Messages

76

CentOS-WebPanel Bugs / Re: Installing mod_security is not working on basic panel

« on: May 05, 2026, 03:38:37 PM »

EL9 distro?

For some reason when you install ModSecurity, line 2 of /usr/local/apache/conf.d/mod_security.conf needs to be manually fixed.

By Default is only has:

Code: [Select]

LoadFile /usr/lib64/
You need to edit it, so the whole line says:

Code: [Select]

LoadFile /usr/lib64/liblua-5.4.so
Save, and then start Apache.

While you're at it, consider updating Mod Security and using the latest OWASP ruleset:
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-modsecurity-to-2-9-12-running-cwp-and-apache-on-almalinux-9/
https://starburst.help/control-web-panel-cwp/modsecurity-running-with-control-web-panel/update-owasp-crs-ruleset-to-4-25-0-lts-running-cwp-and-apache-on-almalinux-9/

77

Suggestions / Re: CWP Plugin Store

« on: May 02, 2026, 01:59:09 AM »

3 years later? Yes, a failed idea (or never got off the ground). It's okay -- other "free" panels use plugins as their main income source so I'd rather avoid going down that road altogether.

78

DNS / Re: How to change CWP DNS Resolvers ?

« on: May 02, 2026, 01:55:42 AM »

CWP should use the system DNS resolvers, as set by NetworkManager or manually in /etc/resolv.conf.

Cloudflare's 1.1.1.1 and 1.0.0.1 servers work fine, as does Google's 8.8.8.8 and 8.8.4.4 (although they are a bit more loaded at times). I have also used Quad9 and OpenDNS in the past, but filtering DNS should generally not be used on a server, as you want a server to use clean, accurate results. Usually I have had bad experiences with ISP and hosting DNS, due to latency, poor management, overload, or DDoS attacks -- so I avoid them.

Or are you looking to setup custom DNS?
https://www.hostwinds.com/tutorials/cwp-custom-dns

79

CentOS 9 Problems / Re: Unable to login 2083 but can login 2031

« on: May 02, 2026, 01:37:39 AM »

Looks to be an overly greedy regex rule in play.

80

How to / Re: Mod Security Alert

« on: May 02, 2026, 01:30:37 AM »

You can zero out all notifications with a daily or hourly cron script, or block one style of notification with uBlock Origin on the browser side. Or you could try installing Mod Security but disabling it for all sites.

81

Problems on other RedHat linux servers / Re: TLS 1.1/1.0 deactivation

« on: April 18, 2026, 01:37:41 AM »

Take a look at Sandeep's guide for Apache here:
https://www.alphagnu.com/topic/37-cwp-apache-enable-tls-13-control-web-panel/
He also has one for nginx, but I'm assuming you are after an Apache config...
https://www.alphagnu.com/topic/47-how-to-enable-tls-13-in-cwp-nginx-reverse-proxy/

82

PHP / Re: When will PHP 8.4 be released in CWP?

« on: April 09, 2026, 12:49:33 PM »

You could follow the guide on AlphaGNU for AlmaLinux 9 (should work on CentOS Stream 9 unless Stream has a bug, being a beta-quality OS):
https://www.alphagnu.com/topic/614-how-to-add-custom-php-fpm-84-85-support-to-cwp-on-almalinux-9x/

83

Updates / Re: Roundcube vulnerability

« on: April 08, 2026, 11:23:15 PM »

Anyway, the script doesn't use the function like system() or exec(). Do you run the script from PHP using system() ?

I believe the error happens with the install line, using the default RC install script:

Code: [Select]

yes | "$src_dir/bin/installto.sh" "$INSTALL_DIR"So it's a bit of an outlier, but maybe you need to test for installation success before reporting it with the echo lines that follow, and maybe worth testing the actual installed version and reporting that:

Code: [Select]

grep "Version " /usr/local/cwpsrv/var/services/roundcube/index.php | awk '{print $3}'

84

Updates / Re: Roundcube vulnerability

« on: April 06, 2026, 01:44:05 AM »

Script wouldn't run unless system was an allowed function for that system version of PHP (8.3 in this case). It merrily proceeded to the ending echo lines and acted as if it had done something, but there was clearly an error during execution.

