Welcome to WebmasterWorld Guest from 50.17.16.177

Forum Moderators: phranque

Message Too Old, No Replies

Giving a freelancer access to our Cpanel without access to all files?

Possible to set-up login without access to everything?

     
12:07 pm on Dec 17, 2011 (gmt 0)

Preferred Member from GB 

10+ Year Member

joined:Feb 22, 2002
posts: 433
votes: 0


We need to give a freelancer abroad access to one of our shared webhosting account's Cpanel so that he can install and customise a Wordpress website.

To protect our security, is it possible to do this without giving him full access to all our files and databases in Cpanel? How would we do that please?

Thanks in advance for your advice.
9:59 pm on Dec 17, 2011 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member lucy24 is a WebmasterWorld Top Contributor of All Time Top Contributors Of The Month

joined:Apr 9, 2011
posts:12704
votes: 244


Read the fine print and/or ask your host. Shared hosting is physically set up by userspace, not by domain name. So you need to add your freelancer as a user.

Details will depend on the host. But for several years I did something similar to what you're describing: one of my directories-- it's easier if it's a whole directory-- was aliased to my son's userspace. That means he could edit the files and upload new material. If I logged on as myself, I didn't see that directory. If I logged on as him, I saw only that directory. Users visiting the site had no idea that this one directory was physically in a completely different place. Links behaved normally. (If you had your own server, you would have to Do Things to make this happen. The host probably just clicks a button and things magically get added to the config file.)

The downside is that you have to maintain two separate htaccess files, one for each of you, because htaccess goes by physical location, not domain name.
10:26 am on Dec 18, 2011 (gmt 0)

Preferred Member

5+ Year Member

joined:July 25, 2006
posts: 460
votes: 0


When you give them cPanel access, you're giving them access to everything, no way around that.

You could buy a separate shared account (probably cheap) at your webhost for the WP site to be installed and customized, and then transfer the files, database, and settings to your live site after they're done (not really as easy as it sounds).

Or don't hire people you don't trust.