Dev {Tricks}

You are here: Home / Archives for Server and Hosting / Web Control Panel

by

How to enable and disable dangerous php functions | CWP

How to disable dangerous php functions

PHP switcher :

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /usr/local/php/php.d/disabled_function.ini

PHP-CGI selector :

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php53/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php54/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php55/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php56/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php70/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php71/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php72/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php73/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php74/usr/php/php.d/disabled_function.ini

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php80/usr/php/php.d/disabled_function.ini

PHP_FPM Selector :
** Don’t forget to restart php-fpm after changes

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm53/usr/php/php.d/disabled_function.ini && service php-fpm53 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm54/usr/php/php.d/disabled_function.ini && service php-fpm54 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm55/usr/php/php.d/disabled_function.ini && service php-fpm55 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm56/usr/php/php.d/disabled_function.ini && service php-fpm56 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm70/usr/php/php.d/disabled_function.ini && service php-fpm70 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm71/usr/php/php.d/disabled_function.ini && service php-fpm71 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm72/usr/php/php.d/disabled_function.ini && service php-fpm72 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm73/usr/php/php.d/disabled_function.ini && service php-fpm73 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm74/usr/php/php.d/disabled_function.ini && service php-fpm74 restart

echo "disable_functions = exec, system, popen, proc_open, shell_exec, passthru, show_source" > /opt/alt/php-fpm80/usr/php/php.d/disabled_function.ini && service php-fpm80 restart

How to enable back the dangerous php functions

To enable it back, simply delete disabled_function.ini file for the PHP version you want and restart apache/php-fpm.

by

Linux edquota Command Examples to Edit User and Group File Quota

By default, edquota will open up the quota file in an Vi editor, from where you can change the values.

Edit User Quota

edquota -u username

This will edit the quota for user “username”.

Edit Group Quota

To edit group quota, use -g.

edquota -g groupname

This will edit the quota for group “groupname”

by

Move /var/vmail to /home/vmail | CWP

First check your details

  • Check free space of the all partition 
    df -h
  • Check /var/vmail space usage 
    du -hs /var/vmail

Now we can start as follows

  • Stop postfix and dovecot service 
    systemctl stop postfix dovecot
  • Use rsync command to copy the vmail directory to new location 
    rsync -av /var/vmail/ /home/vmail/

    Note: above command will copy vmail to /home/vmail with all existing permissions.

  • Keep a backup of /var/vmail directory 
    mv /var/vmail /var/vamil.orig
  • Next, create a symlink to new location from old location 
    ln -s /home/vmail /var/vmail

    Symlink creates a reference from new location to old location.

  • Now, start postfix and dovecot 
    systemctl start postfix dovecot

That’s it.

You can then test send and receipt of emails. If all looks okey, then you can delete the /var/vmail.orig folder to make the space available.

by

How to change the IP Address of CWP Server

  • If you have CWPpro licence, first change IP to new one at https://support.centos-webpanel.com/clientarea.php and then follow following steps
  • Create/update reverse DNS in your VPS provider. That would be your new hostname.
  • Create nameservers with new IP in Domain registrar.
  • Go to CWP Settings and then IP Manager and add the new IP address with Netmask and Gateway. Note that you have to configure the VPS with new IP and test it accordingly.
  • Go to Server Settings and then Change Hostname and replace New Hostname with rDNS/PTR records of your Default/New IP. Confirm that everything here looks ok.
  • Go to User Accounts and then List Accounts and you need to go to “Edit Account” section of all accounts on your server and replace IP field with Default/New IP Address (you also must check the “Update DNS Zone” checkbox). Test one account first and if it works then go for all accounts. SSL may cause but will be resolved automatically. You may have to use VPN to test.
  • Go to CWP Settings and then Edit Settings and replace Shared IP field with Default/New IP Address. Check the “Rebuild vHosts” check box and save changes.
  • Go to DNS Functions and then Edit Nameservers IPs and replace all NS1 and NS2 IPs with Default/New IP Address.
  • After completing all of the above, rebuild WebServer in order to prevent future issues , So you need to Go to Apache Settings and then Apache Re-Build and recompile your apache webserver
  • If you were using Varnish Cache or Nginx Reverse Proxy you must have to Go to Apache Settings and then Select WebServers and select Default Web Servers which you were using and Click on “Save & Rebuild Configuration“.
  • if you were using MailServer you should Rebuild your MailServer. Go to Email and then MailServer Manager and Rebuilt Mail Server. If you need to restart all mail server services (Postfix, ClamAV, Amavis, Spamassassin, Dovecot) you can do that here. 
  • Reboot your server
  • Enjoy!

by

How to secure port 2083 | CWP

  • Securing port 2083
  • Adding SSL on CWP
  • Secure CWP ports – Centos-Web Panel
  • Secure CWP Admin Panel Port 2031

There are options to login to CWP

1) Access the user panel via panel.(domain.com)
2) Access the user panel via (hostname):2083

(domain.com):2083 will result in an ssl error, as the certificate is assigned to the hostname only.

Use server hostname for ssl connection to cwp.
You would have many manual work to setup SSL for each domain

You can check this config locations
/usr/local/cwpsrv/conf/
/usr/local/cwpsrv/conf.d/

Some Tricks

  • Use “Change Hostname” (don’t have to change anything, if it looks right. Just have to save as it is.)
    Server Settings, Change Hostname
  • Reissue all certs that were issues
  • Check /var/log/cwp/autossl.log
  • Use cpanel subdomain
    For example, cpanel.domain.com