CPanel 10.6.0-RELEASE x quota file publicly editable, that means no quota!

[hexstar]

Well I've noticed this with a number of hosts, all of which used 10.6.0-RELEASE x (where x is any of the revisions of this cpanel build) that their disk space quota file and others like the subdomain quota file are availible to the client and fully editable by the client...that means the client can give themself however much diskspace they want or to just give themselves no quota all together! Here's how:

1) Login to cpanel
2) Open the file manager
3) Go into the folder .cpanel-datastore
4) Edit the file quota_-v to your liking
5) Save it and enjoy!

Also I noticed that the file seems to be replaced at unknown intervals, this can be circumvented simply by creating a cp cronjob that replaces the quota file with the desirable version every minute ...not sure if this is known, a bug or what but I thought you guys would want to know about this (although I admittedly do enjoy this oddity )

[cpanelnick]

Well I've noticed this with a number of hosts, all of which used 10.6.0-RELEASE x (where x is any of the revisions of this cpanel build) that their disk space quota file and others like the subdomain quota file are availible to the client and fully editable by the client...that means the client can give themself however much diskspace they want or to just give themselves no quota all together! Here's how:

1) Login to cpanel
2) Open the file manager
3) Go into the folder .cpanel-datastore
4) Edit the file quota_-v to your liking
5) Save it and enjoy!

Also I noticed that the file seems to be replaced at unknown intervals, this can be circumvented simply by creating a cp cronjob that replaces the quota file with the desirable version every minute ...not sure if this is known, a bug or what but I thought you guys would want to know about this (although I admittedly do enjoy this oddity )

This is just a cached value to save cpu time. You can change what it displays in cPanel, but its not going to affect the actual quota. Its more like lying to yourself.

[hexstar]

oh o_O ...oh well XD