85

Backup / Re: Disable User Backups

« on: April 05, 2026, 12:15:22 AM »

Uncheck the setting Backup All Users (forced)
/admin/index.php?module=backups
or look under:
/admin/index.php?module=backup_manager2

86

Mod_Security / Re: After installing Mod Security, Apache cannot start

« on: April 04, 2026, 02:34:57 PM »

If you wanted to PM me your connection details, I could try to install it for you.

87

Mod_Security / Re: After installing Mod Security, Apache cannot start

« on: April 04, 2026, 12:47:05 AM »

What OS/distribution are you running? CWP-provided Mod Security version? What ruleset?
Under AlmaLinux 8, lines one and two in my /usr/local/apache/conf.d/mod_security.conf file are:

Code: [Select]

LoadFile /usr/lib64/libxml2.so
LoadFile /usr/lib64/liblua-5.1.so

88

Updates / Re: Roundcube vulnerability

« on: April 03, 2026, 02:18:35 AM »

Update to the script listed here:
http://forum.centos-webpanel.com/updates/roundcube-vulnerability/msg53064/#msg53064

Hi cyberspace,
Just used your script to update to 1.5.15 LTS -- on one server it worked fine, but on another server it errored out due to the system() function being disabled in that version of PHP, yet your script proceeded to report that the install had succeeded. I think you need to put some conditional logic around this code block to check for actual success before reporting success:

Code: [Select]

echo "Update completed successfully!"
echo "Now running version: $latest_version"

89

Information / Re: Installing CWP on AlmaLinux 9

« on: April 02, 2026, 02:13:49 PM »

I've posted the basic setup steps here in the forums a couple times.
Here it is again, or you also have options of people that can get the basic installed for you.

You can't have any services installed before installing CWP.

So if Apache is working 'out of the box', you are installing AlmaLinux 9.4 LAMP.
That won't work.

Reimage with the bare AlmaLinux 9.5

Setup your networking, hostname, timzone.

Then:

Code: [Select]

dnf install dnf-plugins-core

Code: [Select]

dnf install elrepo-release epel-release -y

Code: [Select]

dnf config-manager --set-enabled crb

Code: [Select]

dnf --refresh update

Code: [Select]

dnf install nano wget ipset ebtables iptables ipset-service uuid uuid-devel libuuid-devel m4 pcre pcre-devel zlib-devel perl-DBD-MySQL perl-IPC-Cmd perl-Pod-Html perl-Sys-Hostname perl-libwww-perl.noarch perl-LWP-Protocol-https.noarch perl-GDGraph libtool s-nail htop sysstat python3-perf ImageMagick ImageMagick-devel nmap make quota cockpit* -y

Code: [Select]

dnf --refresh update

Code: [Select]

dnf install clamav* clamd

Code: [Select]

dnf clean all

Code: [Select]

cd /usr/local/src

Code: [Select]

wget http://centos-webpanel.com/cwp-el9-latest

Code: [Select]

sh cwp-el9-latest

Code: [Select]

dnf install spamassassin amavis
Reboot

Configure & Start CSF

UPDATE DEPENDENCIES

Code: [Select]

dnf install php-cli libsodium libsodium-devel php-sodium php-pecl-zip  php-pecl-mailparse php-mbstring php-pear php-devel php-pecl-imagick

Code: [Select]

pecl channel-update pecl.php.net
To updated MariaDB follow:
https://www.alphagnu.com/topic/23-upgrade-mariadb-1011-in-cwp-centos-7-centos-8-stream-almalinux-78-rockylinux-78/

The one string to re-install MariaDB has been updated, or you'll get an error.
Run this instead:

Code: [Select]

dnf install MariaDB-server MariaDB-client net-snmp perl-DBD-MySQL --allowerasing
There are other steps, but everyone customizes their servers differently.

90

MySQL / Re: Allow Remote Access to MariaDB Database

« on: March 29, 2026, 12:37:17 AM »

I think you an overseer live in your own bubble...

"I'm forever blowing bubbles, blowing bubbles in the air..."