Strange script

[TSO]

It could definitely be secured better - there were a couple holes we found later on. That's why I figured we'd take things offline until we could get it straight. Personally, my strength is in managing Windows Server and IIS, so that certainly didn't help things along.

What would you say is a more secure panel than cPanel? Or, is that pretty relative?

 

[FeediaCo]

Looks like a php version for ssh my guess but I maybe wrong hope all is well

 

[RavenServers]

Looks like a php version for ssh my guess but I maybe wrong hope all is well

That's exactly what it is - web based form of SSH access, as well as some basic vulnerability exploits thrown in (depending on the build).

 

[FeediaCo]

Okay well i just hope no damage was done to the server btw merry xmas

 

[M Bacon]

Well, I will tell you the truth about this file. You can get the /etc/passwd file with this and if it has safe mode off....I can read your mysql files and if you have the root pass on one of those mysql files.....I can gain access to the root of your server. You must have openbasedir fixed and have safe mode on. Never make your mysql pass....your root pass. I have seen somebody smart enough to hack it with c99.php & c100.php. Its not that hard to find at all.

 

[JonnyH]

If disable exec, that should be ok. I think there's another command similar but I can't think of it. Go in your WHM Security center there's some good basedir features in there which should do some good. There's also some nice modules you can compile with apache.

 

[Skylar]

If disable exec, that should be ok. I think there's another command similar but I can't think of it. Go in your WHM Security center there's some good basedir features in there which should do some good. There's also some nice modules you can compile with apache.

too much features to be able to have with apache. I don't even know what probobly half of them do and i've been with servers for a few years now (all with cPanel of course).