{"id":1269,"date":"2022-09-21T13:09:24","date_gmt":"2022-09-21T13:09:24","guid":{"rendered":"https:\/\/sunucucozumleri.com\/?p=1269"},"modified":"2023-08-07T21:12:06","modified_gmt":"2023-08-07T21:12:06","slug":"whmcs-guvenligi","status":"publish","type":"post","link":"https:\/\/sunucucozumleri.com\/blog\/whmcs-guvenligi\/","title":{"rendered":"WHMCS G\u00fcvenli\u011fi"},"content":{"rendered":"<p>Merhabalar,<br \/>\nBug\u00fcn bilgi bankam\u0131zda sizlere<br \/>\nWHMCS G\u00fcvenlik \u00d6nlemleri<br \/>\nWHMCS Tema \u00c7al\u0131nmalar\u0131na Kar\u015f\u0131 Al\u0131nabilecek \u00d6nlemleri<br \/>\nkonusunda bilgiler payla\u015faca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Makale \u0130\u00e7eri\u011fi<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/sunucucozumleri.com\/blog\/whmcs-guvenligi\/#1_%E2%80%93_Whmcs_Guvenlik_Onlemleri_Hosting_hizmeti_veren_bir_cok_firmada_kullanilan_otomasyon_sistemlerinden_birisi_de_WHMCSdir_Yaygin_olarak_kullanilmasinin_getirmis_oldugu_iyi_taraflarinin_oldugu_kadar_bilincsiz_yapilandirilmalarda_bircok_firmaniyida_zor_duruma_dusurebilmektedir_Peki_nasil_guvenli_hale_getirebiliriz\" >1 &#8211; Whmcs G\u00fcvenlik \u00d6nlemleri \nHosting hizmeti veren bir \u00e7ok firmada kullan\u0131lan otomasyon sistemlerinden birisi de WHMCS&#8217;dir. Yayg\u0131n olarak kullan\u0131lmas\u0131n\u0131n getirmi\u015f oldu\u011fu iyi taraflar\u0131n\u0131n oldu\u011fu kadar, bilin\u00e7siz yap\u0131land\u0131r\u0131lmalarda bir\u00e7ok firman\u0131y\u0131da zor duruma d\u00fc\u015f\u00fcrebilmektedir. \nPeki nas\u0131l g\u00fcvenli hale getirebiliriz.<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/sunucucozumleri.com\/blog\/whmcs-guvenligi\/#2-_WHMCS_Tema_Guvenligi\" >2- WHMCS Tema G\u00fcvenli\u011fi<\/a><\/li><\/ul><\/nav><\/div>\n<h3><span class=\"ez-toc-section\" id=\"1_%E2%80%93_Whmcs_Guvenlik_Onlemleri_Hosting_hizmeti_veren_bir_cok_firmada_kullanilan_otomasyon_sistemlerinden_birisi_de_WHMCSdir_Yaygin_olarak_kullanilmasinin_getirmis_oldugu_iyi_taraflarinin_oldugu_kadar_bilincsiz_yapilandirilmalarda_bircok_firmaniyida_zor_duruma_dusurebilmektedir_Peki_nasil_guvenli_hale_getirebiliriz\"><\/span>1 &#8211; Whmcs G\u00fcvenlik \u00d6nlemleri<br \/>\nHosting hizmeti veren bir \u00e7ok firmada kullan\u0131lan otomasyon sistemlerinden birisi de WHMCS&#8217;dir. Yayg\u0131n olarak kullan\u0131lmas\u0131n\u0131n getirmi\u015f oldu\u011fu iyi taraflar\u0131n\u0131n oldu\u011fu kadar, bilin\u00e7siz yap\u0131land\u0131r\u0131lmalarda bir\u00e7ok firman\u0131y\u0131da zor duruma d\u00fc\u015f\u00fcrebilmektedir.<br \/>\nPeki nas\u0131l g\u00fcvenli hale getirebiliriz.<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u00d6ncelikle sunucumuzda PHP handler olarak suPHP aktif hale getiriyoruz.<br \/>\n<code><br \/>\nfind .\/ -iname \"*.php\" -exec chmod 600 {} \\;<br \/>\nfind .\/ -type d -exec chmod 711 {} \\;<br \/>\n<\/code><br \/>\nkomutunu SSH terminal \u00fczerinden \u00e7al\u0131\u015ft\u0131ral\u0131m.<\/p>\n<p>Taray\u0131c\u0131 \u00fczerinden cron job eri\u015fimini engellemek<br \/>\nWHMCS&#8217;nin zamanlanm\u0131\u015f dosya olarak kulland\u0131\u011f\u0131 crons\/cron.php dosyas\u0131n\u0131 art niyetli ki\u015filerin taray\u0131c\u0131 \u00fczerinden \u00e7al\u0131\u015ft\u0131rmas\u0131n\u0131 engellemek i\u00e7in konsol \u00fczerinden,<br \/>\n<code><br \/>\ncd \/whmcsklasoryolu<br \/>\ncd crons<br \/>\necho \"deny from all\" &gt; .htaccess<br \/>\n<\/code><br \/>\nkomutunu \u00e7al\u0131\u015ft\u0131ral\u0131m.<\/p>\n<p>WHMCS configuration.php dosyas\u0131nda yap\u0131lmas\u0131 gereken de\u011fi\u015fikler,<br \/>\nAdmin klas\u00f6r yolunu de\u011fi\u015ftirmek<br \/>\n$customadminpath = &#8220;home\/dizinadi\/yeniadminpaneli&#8221;;<\/p>\n<p>templates_c klas\u00f6r yolunu de\u011fi\u015ftirmek<\/p>\n<p>$templates_compiledir = &#8220;home\/dizinadi\/yenicache_c\/&#8221;;<\/p>\n<p>downloads klas\u00f6r\u00fcn\u00fcn yolunu de\u011fi\u015ftirmek<br \/>\n$downloads_dir = &#8220;home\/dizinadi\/yenidosyaadresi\/&#8221;;<br \/>\nattachment klas\u00f6r yolunu de\u011fi\u015ftirmek<br \/>\n$attachments_dir = &#8220;home\/dizinad\u0131n\u0131z\/attachments\/&#8221;;<\/p>\n<h3><span class=\"ez-toc-section\" id=\"2-_WHMCS_Tema_Guvenligi\"><\/span>2- WHMCS Tema G\u00fcvenli\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Hepimiz biliyoruz ki whmcs temalar\u0131nda, template motorundan olsa gerek .tpl uzant\u0131s\u0131 kullan\u0131lmaktad\u0131r. \u00d6zel olarak yapm\u0131\u015f oldu\u011funuz \u00e7al\u0131\u015fmalar\u0131n birka\u00e7 t\u0131k ile indirilebilece\u011finin fark\u0131nday\u0131z. \u00d6rnek olarak, siteadi.com\/templates\/temaadi\/tpldosyaadi.tpl yaz\u0131ld\u0131\u011f\u0131nda tpl dosyalar\u0131 indirilebilmektedir. Art niyetli kullan\u0131m\u0131n \u00f6n\u00fcne ge\u00e7mek ve yapm\u0131\u015f oldu\u011fumuz \u00e7al\u0131\u015fmalar\u0131n \u00e7al\u0131nmas\u0131n\u0131 engellemek i\u00e7in \/templates\/ klas\u00f6r\u00fcm\u00fcz\u00fcn i\u00e7erisine .htaccess dosyas\u0131 olu\u015ftural\u0131m ve a\u015fa\u011f\u0131daki kodu ekleyip kaydedelim.