Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1] 2
1
CentOS-WebPanel Bugs / Security headers are missing
« on: September 24, 2020, 06:06:23 PM »
Today I did a test using the following site:
https://www.webpagetest.org/
I received a "D" for security score:
❌ The following security headers are missing from the website:
medium severity
X Frame Options
Clickjacking protection: deny - no rendering within a frame, sameorigin - no rendering if origin mismatch, allow-from - allow from specified location, allowall - non-standard, allow from any location
high severity
Content Security Policy
A computer security standard introduced to prevent cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context
Content Security Policy documentation
low severity
X XSS Protection
A Cross-site scripting filter
How do I add these? They should be included as part of the original setup.
There is an earlier thread on this from 2 yrs ago, but the recommended fix crashes the website.
https://www.webpagetest.org/
I received a "D" for security score:
❌ The following security headers are missing from the website:
medium severity
X Frame Options
Clickjacking protection: deny - no rendering within a frame, sameorigin - no rendering if origin mismatch, allow-from - allow from specified location, allowall - non-standard, allow from any location
high severity
Content Security Policy
A computer security standard introduced to prevent cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context
Content Security Policy documentation
low severity
X XSS Protection
A Cross-site scripting filter
How do I add these? They should be included as part of the original setup.
There is an earlier thread on this from 2 yrs ago, but the recommended fix crashes the website.
2
Updates / Re: CWP Broken After Update
« on: July 14, 2020, 07:42:05 PM »
I paid $7.50 for CWP 1-time support and they fixed it for me within an hour.
No idea what the problem was, but the service is fast and inexpensive.
http://centos-webpanel.com/support-services
No idea what the problem was, but the service is fast and inexpensive.
http://centos-webpanel.com/support-services
3
Updates / Re: Yum Manager won't update ImageMagick
« on: July 13, 2020, 02:13:19 PM »
Managed to resolve it:
remove conflict dependencies first
yum remove ImageMagick
yum remove ImageMagick6-libs-0:6.9.11.6-1.el7.remi.x86_64
then
yum install ImageMagick
remove conflict dependencies first
yum remove ImageMagick
yum remove ImageMagick6-libs-0:6.9.11.6-1.el7.remi.x86_64
then
yum install ImageMagick
4
CentOS-WebPanel Bugs / CWP Images & CSS Won't Load After Update
« on: June 27, 2020, 04:36:59 AM »
I was updating CWP and the server had to be restarted before completing the update.
Now the Admin panel CSS and images won't load, which makes the panel unusable.
Client panel and file manager are working fine.
I tried to restart, run cwp update, no result.
I looked up /usr/local/cwpsrv/logs/error_log and found errors like this:
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/img/login.css" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/img/login.css HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://web01.saadhost.com:2031/login/index.php"
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/images/cwp_small.png" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/images/cwp_small.png HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://web01.saadhost.com:2031/login/index.php"
Now the Admin panel CSS and images won't load, which makes the panel unusable.
Client panel and file manager are working fine.
I tried to restart, run cwp update, no result.
I looked up /usr/local/cwpsrv/logs/error_log and found errors like this:
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/img/login.css" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/img/login.css HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://web01.saadhost.com:2031/login/index.php"
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/images/cwp_small.png" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/images/cwp_small.png HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://web01.saadhost.com:2031/login/index.php"
5
Updates / Re: CWP Broken After Update
« on: June 26, 2020, 11:29:41 AM »
I checked the CWP error log and I am finding errors like this:
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/img/login.css" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/img/login.css HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://aaaa.xxxxx.com:2031/login/index.php"
2020/06/26 03:23:08 [error] 931#0: *17 open() "/usr/local/cwpsrv/htdocs/admin/login/design/img/login.css" failed (20: Not a directory), client: 54.38.148.178, server: localhost, request: "GET /login/design/img/login.css HTTP/1.1", host: "web01.saadhost.com:2031", referrer: "https://aaaa.xxxxx.com:2031/login/index.php"
6
Updates / Re: CWP Broken After Update
« on: June 26, 2020, 08:52:03 AM »
I tried that, I also rebooted the server, no change.
