Where to find and manage hosted websites and web roots

This article is part of the Spark Rack Website Hosting knowledgebase and covers Websites & Web Roots. This navigation guide explains where the controls live, how list pages differ from detail pages, how to preserve context while saving, and how to confirm that an action applied to the intended item.

The relevant customer area is Services > Manage or Control Panel > Websites. It is used to manage hosted websites and web roots, including domains, aliases, document roots, index files, logs, application URLs, and website-level settings. Controls can differ by product, lifecycle status, account permission, domain state, payment method, or service configuration. When an action is not shown, confirm eligibility and permission instead of following an unrelated workaround.

Before you begin

• Have an active hosting service and domain
• Know the intended document root
• Create a current file and database backup
• Confirm application compatibility with the target PHP settings
• Schedule production changes during a controlled window
• Identify the exact item associated with hosted websites and web roots and confirm its current status.
• Write down the expected result and the current value before changing anything.
• Plan a rollback or recovery path for any action that can affect access, billing, data, routing, delivery, or availability.

Finding the correct control

Begin at Services > Manage or Control Panel > Websites. A list page helps locate an item; a detail page applies actions to one selected item; tabs and subtabs narrow the task further. Page-level actions may affect the whole item, while row actions, toggles, and modal forms usually affect a specific record. Always read the selected item name again before saving.

1. Sign in through the official Spark Rack account page and review any account-wide notice.
2. Open Services > Manage or Control Panel > Websites and use search, filters, or status labels to locate the exact item related to hosted websites and web roots.
3. Open the item detail page rather than acting only from a summary card when a detailed control is available.
4. Choose the relevant tab and subtab. Confirm that headings and identifiers still match the intended item.
5. Open the action, read validation text, and compare the displayed current value with your record.
6. Submit once, keep the page open during processing, and read the success or error message completely.
7. Return to the same tab or subtab, refresh it, and confirm the value persisted.

A missing action usually means one of four things: the selected product does not include it, the account user lacks permission, the item is not in a state that permits the action, or a prerequisite must be completed first. Do not work around a missing control by using another customer's instructions or an unrelated backend address.

Detailed operating procedure

Use this sequence as the baseline workflow for Websites & Web Roots. Some steps may be informational when the selected product does not expose that exact control, but the verification and recordkeeping principles still apply.

1. Open the service’s website or configuration area
2. Confirm the domain, aliases, web root, active status, and current PHP values
3. Place public files only in the intended document root and keep secrets outside it
4. Ensure the expected index file exists with correct case
5. Change one PHP or application setting at a time
6. Wait for Saving Changes to complete and confirm the same tab shows the new value
7. Test public pages, administrative pages, forms, scheduled tasks, and logs
8. Confirm that dependent settings still point to the intended destination and that no older value is overriding the new one.
9. Observe the result long enough to catch delayed processing, caching, queued work, or an intermittent failure.
10. Update internal documentation with the final value, date, owner, result, and any scheduled follow-up.

Verification checklist

• The domain resolves to the intended service
• The expected index page loads over HTTP and HTTPS
• Application URLs and assets use correct paths
• The selected PHP value persists after refresh
• No new fatal error appears in logs
• The selected account item, identifier, domain, invoice, user, or service matches the original request.
• The portal no longer shows a pending or failed action unless delayed processing is expected and documented.
• An independent customer-side test produces the expected result.
• Related billing, security, notification, routing, and renewal settings remain correct.
• The previous value and rollback information are retained until the change is proven stable.

Common failure patterns

Use the symptom to narrow the investigation. Do not apply every possible fix at once.

• Files are uploaded one directory above or below the web root
• An index file has incorrect case
• DNS still points to the old provider
• A plugin or component is incompatible with the selected PHP version
• Several runtime settings are changed at once
• The correct value was saved on the wrong item, environment, domain, mailbox, record, user, or billing account.
• A dependent setting, external provider, cache, client, or application continues to use an older value.
• The item is pending, suspended, expired, unpaid, cancelled, locked, or otherwise not eligible for the requested action.
• The change completed, but verification reused an authenticated session or cached result that hid the actual behavior.
• A temporary error was treated as permanent and followed by multiple conflicting edits.

Security, privacy, and data handling

• Use a unique password stored in a reputable password manager and enable two-factor authentication for every account user who can access it.
• Give each person an individual account user instead of sharing the owner login. Remove access promptly when responsibilities change.
• Do not send passwords, two-factor recovery codes, full payment-card data, private keys, API secrets, or unredacted identity documents in a normal support reply.
• Review unexpected sign-in notices, permission changes, domain changes, payment changes, and credential resets as possible security events.
• After an access-related incident, rotate affected credentials, review delegated users and contacts, verify domains and DNS, and document the recovery actions.
• Limit access to hosted websites and web roots to people who need it and review that access when responsibilities change.
• Before sharing evidence involving domains, aliases, document roots, index files, logs, application URLs, and website-level settings, redact information that is not required to diagnose the issue.

When to contact Spark Rack

Contact Spark Rack when the account shows a failed or inconsistent provider-side action, the required control is missing despite confirmed eligibility and permission, data restoration or protected logs are required, an unauthorized change is suspected, or the problem remains after a controlled rollback and independent verification.

• The account email address and the exact service, domain, invoice, ticket, or other item involved
• The page and section used, including the tab or subtab, without copying session tokens from the address bar
• The expected result and the actual result in separate sentences
• The approximate time of the last successful use and the first failure, including the time zone
• The exact error text, response code, bounce text, or visible status
• The changes made immediately before the issue, including old and new values when known
• The devices, browsers, networks, applications, or external tools used to reproduce the issue
• The troubleshooting steps already completed and the result of each step

Closeout and ongoing care

After Websites & Web Roots is working, record the final state and remove any temporary access, files, forwarding paths, test records, or broad permissions that were created for the work. Review related expiration dates, renewal settings, payment status, contacts, and alerts so a future administrative event does not recreate the problem.

Keep the support history, change record, and safe verification evidence for as long as they are operationally useful. Periodic review is especially important after staff changes, migrations, major application updates, domain renewals, payment-method changes, or security incidents.