Recent Posts
31
CentOS-WebPanel Bugs / Re: Root .ssh directory disappeared (including authorized_keys) after CWP update?
« Last post by simonjwoolf on August 18, 2026, 11:33:27 AM »I have had exactly the same issues on three separate instances of CWP Pro, using AlmaLinux 8.10 and AlmaLinux 9.8 in one case.
ie:
- root's .ssh folder was completely deleted by the update to CWP 1.6
As my servers don't permit login via password, this meant I was no longer able to login via SSH. Luckily I was able to start a console session via my hosting company's control panel, and add back the /root/.ssh directory and the authorized_keys file that CWP deleted
- the certificate /etc/pki/tls/certs/hostname.crt is removed or renamed to hostname.cert
Since this file is symlinked from the server's actual hostname, eg: MyServerHostname.crt > hostname.crt it then results in CWPro not loading the control panel and failing after a restart.
The solution was to add an additional symlink hostname.cert > hostname.crt
Both these problems are serious since they result in the potential inability for the sysadmin to access the server
ie:
- root's .ssh folder was completely deleted by the update to CWP 1.6
As my servers don't permit login via password, this meant I was no longer able to login via SSH. Luckily I was able to start a console session via my hosting company's control panel, and add back the /root/.ssh directory and the authorized_keys file that CWP deleted
- the certificate /etc/pki/tls/certs/hostname.crt is removed or renamed to hostname.cert
Since this file is symlinked from the server's actual hostname, eg: MyServerHostname.crt > hostname.crt it then results in CWPro not loading the control panel and failing after a restart.
The solution was to add an additional symlink hostname.cert > hostname.crt
Both these problems are serious since they result in the potential inability for the sysadmin to access the server
32
PHP Selector / Re: PHP-FPM 8.4/8.5 mbstring missing
« Last post by danielalvares on August 18, 2026, 07:18:38 AM »I also found older CWP forum threads showing mbstring build problems with PHP 8.3 on EL8, where disabling mbstring was suggested as a workaround.
The current external mbstring.so mechanism may be related to that older build issue.
The current external mbstring.so mechanism may be related to that older build issue.
33
PHP Selector / PHP-FPM 8.4/8.5 mbstring missing
« Last post by danielalvares on August 18, 2026, 07:12:42 AM »Hello,
I found an issue with PHP-FPM 8.4 and 8.5 on CWP Pro running AlmaLinux 8.
I have the same problem on two different VPS servers.
In PHP-FPM Selector, mbstring is enabled, but after compiling PHP 8.4/8.5 the extension is not available.
The PHP configure command also does not contain:
Looking at the CWP mbstring script:
The build log shows:
PHP-FPM 8.3 on the same servers works correctly.
It looks like PHP 8.4 and 8.5 on EL8 are compiled without mbstring, and CWP then tries to install a precompiled mbstring.so, but the configured download URL no longer exists.
Could you please confirm if this is a known issue and whether the build configuration will be updated to compile mbstring directly with --enable-mbstring instead of relying on the missing external mbstring.so?
Thank you.
I found an issue with PHP-FPM 8.4 and 8.5 on CWP Pro running AlmaLinux 8.
I have the same problem on two different VPS servers.
In PHP-FPM Selector, mbstring is enabled, but after compiling PHP 8.4/8.5 the extension is not available.
The PHP configure command also does not contain:
Code: [Select]
--enable-mbstring
Looking at the CWP mbstring script:
Code: [Select]
/usr/local/cwpsrv/htdocs/resources/conf/el8/php-fpm_selector/external_modules/8.5/mbstring.sh
https://github.com/mysterydata/md-disk/raw/main/el8-php85/mbstring.so
The build log shows:
Code: [Select]
--2026-08-18 03:52:27-- https://github.com/mysterydata/md-disk/raw/main/el8-php85/mbstring.so
HTTP request sent, awaiting response... 404 Not Found
ERROR 404: Not Found.
chmod: cannot access '/opt/alt/php-fpm85/usr/lib/php/extensions/no-debug-non-zts-20250925/mbstring.so': No such file or directory
ERROR: Missing extension file /opt/alt/php-fpm85/usr/lib/php/extensions/no-debug-non-zts-20250925/mbstring.so
PHP-FPM 8.3 on the same servers works correctly.
