Recent Posts
21
CWP API / Re: Change API port
« Last post by Starburst on October 13, 2026, 08:15:21 PM »Don't forget to chattr +i the file so a future update doesn't overwrite it.
22
CWP API / Re: Change API port
« Last post by overseer on October 13, 2026, 02:25:36 PM »Editing /usr/local/cwpsrv/conf/cwpsrv.conf allows you to change the admin port, but I've never changed the API port.
You can use /etc/csf/csf.redirect to setup port redirection:
You can use /etc/csf/csf.redirect to setup port redirection:
Code: [Select]
# DNAT (redirect from one IP address to a different one):
# IPx|*|IPy|*|tcp/udp - To IPx redirects to IPy
# IPx|portA|IPy|portB|tcp/udp - To IPx to portA redirects to IPy portB
#
# DNAT examples:
# 192.168.254.62|*|10.0.0.1|*|tcp
# 192.168.254.62|666|10.0.0.1|25|tcp
#
# REDIRECT (redirect from port to a different one):
# IPx|portA|*|portB|tcp/udp - To IPx to portA redirects to portB
# *|portA|*|portB|tcp/udp - To portA redirects to portB
#
# REDIRECT examples:
# 192.168.254.60|666|*|25|tcp
# *|666|*|25|tcp[code]23
CWP API / Change API port
« Last post by xenios on October 13, 2026, 12:24:45 PM »Hello,
is it possible to change API port, since default port is used to hack server?
is it possible to change API port, since default port is used to hack server?
24
Aplications / Re: Abnormal fevicon and title in google results
« Last post by overseer on October 13, 2026, 11:48:21 AM »Didn't see any PM. Please resend and I will look at it for you.
25
CentOS-WebPanel Bugs / Re: Google Recapcha not work on all CWP servers.
« Last post by Starburst on October 12, 2026, 07:03:54 PM »CWP doesn't control that part.
If you where trying to modify the CWP user login script, then maybe an update did something.
This sounds like a file permissions issue or something with your php.ini
And is a problem between AL8, AL9 and AL10.
All those OS'es handle system security differently. Which is a royal pain in the ...
So security settings on AL8, won't act or even work on AL, and setting from AL8 or AL9 won't act or work on AL10.
This is one problem why some control panels act or do not work at all.
Was behind the Migration problem between AL8 and AL9.
I'm guessing no one bothered testing AL9 before migrating.
But if it works on AL8 with CWP 1.18, and doesn't work on AL9 with the same CWP 1.18, that rules out CWP.
As mentioned above, I would start looking into permissions (users, assigned groups, how is SELinux configured, etc, etc)
I'm not sure why RHEL did this, and hence clones.
It's a pain.
RHEL 8 and clones act similar to CentOS 7.
Another reason CWP needs to drop support for the EOL CentOS 7 and try & focus on AL9 and maybe AL10.
If you where trying to modify the CWP user login script, then maybe an update did something.
This sounds like a file permissions issue or something with your php.ini
And is a problem between AL8, AL9 and AL10.
All those OS'es handle system security differently. Which is a royal pain in the ...
So security settings on AL8, won't act or even work on AL, and setting from AL8 or AL9 won't act or work on AL10.
This is one problem why some control panels act or do not work at all.
Was behind the Migration problem between AL8 and AL9.
I'm guessing no one bothered testing AL9 before migrating.
But if it works on AL8 with CWP 1.18, and doesn't work on AL9 with the same CWP 1.18, that rules out CWP.
As mentioned above, I would start looking into permissions (users, assigned groups, how is SELinux configured, etc, etc)
I'm not sure why RHEL did this, and hence clones.
It's a pain.
RHEL 8 and clones act similar to CentOS 7.
Another reason CWP needs to drop support for the EOL CentOS 7 and try & focus on AL9 and maybe AL10.
26
CentOS-WebPanel Bugs / Re: Google Recapcha not work on all CWP servers.
« Last post by comokoko on October 12, 2026, 12:47:00 PM »The fact that this issue occurs across hundreds of different sites (each using different PHP scripts) on dozens of CWP servers indicates that the problem originates from CWP. This issue did not exist prior to AlmaLinux 9 and the current version of CWP.
