Important PHP Security Advisory (October 2026)
Important PHP Security Update: What Website Owners Need to Know Last updated: 21 October 2026Update: Please keep an eye on our status page for further updates: https://status.freethought.uk/announcements The PHP development team has announced two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10 in severity. An emergency…
Important PHP Security Advisory (October 2026)
Important PHP Security Update: What Website Owners Need to Know Last updated: 21 October 2026Update: Please keep an eye on our status page for further updates: https://status.cloudabove.com/announcements The PHP development team has announced two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated 9.2 out of 10 in severity. An emergency…
How to Disable Directory Indexing and Prevent File Browsing
When a website folder lacks an index file (such as index.php or index.html), web servers often display a full list of all files in that directory. Known as directory indexing or directory browsing, this allows visitors to browse raw uploads, plugin files, or site assets, posing privacy and security risks.…
Using ULTRA Cloud‘s application firewall (WAF)
The Application Firewall adds an extra layer of protection to your website by checking incoming requests for patterns commonly associated with attacks. You choose which rules should block matching requests, so you stay in control of what gets filtered. Think of it as another layer of defence alongside keeping your…
Managing SFTP Access: Requesting Password Resets and User Changes
SFTP (Secure File Transfer Protocol) allows you and your developers to securely upload and edit files on your server. Because SFTP operates directly at the server level, managing users and passwords works a little differently than standard cPanel or website logins. This guide explains how SFTP user management works, why…
How to Reset a Lost cPanel Password
If you’ve lost or forgotten your cPanel password, don’t worry — you can reset it quickly without contacting support in most cases. Option 1 — Reset via the Login Page Go to your cPanel login page (e.g. yourdomain.com:2083 or cpanel.yourdomain.com) Click Reset Password Enter your cPanel username or the email…
How to Enable Two-Factor Authentication (2FA) on Your Account
Two-factor authentication (2FA) adds a second layer of protection to your account by requiring a time-based code from an authenticator app in addition to your password. This guide walks through enabling 2FA from your account portal. Step 1: Open Security Settings From your portal.freethought.uk account dashboard, open the account menu…
Password Management Approaches: A Practical Guide
Passwords remain the most common way to protect accounts, but choosing and managing them well makes the difference between strong security and easily compromised accounts. This guide outlines practical approaches to password management for both individuals and teams. Why Password Management Matters Weak or reused passwords are one of the…
How to Issue/renew Let’s Encrypt SSL on Plesk
1. Log in to Plesk Access your Plesk control panel using the login details provided by your hosting provider. From the left‑hand menu, select Websites & Domains. 2. Open the Let’s Encrypt Extension Locate the domain you want to secure. Click SSL/TLS Certificates. If you see an existing Let’s Encrypt…
How to Issue a Free SSL Certificate in cPanel (New Method)
Having a secure website isn’t just a nice-to-have anymore—it’s a must! A free SSL certificate ensures your visitors’ data stays safe, builds trust, and keeps Google happy. If you’ve looked for the old “AutoSSL or SSL/TLS Status” button recently and noticed it’s missing, don’t worry! cPanel updated its look. Issuing…