It looks like PHP 8.4 and 8.5 on EL8 are compiled without mbstring, and CWP then tries to install a precompiled mbstring.so, but the configured download URL no longer exists.
Could you please confirm if this is a known issue and whether the build configuration will be updated to compile mbstring directly with --enable-mbstring instead of relying on the missing external mbstring.so?
Thank you.
34
New Modules / CWP module for WHMCS - rewritten for PHP 8 / WHMCS 9 (drop-in, MIT)
« Last post by Watchdog on August 18, 2026, 06:48:48 AM »The official cwp7 module hasn't changed since 30 March 2020. WHMCS has shipped 15 releases since then and now requires PHP 8.2, so I rewrote it.
It's a drop-in replacement: same module name, same directory, same config option order. Existing server entries, products and services keep working with no reconfiguration.
https://github.com/bradleygb/whmcs-cwp-module
Why you'd switch
Running the 2020 module today, these are live faults, not style complaints:
What's in the rewrite
All of the above fixed. TLS verification on by default with optional certificate pinning. The API key masked in logs and stripped from CWP's own error text - CWP echoes it back inside "Unauthorized action". Autologin sessions minted on click through WHMCS single sign-on. Account creation given its own 180-second budget, and a creation that times out is reconciled rather than left as an orphaned account.
Added: MetaData, TestConnection, ServiceSingleSignOn, ListAccounts for Server Sync, live account detail on the admin service page, and a client area block that makes no API call while rendering - so an unreachable panel can't stall a customer's page.
Optionally, changing a service's Product/Service applies the package to CWP directly, with no second click.
Errors name the exact API Manager function and action when a permission is missing, which matters because CWP's internal permission names don't match its own labels - account/udp is checked as "accout_upd".
Requirements
WHMCS 8.5-9.0, PHP 7.4-8.3, curl and json. Tested on 7.4, 8.0, 8.1, 8.2 and 8.3. MIT licensed. Community module, not affiliated with the CWP project.
Install
Extract into modules/servers/ and press Test Connection. PERMISSIONS.md lists the exact API Manager grants - note the grid is per function and per action, and an action left off produces "Unauthorized action" even when the function looks enabled.
Upgrading: replace the directory contents, nothing else. One thing can stop a previously "working" install - TLS verification is now on. If CWP serves a certificate from a public CA on 2304 you're fine; if it's self-signed, the README covers pinning it.
Issues and pull requests welcome.
It's a drop-in replacement: same module name, same directory, same config option order. Existing server entries, products and services keep working with no reconfiguration.
https://github.com/bradleygb/whmcs-cwp-module
Why you'd switch
Running the 2020 module today, these are live faults, not style complaints:
- Disk and bandwidth reporting has never worked. It matches tblhosting.dedicatedip against CWP's ip_address, but dedicatedip is empty for every shared-IP account, so the query matches no rows. It also writes lastupdate with date('Y-m-d H:i:S') - capital S is PHP's ordinal suffix, producing "14:30:th", which MySQL rejects.
- Package changes don't work against current CWP. CWP has a dedicated /v1/changepack endpoint. The module posts to /v1/account with action=udp and the package suffixed "12@", where that endpoint documents a "@12" prefix. Nothing changes and WHMCS reports success.
- Resource limits aren't applied. CWP's add endpoint wants limit_nofile and limit_nproc; account/udp wants openfiles and processes. The module sends nofile and nproc, which neither accepts, so every account gets its package defaults.
- ChangePassword sends 'acction' instead of 'action'. The field never reaches CWP.
- A fatal TypeError in your daily cron. count() is called on the API payload without checking it's an array - on PHP 8 that aborts the cron run.
- The API key is written to the WHMCS Module Log in plaintext, and sent with CURLOPT_SSL_VERIFYPEER and VERIFYHOST both disabled.
- A live autologin URL is minted on every product-details page load and printed into the page HTML, where it persists in page source, browser history and referrer headers.
What's in the rewrite
All of the above fixed. TLS verification on by default with optional certificate pinning. The API key masked in logs and stripped from CWP's own error text - CWP echoes it back inside "Unauthorized action". Autologin sessions minted on click through WHMCS single sign-on. Account creation given its own 180-second budget, and a creation that times out is reconciled rather than left as an orphaned account.
Added: MetaData, TestConnection, ServiceSingleSignOn, ListAccounts for Server Sync, live account detail on the admin service page, and a client area block that makes no API call while rendering - so an unreachable panel can't stall a customer's page.
