Sep 22, 2026
phpBB Security Hardening on Shared Hosting: Lock Down config.php, Block Spam, and Add HTTP Headers
phpBB ships with sensible defaults, but shared hosting exposes config.php, the ACP, and registration forms to real-world abuse. This guide walks through file permissions, admin path protection, spam controls, and HTTP security headers using only cPanel, DirectAdmin, .htaccess, and the phpBB ACP.