Dev {Tricks}

You are here: Home / Archives for Server and Hosting

by

How do I enable FileInfo in PHP

 How to Install a PHP Extension Using EasyApache 4

  • Log into WHM as root
  • Type ‘easy‘ into the search field of WHM
  • Click on EasyApache 4
  • Click on the Customize button in the Currently Installed Packages section
  • Then click on the PHP Extensions option from the left
  • In the Search field, type ‘fileinfo‘ to get the extension
  • Now toggle to enable or install the extension
  • Click on the Review option from the left
  • Then, click the Provision button
  • Finally Done to complete the task

 

by

CWP Security Instructions

Website Protection

Most of the hackers will be denied by ModSecurity and FileSystemLock.

Set for all .php files permissions to 640.

– Disable dangerus PHP functions
http://wiki.centos-webpanel.com/how-to-disable-dangerous-php-functions
* If you are hosting multiple sites for your clients then some sites might need some of this disabled functions.

– PHP Open_Basedir protection
http://wiki.centos-webpanel.com/php-open_basedir
* We recommend to use option per user.

– ModSecurity for CWP: It will block many malware infections.
http://wiki.centos-webpanel.com/mod_security-for-cwp

– File System Lock: It will deny any kind of change on the files system and also disable any file uploads, and that means no more malware infections and website hacks.

– Hide system processes: This will hide all system process from the users. http://wiki.centos-webpanel.com/hide-system-processes-from-users

-Notification Alerts – SECURITY ISSUE
Notification Email Alerts are NOT set on your server. Go to hostname/…./admin/index.php?module=notifications

 

by

CWP Checklist

 

Security Issues

  • RESTRICT_SYSLOG in Firewall configuration.
  • Warning: CSF/LFD Firewall – SECURITY ISSUE
    CSF/LFD Firewall contact email for alerts is NOT set on your server, click here to check it.
  • Warning: Monit Monitoring – SECURITY ISSUE
    Monit Monitoring is NOT set on your server, click here to check it.

    • Monitoring via Monit
      Monit is a utility for managing and monitoring, processes, files, directories and devices on a UNIX system.
      Monit conducts automatic maintenance and repair and can execute meaningful remedial actions in error situations.
    • On the first start please wait for the startup delay defined in the main configuration.
  • Warning: Notification Alerts – SECURITY ISSUE
    Notification Email Alerts are NOT set on your server, click here to check it.

    • Notifications and Alerts
      Here you can check and delete the server notifications.
      Click here to Edit Settings and Email Alerts.

by

How to change the default SSH Port 22 to your choice | CWP

WARNING: Security vulnerability! Your server is using default SSH Port 22, to make your server more secure change SSH port in config file /etc/ssh/sshd_config and in CSF firewall !

After changes are done don’t forget to restart SSH and CSF Firewall.

  1. After login to CWP go to Services Config->SSH Configuration. This will open /etc/ssh/sshd_config
  2. Then go to Security->CSF Firewall, click the Firewall Configuration button. This will open /etc/csf/csf.conf
  3. Look for the #Allow incoming TCP ports section and add your port number to the list.
  4. Save changes
  5. On cwp dashboard, restart SSH server.
  6. Then go to Security->CSF Firewall, click the Firewall Restart button