27
Aplications / Re: Abnormal fevicon and title in google results
« Last post by anandmys on October 12, 2026, 07:39:14 AM »PM me server details if you want me to take a look.
Have sent you details
28
Backup / Re: NEW Backup: Still in Perpetual Beta? Critical Issues Unresolved for Months (CWP7
« Last post by cyberspace on October 11, 2026, 09:43:14 PM »CWP offers Secure Kernel feature (not free):
https://wiki.centos-webpanel.com/cwp-secure-centos-kernel
Secure kernel is based on Tomoyo:
https://en.wikipedia.org/wiki/Tomoyo_Linux
and provides MAC (mandatory access control) like SELinux.
It is quick answer on: Isolation of account files and processes are weak, relying only in file permissions.
Additionally, according to:
https://centos-webpanel.com/how-to-install-cloudlinux
CWP supports CloudLinux. So I suppose it should support cagefs. However I haven't tested CloudLinux with CWP.
https://wiki.centos-webpanel.com/cwp-secure-centos-kernel
Secure kernel is based on Tomoyo:
https://en.wikipedia.org/wiki/Tomoyo_Linux
and provides MAC (mandatory access control) like SELinux.
It is quick answer on: Isolation of account files and processes are weak, relying only in file permissions.
Additionally, according to:
https://centos-webpanel.com/how-to-install-cloudlinux
CWP supports CloudLinux. So I suppose it should support cagefs. However I haven't tested CloudLinux with CWP.
29
Backup / Re: NEW Backup: Still in Perpetual Beta? Critical Issues Unresolved for Months (CWP7
« Last post by adrianofnatal on October 11, 2026, 08:25:05 PM »Im PRO user too, for YEARS.
I quit from CWP panels, today, I have only one server.
One of the reasons was backup malfunction.
Other was:
- Isolation of account files and processes are weak, relying only in file permissions.
- NodeJS apps difficult to read error logs (they aren't integrated in panel and dont show app ID to get log from console)
- Proxy template does not work. You can create a proxy template and set to domain but in next reload, panel does not use your template.
- OWASP modsecurity rules does rename initialization file, causing the rules to be not applyed (just warnings showed). If you rename manualy, it works, but in next update, your rename is lost.
- Customer panel with a log of bugs, including not show Postgresql databases.
- Postgres databases are not backuped.
- NodeJS apps was not recreated after backup restore.
- Migration from CWP to CWP does not work with SSH private keys.
- We have problems with invasion of our servers. Suspect that was entering throug API port 2304.
- Some file editors save files with errors.
This was what I found.
It could be a good, promising panel, but I don't know what goes on behind the scenes.
In the meantime, as hosting managers, we can't rely on it.
I quit from CWP panels, today, I have only one server.
One of the reasons was backup malfunction.
Other was:
- Isolation of account files and processes are weak, relying only in file permissions.
- NodeJS apps difficult to read error logs (they aren't integrated in panel and dont show app ID to get log from console)
- Proxy template does not work. You can create a proxy template and set to domain but in next reload, panel does not use your template.
- OWASP modsecurity rules does rename initialization file, causing the rules to be not applyed (just warnings showed). If you rename manualy, it works, but in next update, your rename is lost.
- Customer panel with a log of bugs, including not show Postgresql databases.
- Postgres databases are not backuped.
- NodeJS apps was not recreated after backup restore.
- Migration from CWP to CWP does not work with SSH private keys.
- We have problems with invasion of our servers. Suspect that was entering throug API port 2304.
- Some file editors save files with errors.
This was what I found.
It could be a good, promising panel, but I don't know what goes on behind the scenes.
In the meantime, as hosting managers, we can't rely on it.
30
CentOS-WebPanel Bugs / Re: Google Recapcha not work on all CWP servers.
« Last post by Starburst on October 11, 2026, 07:18:16 PM »Website owners use Google reCAPTCHA for site registrations, member logins, form submissions, and the like.
In other words, reCAPTCHA is not used for CWP panel logins or similar access points.
So if I read that right, then this isn't a CWP 'bug' since it isn't being used for CWP logins or other access.
It's being used by sites, and hence their coding.
