Messages

1

Updates / Re: CVE-2021-45466

« on: January 27, 2022, 07:43:08 AM »

If you know how we can remove these files... will help.

I was thinking of connecting to the server through the emergency console and delete the files. I can't think of some other way.

Anyway, before we take any actions, I think that the developers should give us an answer to this.

2

Updates / CVE-2021-45466

« on: January 26, 2022, 02:58:48 PM »

Hello all!

After reading about the CVE-2021-45466 vulnerability, I did a cwp update to my servers. The problem is that in all servers, the update returns the following errors:

Code: [Select]

rm: cannot remove ‘/usr/local/cwpsrv/htdocs/admin/user/loader.php’: Permission denied
rm: cannot remove ‘/usr/local/cwpsrv/htdocs/admin/user/index.php’: Permission denied
rm: cannot remove ‘/usr/local/cwpsrv/htdocs/admin/user/design’: Permission denied

Since these files are the vulnerable ones, should I delete them manually or am I going to break something?

All servers are running on CentOS 7.9.2009 with CWPpro version: 0.9.8.1122.

Thanks in advance,

Vassilis

3

Backup / Re: Custom Backup

« on: November 04, 2020, 11:35:06 AM »

A 20 second Google and I think you may be a Windoze luser..

You're so right... Unfortunately I'm a windoze luser hahaha
I prefered to create the file with vi editor on my server

Thank you very much!

4

Backup / Re: Custom Backup

« on: November 03, 2020, 02:47:19 PM »

Hi
When I try to run your backup script I got the following error:

custom-backup.sh: line 40: syntax error: unexpected end of file

Can you please help?

5

CentOS 7 Problems / Re: Can't see users website via http://ip/~user

« on: April 13, 2018, 08:10:09 PM »

Edit your hosts file and add the following line

Code: [Select]

SERVER_IP_ADDRESS       YOUR_DOMAIN_NAME
If you are using Windows you can find it here: C:\Windows\System32\drivers\etc
You have to open it as administrator.

When finished don't forget to delete the above line from your hosts file.

6

CentOS 7 Problems / Re: Port 443 not working with nginx on

« on: April 13, 2018, 08:05:23 PM »

This is a bug. The developers are informed and I hope they will fix it sooner or later. Until then you have to stick with apache only.

7

CentOS 7 Problems / Re: nginx fails

« on: April 13, 2018, 08:01:43 PM »

The problem is related to SSL.
If you are not using SSL on your server, nginx works fine. If you are using SSL then it can't find the SSL port.
I contacted support and they said they will look at it (I hope).

8

Installation / Re: ipv6 errors while setting up

« on: October 10, 2017, 04:26:05 PM »

As @darkness said, CWP still doesn't support IPv6. I tried to use IPv6 with CWP but many problems occurred. For example, sites with AJAX couldn't respond right, FTP couldn't connect even after successful authentication and many other problems...

9

Installation / Re: ipv6 errors while setting up

« on: September 21, 2017, 08:31:43 PM »

There's no need to edit each one of your vhosts. You can edit the apache vhost template and then rebuild virtual hosts.

Here's what I did:

Apache Domain Virtual Host tpl:

Code: [Select]

# vhost_start %domain_name%
<VirtualHost %domain_ip%:%domain_port%>
ServerName %domain_name%
ServerAlias www.%domain_name%
ServerAdmin %admin_email%
DocumentRoot "%homedir%/%username%/public_html"
ScriptAlias /cgi-bin/ "%homedir%/%username%/public_html/cgi-bin/
#
# Custom settings are loaded below this line (if any exist)
# Include "/usr/local/apache/conf/userdata/%username%/%domain_name%/*.conf

<IfModule mod_suexec.c>
        SuexecUserGroup %username% %username%
</IfModule>

<IfModule mod_suphp.c>
        suPHP_UserGroup %username% %username%
        suPHP_ConfigPath /home/%username%
</IfModule>

<Directory "%homedir%/%username%/public_html">
        AllowOverride All
</Directory>

</VirtualHost>
# vhost_end %domain_name%

# vhost_start IPv6 %domain_name%
<VirtualHost [xxxx:xxxx:xxxx:xxxx::]:%domain_port%>
ServerName %domain_name%
ServerAlias www.%domain_name%
ServerAdmin %admin_email%
DocumentRoot "%homedir%/%username%/public_html"
ScriptAlias /cgi-bin/ "%homedir%/%username%/public_html/cgi-bin/
#
# Custom settings are loaded below this line (if any exist)
# Include "/usr/local/apache/conf/userdata/%username%/%domain_name%/*.conf

<IfModule mod_suexec.c>
        SuexecUserGroup %username% %username%
</IfModule>

<IfModule mod_suphp.c>
        suPHP_UserGroup %username% %username%
        suPHP_ConfigPath /home/%username%
</IfModule>

<Directory "%homedir%/%username%/public_html">
        AllowOverride All
</Directory>

</VirtualHost>
# vhost_end IPv6 %domain_name%

Apache SubDomain Virtual Host tpl:

Code: [Select]

# vhost_start %domain_name%
<VirtualHost %domain_ip%:%domain_port%>
ServerName %domain_name%
ServerAlias www.%domain_name%
ServerAdmin %admin_email%
DocumentRoot "%path%"
ScriptAlias /cgi-bin/ %path%/cgi-bin/
#
# Custom settings are loaded below this line (if any exist)
# Include "/usr/local/apache/conf/userdata/%username%/%domain_name%/*.conf