<br \/>\n<code><br \/>\n&lt;filesMatch \"\\.(tpl|.php)$\"&gt;<br \/>\ndeny from all<\/p>\n<p><\/code><\/p>\n<p>httrack program\u0131n\u0131 engelleme<\/p>\n<p><code><br \/>\nRewriteEngine On<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Bot\\ mailto:craftbot@yahoo.com [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Custo [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^DISCo [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Download\\ Demon [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Express\\ WebPictures [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^GetRight [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^HMView [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} HTTrack [NC,OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Image\\ Stripper [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Image\\ Sucker [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} Indy\\ Library [NC,OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Internet\\ Ninja [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^JetCar [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^JOC\\ Web\\ Spider [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^larbin [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Mass\\ Downloader [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^MIDown\\ tool [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Mister\\ PiX [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Navroad [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Net\\ Vampire [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Offline\\ Explorer [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Offline\\ Navigator [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Papa\\ Foto [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^pavuk [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^ReGet [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Teleport\\ Pro [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Web\\ Image\\ Collector [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Web\\ Sucker [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebGo\\ IS [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Website\\ eXtractor [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Website\\ Quester [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebWhacker [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Wget [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Widow [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Xaldon\\ WebSpider [OR]<br \/>\nRewriteCond %{HTTP_USER_AGENT} ^Zeus<br \/>\nRewriteRule .* - [F]<br \/>\n<\/code><\/p>\n<p>Teleport Engelleme<\/p>\n<p>Disallow: \/<\/p>\n<p>User-agent: TeleportPro<br \/>\nDisallow: \/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Merhabalar, Bug\u00fcn bilgi bankam\u0131zda sizlere WHMCS G\u00fcvenlik \u00d6nlemleri WHMCS Tema \u00c7al\u0131nmalar\u0131na Kar\u015f\u0131 Al\u0131nabilecek \u00d6nlemleri konusunda bilgiler payla\u015faca\u011f\u0131z. 1 &#8211; Whmcs G\u00fcvenlik \u00d6nlemleri Hosting hizmeti veren bir \u00e7ok firmada kullan\u0131lan otomasyon sistemlerinden birisi de WHMCS&#8217;dir. Yayg\u0131n olarak kullan\u0131lmas\u0131n\u0131n getirmi\u015f oldu\u011fu iyi taraflar\u0131n\u0131n oldu\u011fu kadar, bilin\u00e7siz yap\u0131land\u0131r\u0131lmalarda bir\u00e7ok firman\u0131y\u0131da zor duruma d\u00fc\u015f\u00fcrebilmektedir. Peki nas\u0131l g\u00fcvenli hale getirebiliriz. &hellip;<\/p>\n","protected":false},"author":1,"featured_media":1456,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[234],"tags":[],"class_list":["post-1269","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-whmcs"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1269","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=1269"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/1269\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/1456"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=1269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=1269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=1269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}