Secure GameCP

Your web-server

GameCP 1.2.6 enabled a new folder - 'manage' - this folder is for admins, managers, reseller and support level users.

You can add additional security to this folder to prevent unauthorized access to your administrative features - drastically increasing the security of your panel.

Depending on your web-server you have several methods of doing this

.htaccess

Create a .htaccess file, in the manager folder, with the following content:

order deny,allow
deny from all

Add this line with each ip you want to have access to the folder (replace <ip here> with the actual ip:

allow from <ip here>

lighttpd

In your virtual host configuration, for your domain, you can add the following to secure the folder (replace <ip here> with the actual ip) (replace <gamecp url> with the url settings for the domain):

$HTTP["remoteip"] != "<ip here>|<ip here>" {
  $HTTP["url"] =~ "<gamecp url>" {
    url.access-deny = ( "" )
  }
}

IIS

http://www.iis.net/ConfigReference/system.webServer/security/ipSecurity

Your remote server

Linux or FreeBSD based remote servers have a configuration file, gamecp.ini - this file should be chmod and chowned correctly to prevent unauthorized access, this is done by default in GameCP 1.2.7 but you should always check to help prevent issues

chown root:root /usr/local/gcp/gamecp.ini
chmod 600 /usr/local/gcp/gamecp.ini