• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Resolved How to protect domain.cc/ftpstat on plesk web admin

Hi WSNHosting,

the standart protection is already configured in your configuration files:
Code:
...

        Alias "/plesk-stat" "/var/www/vhosts/system/YOUR-DOMAIN.COM/statistics"
        <Location  /plesk-stat/>
            Options +Indexes
        </Location>
        <Location  /plesk-stat/logs/>
            Require valid-user
        </Location>
        Alias /webstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/webstat
        Alias /webstat-ssl /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/webstat-ssl
        Alias /ftpstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/ftpstat
        Alias /anon_ftpstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/anon_ftpstat
        Alias /awstats-icon /usr/share/awstats/icon

...

        <Directory "/var/www/vhosts/system/YOUR-DOMAIN.COM/statistics">
            AuthType Basic
            AuthName "Domainstatistiken"
            AuthUserFile "/var/www/vhosts/system/YOUR-DOMAIN.COM/pd/d..httpdocs@plesk-stat"
            require valid-user
        </Directory>

... with login credentials for your "domain-system-user" and the corresponding password, which you setup when you created the subscription. ;)
 
AuthUserFile "/var/www/vhosts/system/YOUR-DOMAIN.COM/pd/d..httpdocs@plesk-stat"

d..httpdocs@plesk-stat ??

i see folder /pd/ not have file ?


Hi WSNHosting,

the standart protection is already configured in your configuration files:
Code:
...

        Alias "/plesk-stat" "/var/www/vhosts/system/YOUR-DOMAIN.COM/statistics"
        <Location  /plesk-stat/>
            Options +Indexes
        </Location>
        <Location  /plesk-stat/logs/>
            Require valid-user
        </Location>
        Alias /webstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/webstat
        Alias /webstat-ssl /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/webstat-ssl
        Alias /ftpstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/ftpstat
        Alias /anon_ftpstat /var/www/vhosts/system/YOUR-DOMAIN.COM/statistics/anon_ftpstat
        Alias /awstats-icon /usr/share/awstats/icon

...

        <Directory "/var/www/vhosts/system/YOUR-DOMAIN.COM/statistics">
            AuthType Basic
            AuthName "Domainstatistiken"
            AuthUserFile "/var/www/vhosts/system/YOUR-DOMAIN.COM/pd/d..httpdocs@plesk-stat"
            require valid-user
        </Directory>

... with login credentials for your "domain-system-user" and the corresponding password, which you setup when you created the subscription. ;)
 
Hi WSNHosting,

FIRST, pls. CHECK, that your configuration files includes the protection ( pls. check it for apache AND nginx configuration files! ).

If it does and you still don't have the "htaccess" - equivalent, which Plesk uses to secure statistics, pls. consider to head over to:

=> HOME > Domains > YOUR-DOMAIN.COM > Password-Protected Directories

... and check if the setting for "/plesk-stat" is available.


It it doesn't exist, pls. consider to add the desired folder to protect it as setup within standard creations over the Plesk Control Panel. ;)
 
hello

i add it

sshot-62.jpg

sshot-63.jpg

but not work

if i add file .htaccess is work but can't login

sshot-64.jpg

AuthType Basic
AuthName "Domainstatistiken"
AuthUserFile "/var/www/vhosts/system/domain.com/pd/d..httpdocs@plesk-stat"
require valid-user




Hi WSNHosting,

FIRST, pls. CHECK, that your configuration files includes the protection ( pls. check it for apache AND nginx configuration files! ).

If it does and you still don't have the "htaccess" - equivalent, which Plesk uses to secure statistics, pls. consider to head over to:

=> HOME > Domains > YOUR-DOMAIN.COM > Password-Protected Directories

... and check if the setting for "/plesk-stat" is available.


It it doesn't exist, pls. consider to add the desired folder to protect it as setup within standard creations over the Plesk Control Panel. ;)
 
Hi WSNHosting,

you seem to like screenshots, so I try to explain it with screenshots:

Plesk-Onyx_Protected-folders_01.png

Plesk-Onyx_Protected-folders_02.png

Plesk-Onyx_Protected-folders_03.png

Or pls. go to:

=> HOME > Subscriptions > YOUR-DOMAIN.COM > Hosting Settings

and scroll to the setting: Web statistics (Protect access to your web statistics with your FTP username and password )
 
Back
Top