Optionally, changing a service's Product/Service applies the package to CWP directly, with no second click.
Errors name the exact API Manager function and action when a permission is missing, which matters because CWP's internal permission names don't match its own labels - account/udp is checked as "accout_upd".
Requirements
WHMCS 8.5-9.0, PHP 7.4-8.3, curl and json. Tested on 7.4, 8.0, 8.1, 8.2 and 8.3. MIT licensed. Community module, not affiliated with the CWP project.
Install
Extract into modules/servers/ and press Test Connection. PERMISSIONS.md lists the exact API Manager grants - note the grid is per function and per action, and an action left off produces "Unauthorized action" even when the function looks enabled.
Upgrading: replace the directory contents, nothing else. One thing can stop a previously "working" install - TLS verification is now on. If CWP serves a certificate from a public CA on 2304 you're fine; if it's self-signed, the README covers pinning it.
Issues and pull requests welcome.
35
PHP / Re: PHP-FPM Won't install zlib says missing dependency zlib-dir
« Last post by Netino on August 18, 2026, 05:19:44 AM »If you are trying to compile php-fpm84/5, simply click "Manage Options" next to php-8.4, then "Advanced Options" (Simple Editor), and change the settings. It appears the zlib compilation option has already been fixed:
What hasn't been fixed is the PHP Switcher, which lacks "Advanced Options/Simple Editor" for compilation settings. Consequently, it still has the issue of requiring compilation with zlib.
Code: [Select]
[zlib]
default=1
option="--with-zlib=/usr"
info-file=zlib.txt
include=zlib-dir
What hasn't been fixed is the PHP Switcher, which lacks "Advanced Options/Simple Editor" for compilation settings. Consequently, it still has the issue of requiring compilation with zlib.
36
PHP / Re: PHP-FPM Won't install zlib says missing dependency zlib-dir
« Last post by 6Sense on August 17, 2026, 12:37:04 PM »Mmm I found a fix that worked for me, it's an odd one though...
In the below 2 files all the " are coded as " I used a text editor to find/replace " to " rebooted server and was then able to install php 8.5 via PHP version switcher on my Alma8 server. Previously i was getting the zlib grumble.
/usr/local/cwpsrv/htdocs/resources/conf/el8/php_switcher/8.5.ini
/usr/local/cwpsrv/htdocs/resources/conf/el8/php_selector/8.5.ini
phpinfo()
PHP Version => 8.5.9
In the below 2 files all the " are coded as " I used a text editor to find/replace " to " rebooted server and was then able to install php 8.5 via PHP version switcher on my Alma8 server. Previously i was getting the zlib grumble.
/usr/local/cwpsrv/htdocs/resources/conf/el8/php_switcher/8.5.ini
/usr/local/cwpsrv/htdocs/resources/conf/el8/php_selector/8.5.ini
phpinfo()
PHP Version => 8.5.9
37
PHP / Re: PHP-FPM Won't install zlib says missing dependency zlib-dir
« Last post by kandalf on August 17, 2026, 10:19:48 AM »I think CWP posted the fix for this.I don't think so.
But with everyone starting new threads in all different areas, about the same PHP issues, it's hard to keep track anymore.
You'll have to look thru the past couple days of posts about PHP, CWP side banner to the left is hard to miss.
Has anyone found a solid solution yet? I think we need to use the advanced options on "Managing options" and use this:
[zlib]
default=1
option="--with-zlib"
info-file=zlib.txt
38
CentOS-WebPanel Bugs / Re: CWP Cronjob Killing Server
« Last post by overseer on August 17, 2026, 02:18:03 AM »39
Backup / Re: Error/bug when starting a backup
« Last post by vox on August 17, 2026, 01:23:10 AM »same here. It stopped backing up on Aug 6th.
40
PHP / Re: PHP-FPM Won't install zlib says missing dependency zlib-dir
« Last post by Starburst on August 16, 2026, 11:20:07 PM »I think CWP posted the fix for this.
But with everyone starting new threads in all different areas, about the same PHP issues, it's hard to keep track anymore.
You'll have to look thru the past couple days of posts about PHP, CWP side banner to the left is hard to miss.
But with everyone starting new threads in all different areas, about the same PHP issues, it's hard to keep track anymore.
You'll have to look thru the past couple days of posts about PHP, CWP side banner to the left is hard to miss.
