Okay so I figured it out but I have closed the ports down. How would someone hack me if I have a strong password set up get into my controller?
I think my router supports VPN but I don't know much about how that works. I have an Arris two in one modem router. I'm sure if I was able to figure out port forwarding and setting up a ddns I should be able to figure out VPN.
There's so much more to security than just a password, there's many ways to hack a website. The little webserver serving up the miner's management page was never built to be secure. Either go the VPN route or use a product like Awesomeminer.