Topics

1

MySQL / Change default port mariadb in cwp?

« on: November 15, 2015, 01:36:36 PM »

Hello How to change mariadb port default ?

I have edit in /etc/my.cnf.d/server.conf
i add in

[mysqld]
port=3333

after that i restart mariadb, service mysql restart

But in log port still on default port.
/usr/sbin/mysqld: ready for connections.
Version: '10.0.21-MariaDB'  socket: '/var/lib/mysql/mysql.sock'  port: 3306  MariaDB Server

2

Aplications / How to secure phpmyadmin?

« on: January 21, 2015, 05:29:11 AM »

now if anyone can access phpmyadmin with ipserver/phpMyAdmin

Just user can login to cwp can access phpmyadmin.

How to secure it?

3

Mod_Security / mod_security Config

« on: January 21, 2015, 05:22:16 AM »

Hello,

CWP very strick rule with mod_security, for newbie : can anyone suggest for mod_security configuration to run cms like wordpress,osticket etc.., with .htaccess

----
Main Configuration --> /usr/local/apache/conf.d/mod_security.conf
OWASP Configuration --> /usr/local/apache/modsecurity-crs/modsecurity_crs_10_config.conf
Disabled Rules --> /usr/local/apache/conf/mod_sec_disabled_rules.conf

4

Suggestions / User Interface

« on: January 20, 2015, 11:56:58 AM »

#1 Home login:
Make simple : sentences "Login to CentOS WebPanel " change to "Login to CWP" or " CWP Login" or "Centos WebPanel"

make it simple for footer sentences/link: remove " visit website " and " how to install"
just rename to "Copyright @2015 Centos WebPanel" like centos-webpanel.com

Make it simple and clean, just my opinion

5

Mod_Security / Status engine is currently disabled ?

« on: January 20, 2015, 10:03:16 AM »

Hello, all

Here info: centos 6.6 with cwp 0.9.7, how to solve this warn below:

[root@server01]# tail  /usr/local/apache/logs/error_log
[Tue Jan 20 16:47:20 2015] [notice] caught SIGTERM, shutting down
[Tue Jan 20 16:47:21 2015] [warn] Init: Session Cache is not configured [hint: SSLSessionCache]
[Tue Jan 20 16:47:21 2015] [notice] suEXEC mechanism enabled (wrapper: /usr/local/apache/bin/suexec)
[Tue Jan 20 16:47:21 2015] [notice] ModSecurity for Apache/2.8.0 (http://www.modsecurity.org/) configured.
[Tue Jan 20 16:47:21 2015] [notice] ModSecurity: APR compiled version="1.5.1"; loaded version="1.5.1"
[Tue Jan 20 16:47:21 2015] [notice] ModSecurity: PCRE compiled version="7.8 "; loaded version="5.0 13-Sep-2004"
[Tue Jan 20 16:47:21 2015] [warn] ModSecurity: Loaded PCRE do not match with compiled!
[Tue Jan 20 16:47:21 2015] [notice] ModSecurity: LIBXML compiled version="2.7.6"
[Tue Jan 20 16:47:21 2015] [notice] Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Tue Jan 20 16:47:22 2015] [notice] Apache/2.2.27 (Unix) mod_ssl/2.2.27 OpenSSL/1.0.1e-fips configured -- resuming normal operations