Recent Posts

31

Mod_Security / Re: MOD SECURITY issue on new CWP PRO INSTALLATION

« Last post by zeejdeej on January 30, 2026, 05:01:45 PM »

i think cwp should consider integrating atomic crop. free waf rules in cwp panel so everyone can benifit using it . manual installation and configuration have too many errors and conflicts as cwp got custom configuration only cwp panel admins knows best.

32

Mod_Security / Re: MOD SECURITY issue on new CWP PRO INSTALLATION

« Last post by zeejdeej on January 30, 2026, 04:58:57 PM »

my cwp pro is stuck at comodo waf v 1.240 i tried many times to update to v 1.241 manually by replacing the waf rules files but it revert back to v. 1.240 most probably due to cwp automatic update cron job.

i tried to switch to OWASP latest but as you said it had too many false positives and even after fine tuning i am not able to keep my hosted website unblocked.

i want to try atomic crop free waf rules as i heard they are good and atleast updates once a month and have lesser false positives? have you tried it? any suggestions

33

Mod_Security / atomic crop. free waf rules set

« Last post by zeejdeej on January 30, 2026, 04:47:32 PM »

hello,

does anyone know how to safely install free version of atomic crop. free waf rules set in cwp pro? i am currently using comodo waf rules but as you all know its discontinued in 2024 but they were the best with minimum false positives.

i tried to use OWASP Latest instead in my cwp pro but it has got so many false positives and blocks all my hosted website even after fine tuning. comodo waf rules works just fine but outdated

i was wondering if someone have used atomic crop. free waf rules as i can see its reviews are good so i wanna try it instead of comodo waf rules. atleast atomic crop. free rules are updated once a month or so ... have anyone tried it ? would appretiate if someone can post step by step guide to install atomic crop. free waf rules instead of currently installed comodo waf rules in my cwp pro to avoid conflits on a live server. thanks ..

34

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by WISTFUL on January 30, 2026, 01:54:42 AM »

I wouldn't trust AI to be your guiding light. For example, just at a quick glance, it is giving you the wrong ownership for the PHP socket. It should be:

Code: [Select]

chown root:nobody /opt/alt/php-fpm74/usr/var/sockets/<username>.sockAnd seemingly, it isn't telling you to initially create the <username>.conf file for each user account with the correct user & group within, as well as the correct paths? Even with CWP Pro, you have to manually create the php-fpm user conf files for each PHP version.

Oh! It was predictable.
The AI ​​has no knowledge of CWP and often uses cPanel addresses for it. The guide that was posted is the result of a long conversation about describing the problem and forcing chatGPT to use the official resources provided by the site https://control-webpanel.com, taking into account the experiences of users on its forum.

Any reason you're looking at php 7.4? Unless you have older WordPress themes/extensions that require it for full compatibility, it is EOL and probably contains security vulnerabilities. Look to 8.1 if you are using WP, or 8.3 if you need a fully supported PHP version.

Unfortunately, a number of users are using old WordPress. Either I have to choose the middle ground or roll up my sleeves to dig up the dead WordPress...

If you revise the relevant guide based on your knowledge and experiences with CWP, it will be a unique reference to help me and others who encounter the same problem.

35

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by WISTFUL on January 30, 2026, 01:34:40 AM »

Cant you just login here https://support.centos-webpanel.com/index.php?rp=/login and put a bs ip in the box and when cwp does it's sweep your pro will be disabled then you can just use the free features only.

Or am i reading what you want wrong ?

When (in my particular situation) the internet is nationalized, there is no connection from the server inside the country to the outside (to access the CWP license server) and as a result, the license is automatically deactivated and CWP is downgraded to the free version. With the PHP‑FPM Selector disabled on the free version, we will receive a 503 error on PHP sites.

This topic is to fix errors when downgrading CWP to the free version (for any reason) by manually installing Alt-PHP and allowing you to revert back to the pro version with the least possible challenge.

36

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by overseer on January 30, 2026, 12:50:11 AM »

I wouldn't trust AI to be your guiding light. For example, just at a quick glance, it is giving you the wrong ownership for the PHP socket. It should be:

Code: [Select]

chown root:nobody /opt/alt/php-fpm74/usr/var/sockets/<username>.sockAnd seemingly, it isn't telling you to initially create the <username>.conf file for each user account with the correct user & group within, as well as the correct paths? Even with CWP Pro, you have to manually create the php-fpm user conf files for each PHP version.