7
Updates / CWP Broken After Update
« on: June 26, 2020, 01:51:03 AM »
After update my CWP Pro looks like this:
Previously I was getting this error:
** (pkttyagent:26814): WARNING **: 03:54:40.789: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Which I handled with this:
groupadd -g 23 nohidproc
usermod -a -G nohidproc polkitd
mount -o remount,rw,hidepid=2,gid=nohidproc /proc
systemctl restart polkit
How can I fix this?
Previously I was getting this error:
** (pkttyagent:26814): WARNING **: 03:54:40.789: Unable to register authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject
Error registering authentication agent: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Cannot determine user of subject (polkit-error-quark, 0)
Which I handled with this:
groupadd -g 23 nohidproc
usermod -a -G nohidproc polkitd
mount -o remount,rw,hidepid=2,gid=nohidproc /proc
systemctl restart polkit
How can I fix this?
8
PHP Selector / Re: Try to install PHP-FPM 7.4 through the panel but doesnt work
« on: June 20, 2020, 11:45:52 AM »
PHP-fpm installs but won't start.
Also, Ioncube doesn't work.
Also, Ioncube doesn't work.
9
PHP Selector / Re: Try to install PHP-FPM 7.4 through the panel but doesnt work
« on: June 19, 2020, 09:34:46 PM »
Hi,
Can you describe the upgrade procedure for php 7.4?
I can't find exact instructions anywhere.
Can you describe the upgrade procedure for php 7.4?
I can't find exact instructions anywhere.
10
FTP / Re: Certificate Expired? when using Filezilla to access my server
« on: May 27, 2020, 03:58:03 PM »
The server cert itself gets renewed, the issue is that the hostname.pem file doesn't get automatically generated.
I just fixed this issue and created a tutorial on it.
https://saadhost.com/filezilla-the-servers-certificate-is-unknown-solved/
I just fixed this issue and created a tutorial on it.
https://saadhost.com/filezilla-the-servers-certificate-is-unknown-solved/
11
FTP / Re: ERROR: Connection timed out after 20 seconds of inactivity
« on: May 27, 2020, 03:55:23 PM »
I just did a whole day of research on this. It happens when your FTP client is set to "Explicit FTP over TLS".
Editing # PassivePortRange and opening those ports in CSF /etc/pure-ftp/pure-ftpd.conf works.
If you don't have time, as a temporary solution you can also set your FTP client to plain FTP (Insecure).
https://saadhost.com/filezilla-the-servers-certificate-is-unknown-solved/#Step_5_Failed_To_Retrieve_Directory_Listing_Explicit_FTP_over_TLS
Editing # PassivePortRange and opening those ports in CSF /etc/pure-ftp/pure-ftpd.conf works.
If you don't have time, as a temporary solution you can also set your FTP client to plain FTP (Insecure).
https://saadhost.com/filezilla-the-servers-certificate-is-unknown-solved/#Step_5_Failed_To_Retrieve_Directory_Listing_Explicit_FTP_over_TLS
12
Updates / Yum Manager won't update ImageMagick
« on: May 22, 2020, 07:38:00 AM »
I get the following output but the update doesn't happen:
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cmich.edu
* epel: fedora-epel.mirrors.tds.net
* extras: mirror.trouble-free.net
* remi-php74: repo1.ash.innoscale.net
* remi-safe: repo1.ash.innoscale.net
* updates: mirror.cs.vt.edu
Resolving Dependencies
--> Running transaction check
---> Package ImageMagick.x86_64 0:6.7.8.9-18.el7 will be updated
--> Processing Dependency: ImageMagick = 6.7.8.9-18.el7 for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
--> Processing Dependency: ImageMagick = 6.7.8.9-18.el7 for package: ImageMagick-perl-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickCore.so.5()(64bit) for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickCore.so.5()(64bit) for package: ImageMagick-perl-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickWand.so.5()(64bit) for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
