5 ms·
https://www.webhostingtalk.com/showthread.php?t=1726800 https://www.webhostingtalk.com/showthread.php?t=1726800 it seems so, here is a law firm on a $8/mo cpan
by sitepodmatt 8y ago
https://www.webhostingtalk.com/showthread.php?t=1726800 https://www.webhostingtalk.com/showthread.php?t=1726800 it seems so, here is a law firm on a $8/mo cpanel server with every service under the sun running on the box (SSH, FTP, https, pop, IMAP and so on) and hundreds (maybe thousands) of actors with some form of privileged access to platform (CGI, modphp, ftp and so on). host -t mx yourlawfirm.com before commissioning their services. Some people are blind to the risk, and unfortunately some communities push/protect sloppy solutions like the above as "secure".
- shiftpgdn 8y agocPanel is pretty secure and was the industry standard before AWS/Azure/GCP and their ilk came along. You act like user jailing isn't a thing.
- sitepodmatt 8y agoCpanel is a fucking joke, on day one they launched their federated ID (yes scary concept) I reported a 101 xss in it, they can't do anything right, that's as late as 2016. Industry standard, don't make me laugh. How have you came to the conclusion of "pretty secure" please don't tell PHP base_dir and some shitty non containerised jail shell is all it takes? Respect to Igor at cloudlinux for trying to tackle the problem, about the only implementation which one would be able to sleep at night with, but can we stop polishing a turd.