The access protection provides fine-grained security for websites, effectively intercepting hacker intrusions. It is strongly recommended to enable this module.
1. Static Directory Protection
Protects static web directories by prohibiting the execution of dynamic scripts, preventing hackers from exploiting online upload vulnerabilities to execute web shells. Typically, set the "upload" directory for protection.
As shown in the figure below, PHP web pages within these directories cannot be executed.
2. Website Backend Protection
Secures the website backend, allowing access only to authorized regions or users with authorization passwords.
For example, restrict website backend access to the United Arab Emirates (UAE) only, blocking all other regions. Users outside the UAE must enter an authorization password to access the backend, significantly enhancing website security.
3. Time-Limited Access Protection
Sets scheduled open times for specific URLs. For instance, configure a message board or forum to be accessible only during daylight hours.
5. Hotlinking Protection
Restricts access to files of the specified "File types" allowing access only from the current domain or URLs listed in the "Referrer Whitelist"
Once enabled, protection is applied to all websites by default. To exclude specific websites or directories from protection, add them to the "URL Whitelist"
6. File Type Protection
Restricts access to specified file types. For example, prohibit access to .sql files.
This feature is typically used to prevent file downloads. For instance, if an administrator places a website archive in the root directory and forgets to delete it after extraction, hackers may discover and download the file.
Root Only: Protection applies only to files in the website's root directory. For example, http://www.magiaegis.com/magi.zip cannot be downloaded, but http://www.magiaegis.com/source/magi.zip can.
All Directories: Protection applies to all specified file types across all directories. For example, neither http://www.magiaegis.com/magi.zip nor http://www.magiaegis.com/source/magi.zip can be downloaded.
