XF 2 Tip Some tips to secure your Xenforo Forums.

[xauUUL]

Hi, welcome lets discuss some security tips for Xenforo. If you guys have some other ideas, please share in the comment

• 
  
• Do not use the same password as FTP, Admin Panel Login, Cpanel Login Password.
• 
  
• There are password generator sites on Google, I recommend that you create a password containing at least 8 characters, numbers, characters and letters and use them.
• 
  
• And avoid using your Admin panel password, that is, your membership password, on another site or using your FTP password on another site.
• 
  
• After installing your XenForo Forum site, be sure to delete the ''install'' folder.
• 
  
• Make sure your files have CHMOD Values of 644 and Folders of 755 in FTP.
• 
  
• Avoid installing plugins on your forum site, XenForo already offers you more than enough features in the Default system.
• 
  
• The more plugins you install, the more vulnerabilities are likely to occur.
• 
  
• Do not download add-ons from unfamiliar sites with certainty.
• 
  
• Do not delete install-lock.php file in your FTP.
• 
  
• As Enxf.net, they provide you add-ons from XenForo.Com, you can use them with confidence.
• 
  
• Make use of CloudFlare or Incapsula addresses against DDOS attacks on your XenForo forum site.

 

[BattleKing]

Enable 2FA to secure your board in an additional manner

Would be nice to format your posting in a better way, so that it could be read better

 

[xauUUL]

Enable 2FA to secure your board in an additional manner

Would be nice to format your posting in a better way, so that it could be read better

BattleKingthanks sir, nice time i will consider.

 

[moohook]

"After installing your XenForo Forum site, be sure to delete the ''install'' folder."

I read on official xenforo forums that this is a bad thing

 

[xauUUL]

I dont think its a bad thing but always get a backup and try it.

xauUULIt doesn't matter if it is still there or not.

 

[BattleKing]

I dont think its a bad thing but always get a backup and try it.

xauUULIt doesn't matter if it is still there or not.

 

[one_finger_man]

you can do it this way rather than just delete the install folder that would be a issue
just add your ip address to the 777777 you can test at first see if it works

<Files admin.php>
Order Deny,Allow
Deny from all
Allow from 777.77.77.777
</Files>