How to secure the IWP admin panel

Install under a SSL
You can install the IWP admin panel under a SSL.
To enable SSL,

  1. Open config.php file.
  2. Find this line
    define(‘APP_HTTPS’, 0); // 1 => HTTPS on, 0 => HTTPS off
  3. Change the value to 1.

Install in a password protected folder
Install the admin panel in a protected folder. You can enter the credentials under Settings → App Settings → HTTP Authentication / Folder protection.

Allow access only to specified IPs
You can restrict access to the admin panel only when accessing from certain IPs. To add an IP, go to Settings → App Settings → Allow access from these IPs only. Type in the IP and click Add IP.