Cpanel "domain parking" FRAUD

[H2Hosting.com]

The problem:

1) For example, I host 2 domains for 2 customers - domain_1.com and domain_2.com

2) 1st customet who own first domain can park sub.domain_2.com (!!! - subdomain of second domain) on top of his own domain_1.com

If i own &pornogirls.com& i can park &support.hostingcompany.com& on top of &pornogirl.com& even if i do not own &hostingcompany.com& domain

ha ha ha

[webdave]

hostingcompany.com's nameservers would have to point to your server for the parking to work.

[H2Hosting.com]

I know. In this example, both domains are on the same server.

[moronhead]

H2, are you saying that support.hostingcompany.com is redirecting to pornogirls.com and hostingcompany.com's owner knows nothing about it?

[Marty]

That is exactly what he is saying. I can park a sub of any domain on the server to my domain whether I own the domain that I made the sub of or not.

[ecoutez]

The implications of this are seriously frightening. I don't want to spell out the possibilities, but those subdomain names could be really bad... like payments. or billing. or order. etc. And for those of us hosting our own websites on CPanel boxes with our clients... oh man... I'm gonna need a Valium for something.

- Jason

[H2Hosting.com]

yes, this is not good and should be fixed asap.

[H2Hosting.com]

yes, this is not good and should be fixed asap.

[cbservers]

If you use zoneedit.com as your nameservers you can direct only your primary domain to your servers

[H2Hosting.com]

[quote:44eb4b26c0][i:44eb4b26c0]Originally posted by cbservers[/i:44eb4b26c0]
If you use zoneedit.com as your nameservers you can direct only your primary domain to your servers[/quote:44eb4b26c0]

And what?
If you host &1000 customer's sites there is no reason to use zoneedit as DNS provider.

Why not to use another control panel?
We use Cpanel and we pay for it, so ALL bugs should be fixed asap.

[moronhead]

Can someone tell me if there's a difference between setting up a parked domain in WHM and setting it up inside Cpanel?

this should be resolved in build 40. In the future, please submit a support ticket rather then posting here about potential security problems.

[YukFoo]

I agree, security issues shouldn't be posted in the forum. Just my 2 cents.