panel and will make its interface respond more intuitively to the customers’ needs to upgrade their package as their online presence grows. Stay tuned!


Over the past few weeks our system administrators have detected an unusually high amount of traffic towards wordpress login pages such as:

http://www.yoursite.com/wp-admin

Our administrators have analyzed the traffic and have come to the conclusion that is part of a global massive bruteforce attack against wordpress sites.

Unlike hacks that focus on vulnerabilities in software, a Brute Force Attack aims at being the simplest kind of method to gain access to a site: it tries usernames and passwords, over and over again, until it gets in. Often deemed 'inelegant', they can be very successful when people use passwords like '123456' and usernames like 'admin.'

They are, in short, an attack on the weakest link in any website's security: You.

Due to the nature of these attacks, you may find your server's memory goes through the roof, causing performance problems. This is because the number of http requests (that is the number of times someone visits your site) is so high that servers run out of memory.

This sort of attack is not endemic to WordPress, it happens with every webapp out there, but WordPress is popular and thus a frequent target.

As such we would like to offer you few very simple tricks to protect your wordpress site:

1. Limit Access to wp-admin by IP

If you are the only person who needs to login to your Admin area and you have a fixed IP address, you can deny wp-admin access to everyone but yourself via an .htaccess file.

Create a file called .htaccess or simply edit the existing one (if any) in the /wp-admin folder and add:

# Block access to wp-admin.
order allow,deny
allow from x.x.x.x
deny from all

Where x.x.x.x is your IP address. You can add multiple IP addresses by adding the line: allow from x.x.x.x as many times as IPs you wish to whitelist.

2. Limit Access to wp-login.php by IP

You can also limit the access to your wp-login.php file inside your wp-admin/ area via an .htaccess file.

Create a file called .htaccess or simply edit the existing one (if any) in the /wp-admin folder and add:

Order allow,deny
Allow from x.x.x.x
Deny from all

Where x.x.x.x is your IP address. You can add multiple IP addresses by adding the line: allow from x.x.x.x as many times as IPs you wish to whitelist.

3. Update your robots.txt file

Add the following lines in your robots.txt file or create a file named robots.txt with the following content:

User-agent: *
Disallow: /wp-admin
Disallow: /wp-login.php
Disallow: /administrator

This will essentially block the indexing of those folders in the search engines as the brute force attackers generate lists of such URLS ( intitle: Log In and inurl: wp-login) with the help of the major search engines. This method is more of a long-term prevention as it will take few months for the search engines to update this information but it should resolve any bruteforce attempts for good.

4. Protecting yourself from spam comments

On another note if you are receiving a large amount of spam comments on your WordPress site you can deactivate the commenting by doing the following:

Go to yoursite.com/wp-admin/options-discussion.php

Uncheck Allow people to post comments on new articles

You WILL need to go to all existing posts and turn off comments there as well.

If you still want people to be able to comment you might consider having them register first. In that case check the box: Users must be registered and logged in to comment instead.

Regards,
HOSTANDWORK Technical Support Department


We have added a daily backups option to your Control Panel.

Now you can restore a backup of your site contents with a click from the Domain or File Manager, without needing to wait for our administrators to do this for you.

Here is how you can access the restore backup option:

In the Domain Manager:
1. Right click on a domain/subdomain and select 'Restore' from the context menu.
or
2. Click on the 'Restore' icon in the Actions column next to a selected file/folder.

In the File Manager:
1. Right click on a file/folder and select 'Restore' from the context menu
or
2. Click on the 'Restore' button in the Actions bar above the table.

We make a few backups per day and keep all backups from the last 10 days.
When restoring a backup, you can specify whether you want us to keep a copy of your original content, just in case.
Please note that we store all of your content backups on a separate server so you will not need to worry that your disk space usage is running high.

You can also find a list of all stored backups in the File Manager. Just follow the yellow folder that is located right next to the home icon above the table and locate the backup you need.

We believe this new Control Panel option will help you save time and gain full control over your site contents.


We have implemented easy-to-configure remote access to all MySQL databases in your web hosting account.

Now you can access your database(s) from any external host of your choice, using your preferred MySQL Remote Access application.

To ensure maximum security in your communication with our MySQL database server, we have set an IP restriction that allows only your original IP address to be used for establishing a remote connection.

This prevents anyone who somehow manages to crack your database login details from connecting to your database from their IP location.

Remote MySQL access is disabled by default to protect your security.

To allow access to a selected MySQL database from an external location, you need to go to Databases -> MySQL Databases and click on the Remote MySQL icon in the table of MySQL databases.

In the pop-up window, you will see the IP address of the device that you currently access your Control Panel from. You can change it to any IP address that you want to connect to your MySQL database from remotely.

From the Remote Access Time field, you can select the time period within which the remote connection between your remote host and the selected database will be running. You can select between 1 hour and 3 months.

When setting up the remote connection from your PC or web server, you will need to use the MySQL host listed below the IP field as a connection destination.

When ready with your remote connection settings, click on the Add IP address button on the right.

This will instantly allow remote access from the specified IP address to the selected MySQL database.


web hosting plan wth vpn access

We have added a VPN Access section in the Our Control Panel. You can find the new VPN section under in the Advanced tools menu, or you can use the quick access link added on the home page of the Control Panel.

You will get 5 GB of free VPN traffic with each of our hosting services that use the Hepsia Control Panel – cloud hosting packages, virtual private servers, semi-dedicated servers, and dedicated servers.

VPN access is available with any Internet-connected device, which has a VPN client – your smartphone, desktop computer, laptop, tablet, etc.

Once you connect to our servers, we will route all of your traffic as if it originated from there, which is a great workaround for accessing country-restricted websites. Plus, all of your incoming and outgoing traffic will be protected with a 128-bit encryption to make sure that there is no one standing between you and the websites you visit.

As a bonus, you can take advantage of our special VPN traffic filter. It will automatically filter out most website ads and will cache images, which will help you use your VPN traffic allocation more sparingly. Additional VPN traffic quotas will be available soon as upgrades.

Currently, we have VPN servers only in the USA, but we are also working on providing you with VPN servers in multiple countries across the world.


Buy Cheap dedicated servers

As of this week, all of our dedicated servers come at a lower price. Here are new ones:

Our Dedicated Servers Features:


Our developers have just added the finishing touches to our newest feature – remote access for all MySQL databases in your web hosting account.

Now you can allow access to your database from any other host or program of your choice. For instance, you can use the remote MySQL access feature to access your databases from your Windows Remote Desktop.

In order to enable this feature in our Web Hosting Control Panel, head over ot the Database Manager and you will see the Remote MySQL icon for each database.

All you have to do now is specify the IP or IPs, which can access a database and for how long they will be able to access it. The changes will take effect instantly.

The feature is available only for MySQL databases for now. Remote PgSQL database access is still in the works.


We have added the latest stable PHP releases to our Web Hosting Control Panel. You can now use the current stable version – PHP 5.5.5, as well as two legacy versions – PHP 5.4.21 and PHP 5.3.27.

These new PHP updates do not add any new functionality and are focused on polishing what is already available and on fixing reported bugs. The PHP 5.5.5 release, for example, addresses more than 20 reported bugs, whereas PHP 5.4.21 contains 10 bug fixes.

As for PHP 5.3.27, this will be the last official update – no new bugs will be fixed in the future, save for security fixes. The latest regular release of the PHP 5.3.X branch brings 10 bug fixes, including a security fix for the XML parser. We will continue to offer PHP 5.3.27, but keep in mind that the PHP team advises users to migrate to the newer PHP 5.5.X and PHP 5.4.X branches.

With Regards,
HOST&WORK Team