A little insight goes a long way. Find your next good read.
Use cPanel's Directory Privacy (Files section) to add HTTP Basic Authentication to any folder via .htaccess and .htpasswd. Never protect public_html itself. If protecting /wp-admin/, whitelist admin-ajax.php, though some AJAX calls may still intermittently break; consider protecting a narrower subdirectory instead.
Discover four ways to use domain forwarding to connect a .com domain to social media, online directories, stores, and promotional pages.
Learn how a .com domain, website, business email, and social media can help your small business build a stronger online presence.
A DS record at the parent registry authenticates your domain's DNSSEC key, establishing a chain of trust that stops cache poisoning and MITM attacks. Golden rule: always remove the DS record before changing nameservers or DNS hosts, or every validating resolver returns SERVFAIL and your domain disappears.
Before deleting any MySQL database in cPanel, confirm your live site's active database by checking DB_NAME in wp-config.php. Export a .sql backup first, since cPanel deletion is permanent. Also remove orphaned database users, and drop only specific tables if a database is shared across multiple sites.
Fix WSOD by enabling WP_DEBUG with WP_DEBUG_DISPLAY set to false, so errors log safely to wp-content/debug.log without exposing them to visitors. Identify the broken plugin from the log, then rename its folder in wp-content/plugins/ via cPanel File Manager to instantly restore your site without data loss.
Fix this error by renaming (not deleting) the conflicting folder in wp-content/plugins or wp-content/themes via cPanel File Manager, then retrying the install. Since WordPress 5.5, dashboard zip uploads also offer a one-click "Replace current with uploaded" option to resolve the same conflict automatically.
Automate DNS management with NameSilo's API using dnsListRecords, dnsAddRecord, dnsUpdateRecord, and dnsDeleteRecord. Always call dnsListRecords first to retrieve the record_id before updating or deleting; note it's passed back as rrid in update and delete calls. Useful for DDNS and Let's Encrypt wildcard verification.
A 508 error means the server's resource isolation system throttled your account after hitting its CPU, memory, or Entry Process limit, not a server crash. Check cPanel Resource Usage to identify which specific limit was hit before making changes. Unlimited bandwidth does not prevent this error; CPU and bandwidth are separate resources.
Add Strict-Transport-Security: max-age=31536000; includeSubDomains; preload to .htaccess to force HTTPS-only connections and close the first-hop vulnerability standard redirects leave open. Warning: a long max-age combined with an expired SSL certificate hard-locks visitors out with no override for up to a year.
Restore a MySQL database via cPanel's Backup tool, or manually through phpMyAdmin: select the database, drop existing tables first, then import your .sql file. Skipping the drop step causes a "Table already exists" error. Files over ~50MB need SSH import instead of the browser upload.
DMARC p=none is a monitoring-only mode: failed mail still delivers, and aggregate reports are collected instead. It provides zero protection against spoofing on its own. Best practice is a minimum 90-day monitoring period before advancing to p=quarantine. Never leave DMARC on p=none permanently.