<IfModule mod_suexec.c>
        SuexecUserGroup %username% %username%
</IfModule>

<IfModule mod_suphp.c>
        suPHP_UserGroup %username% %username%
</IfModule>

<Directory "%path%">
        AllowOverride All
</Directory>

</VirtualHost>
# vhost_end %domain_name%

# vhost_start IPv6 %domain_name%
<VirtualHost [xxxx:xxxx:xxxx:xxxx::]:%domain_port%>
ServerName %domain_name%
ServerAlias www.%domain_name%
ServerAdmin %admin_email%
DocumentRoot "%path%"
ScriptAlias /cgi-bin/ %path%/cgi-bin/
#
# Custom settings are loaded below this line (if any exist)
# Include "/usr/local/apache/conf/userdata/%username%/%domain_name%/*.conf

<IfModule mod_suexec.c>
        SuexecUserGroup %username% %username%
</IfModule>

<IfModule mod_suphp.c>
        suPHP_UserGroup %username% %username%
</IfModule>

<Directory "%path%">
        AllowOverride All
</Directory>

</VirtualHost>
# vhost_end IPv6 %domain_name%

You have to chenge "xxxx:xxxx:xxxx:xxxx::" with your ip address.

10

SSL / AutoSSL not working on Centos7

« on: May 05, 2017, 06:56:24 PM »

Hi!
When I set up my server I managed to create Let's Encrypt Certificates for each of my sites by using the Letsencrypt Manager.
After these certificates ended I can't use the AutoSSL. It keeps giving me the following error:

Code: [Select]

AutoSSL Issue Failed![Fri May  5 21:44:12 EEST 2017] Only RSA or EC key is supported.
[Fri May  5 21:44:12 EEST 2017] Please add '--debug' or '--log' to check more details.
[Fri May  5 21:44:12 EEST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
AutoSSL Issue Failed![Fri May  5 21:44:12 EEST 2017] Only RSA or EC key is supported.
[Fri May  5 21:44:12 EEST 2017] Please add '--debug' or '--log' to check more details.
[Fri May  5 21:44:12 EEST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
I used the debugger but it didn't give more info.
I tried to use again the old procedure with Letsencrypt Manager but it's not working either. Here's the output:

Code: [Select]

Bootstrapping dependencies for RedHat-based OSes... (you can skip this with --no-bootstrap)
yum is /usr/bin/yum
Package gcc-4.8.5-11.el7.x86_64 already installed and latest version
Package augeas-libs-1.4.0-2.el7.x86_64 already installed and latest version
Package 1:openssl-1.0.1e-60.el7_3.1.x86_64 already installed and latest version
Package 1:openssl-devel-1.0.1e-60.el7_3.1.x86_64 already installed and latest version
Package libffi-devel-3.0.13-18.el7.x86_64 already installed and latest version
Package redhat-rpm-config-9.1.0-72.el7.centos.noarch already installed and latest version
Package ca-certificates-2017.2.11-70.1.el7_3.noarch already installed and latest version
Package python-2.7.5-48.el7.x86_64 already installed and latest version
Package python-devel-2.7.5-48.el7.x86_64 already installed and latest version
Package python-virtualenv-1.10.1-3.el7.noarch already installed and latest version
Package python-tools-2.7.5-48.el7.x86_64 already installed and latest version
Package python2-pip-8.1.2-5.el7.noarch already installed and latest version
Package 1:mod_ssl-2.4.6-45.el7.centos.4.x86_64 already installed and latest version
Upgrading certbot-auto 0.13.0 to 0.14.0...
Couldn't verify signature of downloaded certbot-auto. Command '['openssl', 'dgst', '-sha256', '-verify', '/tmp/tmp.ZlnIflG8jH/public_key.pem', '-signature', '/tmp/tmp.ZlnIflG8jH/letsencrypt-auto.sig', '/tmp/tmp.ZlnIflG8jH/letsencrypt-auto']' returned non-zero exit status 127
I'm using Centos 7 and the CWP version is 0.9.8.318

So, nothing is working as it should and I'm stucked. I really like CWP and I have the pro version but if there is no workaround for this issue I'll have to change control panel.

Thanks in advance
Vasilis

11

CentOS 7 Problems / Re: Problem with mod_security

« on: February 03, 2017, 10:07:55 AM »

warwicknz you're my hero!
A big thank you to you, my friend!
I tried to install mod_security manual but not in the right order.
One more question. When I try the test link it should give me a "403 Forbidden" message but in my case, it gives me "unable to connect" message. Do you have any ideas why is this happening?

Edit:
Never mind, I checked it by changing the IP with a domain and it gives 403 Forbidden. Also, mod_security log gives the right message. So, I guess it' working great 

12

CentOS 7 Problems / Problem with mod_security

« on: February 02, 2017, 05:21:09 PM »

Hi!
I've installed CWP7pro on a dedicated and I'm facing a problem with mod_security.
If I install mod_security, apache can't start and gives the following error:

Code: [Select]

httpd: Syntax error on line 510 of /usr/local/apache/conf/httpd.conf: Syntax error on line 9 of /usr/local/apache/conf.d/mod_security.conf: Cannot load modules/mod_security2.so into server: /usr/local/apache/modules/mod_security2.so: undefined symbol: apr_crypto_block_cleanup
Line 9 of /usr/local/apache/conf.d/mod_security.conf is the one inbetween IfModule tags:

Code: [Select]

<IfModule !mod_security2.c>
  LoadModule security2_module  modules/mod_security2.so
</IfModule>
Uninstalling mod_security brings apache back to life.
Any ideas?