php include path changes

Loading a phpinfo file for a domain on a cpanel server, you notice that the “include_path” variable changes. Resolution: With PHP PEAR enabled, PEAR is by default configured to include its PHP directory (/home/domina/php in this case). You can disable /home/domain/php from being in the PHP include_path by either removing that directory (/home/freedc/php) or uninstalling … Read more

PCI-DSS

The Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store ortransmit credit card information maintain a secure environment. Essentially any merchant that has a Merchant ID (MID). General requirements for compliance Firewall Intrusion Drevention Systems Intrusion Prevention Systems Dedicated IP addresses PCI … Read more

SSLv3 Vulnerability (Poodle)

According to The Register, a serious vulnerability in SSL v3 will be disclosed tomorrow on October 15th. Some people are recommending disabling SSL v3 in various daemons until further notice. A vulnerability in the design of SSL version 3.0. This vulnerability allows the plaintext of secure connections to be calculated by a network attacker. SSL … Read more

Restrict access to ftp and other services in WHM

Source: https://documentation.cpanel.net/display/1142Docs/Host+Access+Control You can use the Host Access Control feature to allow or deny clients’ access, based on the IP address, to the following services: Daemon Name Service Name cpaneld cPanel whostmgrd WHM webmaild Webmail cpdavd WebDisk Allow access for an IP address To allow an IP address to access a service, perform the following … Read more

Stop cPhulk from Command Line

Cannot login to WHM? ssh to the server and run: This will stop until chksrvd starts it back up again within 8 minutes. To start Disable cPhulk Resource: https://documentation.cpanel.net/display/ALD/cPHulk+Brute+Force+Protection#cPHulkBruteForceProtection-FailedLogins