We can access cPanel either by logging in through the web hosting site or accessing it from yourdomain(dot)com/cpanel. I worry the second option makes our website vulnerable to illegal login attempts. Is there anyway to disable the option?
Do you mean you want to disable youdomain.com/ cpanel ? That URL will always prompt for login details and no one accept you is able to access that area unless you provide the details for control panel to someone.