Is This A BUG or WHAT !!!!

[dadeyoo]

Did you know that if you change the first letter of your resellers User/name to a CAP and use your ROOT P/W to login it Will go to Your ROOT WHM contorl panel !!
But if you don't change it to a Cap It will go to there Contorl Panel !!

Frank
EDIT
I know that if you use Root P/W you can login to any user acount !!
But why does it go to ROOT WHM and Not User WHM If you Change the First Letter of the user to a CAP!!!

cPanel.net Support Ticket Number:

[Juanra]

With root password you can login with any username.

cPanel.net Support Ticket Number:

[Website Rob]

I have no idea what led you to try that out, Frank, but it is a most interesting find and exactly correct!

Although some may say it's a bug, unless someone knows the 'root' PW they are SOL for accessing the Server WHM -- and if an un-authorized person does know the 'root' PW, then someone else is SOL and we know who!

cPanel.net Support Ticket Number:

[pagedeveloping]

Warning: You are logged in using the reseller or root password

My question is why does the reseller name come up? does this mean that resellers can log into their clients cpanel as well... I thought that this was only for root incase of a problem...!

[mmkassem]

Originally posted by Juanra
With root password you can login with any username.

You can login to any user WHM but if you are using a username instead of root + root password you should log in to the reseller WHM and not root.

Originally posted by
Website Rob
I have no idea what led you to try that out, Frank, but it is a most interesting find and exactly correct!

Although some may say it's a bug, unless someone knows the 'root' PW they are SOL for accessing the Server WHM -- and if an un-authorized person does know the 'root' PW, then someone else is SOL and we know who!

It is not a big problem but it will be better if fixed.

Originally posted by
pagedeveloping
pick a customers username any one with your root password.. that is unreal!! you get logged into their account...


Here is what comes up under last log in

Warning: You are logged in using the reseller or root password

I believe you are trying to log in to cpanel and not WHM Reseller as dadeyoo said. Aren't you?

Also you have to rename the reseller username to make the first letter capital.

[pagedeveloping]

what just happened here?

I went to add on more to make my question a little bit more clear and half my post wen to you mmkassem!

cPanel.net Support Ticket Number:

[mmkassem]

Warning: You are logged in using the reseller or root password

My question is why does the reseller name come up? does this mean that resellers can log into their clients cpanel as well... I thought that this was only for root incase of a problem...!

Sure Resellers can log in to their clients cpanel accounts. The topic is about WHM by the way.

what just happened here?

I went to add on more to make my question a little bit more clear and half my post wen to you mmkassem!

well the first post came not half of your post.

cPanel.net Support Ticket Number:

[andyf]

actually you'll find that if you login as any incorrect username (non-existant or incorrect case) and use the root pass then it'll take you into the root whm.

according to nick this was once necessary for one reason or another but perhaps isn't so anymore. I did mention it but it seems to be still there so I guess its a) still needed or b) been forgotten about.

If you have secure passwords this shouldn't be an issue. Afterall if you're trying to gain root access I think 99.9% of people know that the superuser account is called 'root' on *nix

cPanel.net Support Ticket Number:

[PWSowner]

Originally posted by goal
If you have secure passwords this shouldn't be an issue. Afterall if you're trying to gain root access I think 99.9% of people know that the superuser account is called 'root' on *nix

True. Anyone wanting to hackin already knows the username. That's why passwords need to be complex and changed regularly.