---> Package ImageMagick.x86_64 0:6.9.10.68-3.el7 will be an update
--> Running transaction check
---> Package ImageMagick-devel.x86_64 0:6.7.8.9-18.el7 will be updated
---> Package ImageMagick-devel.x86_64 0:6.9.10.68-3.el7 will be an update
---> Package ImageMagick-perl.x86_64 0:6.7.8.9-18.el7 will be updated
---> Package ImageMagick-perl.x86_64 0:6.9.10.68-3.el7 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Updating:
ImageMagick x86_64 6.9.10.68-3.el7 base 2.3 M
Updating for dependencies:
ImageMagick-devel x86_64 6.9.10.68-3.el7 base 110 k
ImageMagick-perl x86_64 6.9.10.68-3.el7 base 154 k
Transaction Summary
================================================================================
Upgrade 1 Package (+2 Dependent packages)
Total size: 2.6 M
Is this ok [y/d/N]: Exiting on user command
Your transaction was saved, rerun it with:
yum load-transaction /tmp/yum_save_tx.2020-05-22.07-31.etc
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: mirrors.cmich.edu
* epel: fedora-epel.mirrors.tds.net
* extras: mirror.trouble-free.net
* remi-php74: repo1.ash.innoscale.net
* remi-safe: repo1.ash.innoscale.net
* updates: mirror.cs.vt.edu
Resolving Dependencies
--> Running transaction check
---> Package ImageMagick.x86_64 0:6.7.8.9-18.el7 will be updated
--> Processing Dependency: ImageMagick = 6.7.8.9-18.el7 for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
--> Processing Dependency: ImageMagick = 6.7.8.9-18.el7 for package: ImageMagick-perl-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickCore.so.5()(64bit) for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickCore.so.5()(64bit) for package: ImageMagick-perl-6.7.8.9-18.el7.x86_64
--> Processing Dependency: libMagickWand.so.5()(64bit) for package: ImageMagick-devel-6.7.8.9-18.el7.x86_64
---> Package ImageMagick.x86_64 0:6.9.10.68-3.el7 will be an update
--> Running transaction check
---> Package ImageMagick-devel.x86_64 0:6.7.8.9-18.el7 will be updated
---> Package ImageMagick-devel.x86_64 0:6.9.10.68-3.el7 will be an update
---> Package ImageMagick-perl.x86_64 0:6.7.8.9-18.el7 will be updated
---> Package ImageMagick-perl.x86_64 0:6.9.10.68-3.el7 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Updating:
ImageMagick x86_64 6.9.10.68-3.el7 base 2.3 M
Updating for dependencies:
ImageMagick-devel x86_64 6.9.10.68-3.el7 base 110 k
ImageMagick-perl x86_64 6.9.10.68-3.el7 base 154 k
Transaction Summary
================================================================================
Upgrade 1 Package (+2 Dependent packages)
Total size: 2.6 M
Is this ok [y/d/N]: Exiting on user command
Your transaction was saved, rerun it with:
yum load-transaction /tmp/yum_save_tx.2020-05-22.07-31.etc
13
Updates / Re: 190 new updates today!!!
« on: May 08, 2020, 04:17:28 PM »
I did this update from CWP, however the following packages won't update:
ImageMagick-devel.x86_64 6.9.10.68-3.el7 base Update
ImageMagick-perl.x86_64 6.9.10.68-3.el7 base Update
ImageMagick.x86_64
What can I do?
ImageMagick-devel.x86_64 6.9.10.68-3.el7 base Update
ImageMagick-perl.x86_64 6.9.10.68-3.el7 base Update
ImageMagick.x86_64
What can I do?
14
Addons / Re: Multilanguage support ?
« on: March 17, 2020, 09:35:58 PM »
Admin Panel exists in English only, but can be translated.
Client panel exists in languages.
Here are the instructions:
https://saadhost.com/how-to-change-centos-web-panel-language/
Client panel exists in languages.
Here are the instructions:
https://saadhost.com/how-to-change-centos-web-panel-language/
15
CentOS Configuration / Re: ERR_TOO_MANY_REDIRECTS
« on: March 01, 2020, 08:24:43 AM »
The setup is regular WordPress. Nothing special.
I found a handling that works for me:
https://saadhost.com/solved-err_too_many_redirects-varnishnginx/
I found a handling that works for me:
https://saadhost.com/solved-err_too_many_redirects-varnishnginx/
Pages: [1] 2
