Protect Your WHMCS Custom Theme

[KingAss]

Hi All WebHosters.

Do you have a custom WHMCS theme to fit with your site layout.

I hope knowinservers doesnt mind me using there site as an example but it might make people more aware of the error in the site where people can rip the skin for there own use

So here we go.

If i go to: http://www.knowinservers.com/whmcs/templates/portal/

It shows all the files used for the layout of the WHMCS Skin.

[SLIDE]http://screensnapr.com/e/zY2VGA.png[/SLIDE]

SO to protect your custom theme with a blank index.html file.

I am working out a way via .htaccess to block access to it.
So if you can help then please post in here.

Cheers

I thought I would help protect all members on WJunction and hope this helps.

EDIT
Thanks to storming for this.

Here is the .htaccess code that you would use to block people access to it.

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

 

[phpcat]

Good thread.

 

[DLow]

pwnt lol ?

 

[Glenn]

Yeah No problem, you can use our site
Also, by adding the index.html page, you cant stop the ripper from ripping your site.
Just let me know when you are done explaining, I can secure it back Jordan

 

[KingAss]

yer i know but it jst helps a little bit. There must be a way you can secure it.

 

[Storming]

make a .htaccess file on the root of your site and add the below.

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

it will prevent visitors from accessing the header.tpl etc so basicaly it just blocks all access to your integ files

Much better solution than adding a index page which people can just access directly at: www.whmcsdomain.com/templates/themename/header.tpl now it won't work


EDIT:

You Are Late, Its Over

http://www.knowinservers.com/whmcs/templates/portal/header.tpl
I wouldn't be so cocky KnowingServers :P

 

[DLow]

Yeah No problem, you can use our site
Also, by adding the index.html page, you cant stop the ripper from ripping your site.
Just let me know when you are done explaining, I can secure it back Jordan

lolololol

 

[NewEraCracker]

lol. you just need to know the filenames. then u can have epic lulz.

 

[Nlvl]

To forbid access to .tpl files... add the following code in your main public_html directory.

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

This will deny anyone visiting the .tpl file such as http://yoursite.com/whmcs/blahblah/blah.tpl

 

[semoweb]

great thread

 

[soft2050]

hmm good thread

Knowin might have added a index page.

but, http://www.knowinservers.com/whmcs/templates/portal/3dsecure.tpl
is accessible and one can rip now also. One need to know the filename only.

The HTACCESS soultion by Storming is very good to protect template

<Files ~ "\.tpl$">
Order allow,deny
Deny from all
</Files>

 

[Storming]

I'll make a thread shortly about securing your WHMCS.

 

[Daniel]

LOL :D