Code: [Select]

[username]
listen = /opt/alt/php-fpm74/usr/var/sockets/username.sock
listen.allowed_clients = 127.0.0.1

;listen.owner = "username"
listen.group = "nobody"
listen.mode = 0660
user = "username"
group = "username"

;request_slowlog_timeout = 15s
;slowlog = /opt/alt/php-fpm74/usr/var/log/php-fpm-slowlog-username.log

pm = ondemand
pm.max_children = 4
pm.max_requests = 4000
pm.process_idle_timeout = 15s

;listen.backlog = -1
;request_terminate_timeout = 0s
rlimit_files = 131072
rlimit_core = unlimited
catch_workers_output = yes

env[HOSTNAME] = $HOSTNAME
env[TMP] = /home/username/tmp
env[TMPDIR] = /home/username/tmp
env[TEMP] = /home/username/tmp
env[PATH] = /usr/local/bin:/usr/bin:/binAny reason you're looking at php 7.4? Unless you have older WordPress themes/extensions that require it for full compatibility, it is EOL and probably contains security vulnerabilities. Look to 8.1 if you are using WP, or 8.3 if you need a fully supported PHP version.

37

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by Martins-phpbb on January 30, 2026, 12:19:01 AM »

Cant you just login here https://support.centos-webpanel.com/index.php?rp=/login and put a bs ip in the box and when cwp does it's sweep your pro will be disabled then you can just use the free features only.

Or am i reading what you want wrong ?

38

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by WISTFUL on January 29, 2026, 10:27:27 PM »

This is the solution provided by AI based on my operating system specifications and CWP configuration:
Do you think there's anything in it that needs optimization or could cause problems later?

Step 1: Full Backup

1. Backup websites:
   

Code: [Select]

cp -r /home/* /backup/cwp_sites/
2. Backup databases:
   

Code: [Select]

mysqldump -u root -p --all-databases > /backup/all_databases.sql
3. Backup configurations:
   

Code: [Select]

cp -r /usr/local/cwpsrv/ /backup/cwpsrv/
   cp -r /etc/php-fpm.d/ /backup/php-fpm/
   cp -r /etc/httpd/conf/ /backup/httpd_conf/
   cp -r /etc/nginx/conf.d/ /backup/nginx_conf/
Note: The [/backup] path can be located on a separate disk or another server.


Step 2: Check and install PHP 7.4

1. Check installed versions:
   

Code: [Select]

rpm -qa | grep alt-php
2. If PHP 7.4 is not installed, install it:
   

Code: [Select]

yum install alt-php74 alt-php74-php-fpm alt-php74-php-cli -y

Step 3: Enable and start PHP-FPM 7.4

Code: [Select]

systemctl enable --now php-fpm74
systemctl status php-fpm74
Note: If the service is not active or shows errors, investigate and fix it before continuing.


Step 4: Create socket directory

• Default socket path:

Code: [Select]

/opt/alt/php-fpm74/usr/var/sockets/<sitename>.sock
• If it does not exist:

Code: [Select]

mkdir -p /opt/alt/php-fpm74/usr/var/sockets
chown -R cwpsrv:cwpsrv /opt/alt/php-fpm74/usr/var/sockets
systemctl restart php-fpm74

Step 5: Rebuild CWP configuration for PHP-FPM

Code: [Select]

/usr/local/cwp/php-fpm-rebuild
systemctl restart httpd
systemctl restart nginx
systemctl restart varnish

Step 6: Check and fix Nginx → Varnish → Apache configuration

1. In the Nginx config file for each site, point [fastcgi_pass] to the fixed PHP-FPM socket:
   

Code: [Select]

fastcgi_pass unix:/opt/alt/php-fpm74/usr/var/sockets/<sitename>.sock;
2. Restart Varnish to clear cache:
   

Code: [Select]

systemctl restart varnish

Step 7: Test websites

1. Create an [info.php] file:
   

Code: [Select]

<?php phpinfo(); ?>
2. Check in the browser and make sure it loads without a 503 error.


Step 8: Preparation for returning to Pro

1. Keep the full backup.
2. After activating Pro:
   

Code: [Select]

/usr/local/cwp/upgrade_to_pro
Or via CWP panel → License Activation

3. Check Selector / Version Switcher and enable it
4. If newer PHP versions are needed, use Selector in CWP Pro
5. Restart services:
   

Code: [Select]

systemctl restart php-fpm74
   systemctl restart httpd
   systemctl restart nginx
   systemctl restart varnish

Step 9: Final notes

• Recommended PHP version in Free: 7.4
• All sites are set to one fixed version so Selector in Pro will work smoothly later
• Keep backups until Pro is reactivated and all sites are stable

39

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by overseer on January 29, 2026, 03:25:01 PM »

Not saying it can't be done, just that I personally haven't done it. So it would need to be worked through. I know some forum members get by on the free version of CWP, so maybe they could chime in here.

40

PHP Selector / Re: Temporary downgrade of CWP pro to free version (emergency!)

« Last post by WISTFUL on January 29, 2026, 12:39:22 AM »

It's strange that no one has ever found such a need, and the cwp programmers didn't provide a guide or solution for it!