You can read its source for more info. If you are still not sure, do ask, but please supply with ISPConfig version as 3.1 is different from 3.2 in securing its control panel.