Recent Posts

21

Updates / Re: Roundcube vulnerability

« Last post by cyberspace on April 08, 2026, 10:38:27 PM »

I had a problem with it.
Seems CWP is running php-7.2.30 without php-intl extension.
Roundcube needs this extension to detect Spoofing.

Seems "roundcube" running on my system doesn't require intl. Anyway, if your roundcube requires it you can compile the extension from sources:

As root:

Code: [Select]

cd /usr/local/src/
wget https://www.php.net/distributions/php-7.2.30.tar.gz
tar -xvzf php-7.2.30.tar.gz
cd php-7.2.30/ext/intl
/usr/local/cwp/php71/bin/phpize
./configure --with-php-config=/usr/local/cwp/php71/bin/php-config
make
cp modules/intl.so /usr/local/cwp/php71/lib/php/extensions/no-debug-non-zts-20170718/
open the file /usr/local/cwp/php71/php.ini for editing and add the line:

Code: [Select]

extension = intl.so
right before:

Code: [Select]

zend_extension = /usr/local/ioncube/ioncube_loader_lin_7.2.so

remove sources and extracted files

Code: [Select]

rm -rf /usr/local/src/php-*


22

Updates / Re: Roundcube vulnerability

« Last post by cyberspace on April 08, 2026, 09:34:54 PM »

Just used your script to update to 1.5.15 LTS -- on one server it worked fine, but on another server it errored out due to the system() function being disabled in that version of PHP

Hi,

Sorry for the delayed reply. I’ve been away from home for a while and only have occasional access to my PC.

Anyway, the script doesn't use the function like system() or exec(). Do you run the script from PHP using system() ?

23

Updates / Re: Roundcube vulnerability

« Last post by overseer on April 06, 2026, 01:44:05 AM »

Script wouldn't run unless system was an allowed function for that system version of PHP (8.3 in this case). It merrily proceeded to the ending echo lines and acted as if it had done something, but there was clearly an error during execution.

24

Updates / Re: Roundcube vulnerability

« Last post by Starburst on April 05, 2026, 04:26:36 PM »

@overseer Searched the script for:

Code: [Select]

system and

Code: [Select]

system( calls, and didn't see any.

Maybe @cyberspace could elaborate more.

25

Backup / Re: Disable User Backups

« Last post by Starburst on April 05, 2026, 04:04:30 PM »

Or in the GUI:

User Accounts -> List Accounts -> Under 'Package'
Turn the slider from On to Off.



This will disable automatic backups for that account.

26

Backup / Re: Disable User Backups

« Last post by overseer on April 05, 2026, 12:15:22 AM »

Uncheck the setting Backup All Users (forced)
/admin/index.php?module=backups
or look under:
/admin/index.php?module=backup_manager2

27

Backup / Disable User Backups

« Last post by maquinadigital on April 04, 2026, 07:23:04 PM »

How can I disable User Backups ? I need to disable, at least, automatic user backups...

28

Mod_Security / Re: After installing Mod Security, Apache cannot start

« Last post by Starburst on April 04, 2026, 03:53:17 PM »

For some reason when you install ModSecurity, line 2 of /usr/local/apache/conf.d/mod_security.conf needs to be manually fixed.

By Default is only has:

Code: [Select]

LoadFile /usr/lib64/
You need to edit it, say the whole line says:

Code: [Select]

LoadFile /usr/lib64/liblua-5.4.so
Save, and then start Apache.

29

Mod_Security / Re: After installing Mod Security, Apache cannot start

« Last post by overseer on April 04, 2026, 02:34:57 PM »

If you wanted to PM me your connection details, I could try to install it for you.

30

Mod_Security / Re: After installing Mod Security, Apache cannot start

« Last post by gailclark80 on April 04, 2026, 12:55:00 AM »

OS: AlmaLinux release 9.6
Mod Security version: Mod Security has been uninstalled, I don't know
Ruleset. I tried OWASP old and Comodo WAF, and Apache cannot start with either.