Results 1 to 2 of 2

Thread: How to Install script to IP, securely?

  1. #1
    Member
    Join Date
    Feb 2006
    Posts
    13

    Default How to Install script to IP, securely?

    Looking for a push in the right direction, hoping someone can give me their .02

    I am running CentOS with cPanel on a dedicated box that is in production with clients. I bought a script called Scriptcase. I have used Easy Apache to build Apache. I have 24 ip's to this box and probably 12 or so that are not in use. I posted this question on the forums over there but I dont think that it is really their department.

    I need (Want?) to install it on my dedicated box so I can access it regardless of what computer I am on or where I am. I am wanting to install it to an IP instead of a domain name and a random port. It makes me nervous though because if the bad guys get in, its pretty much game over.

    It requires permissions to be 777 and I run suphp for the clients and hosting. Scriptcase is just going to be for my use and I was figuring I would Deny all and then just allow my IP at home. My problem is that I dont think I could sleep well at night knowing I have a script installed with permissions like that.

    Is there a safe way to go about running a script like this on a production box?
    If there is a safe way, can someone give me a shove in the right direction on how I would configure Apache?

    I have read up here Changes Contained within a VirtualHost Directive I am still confused on if there is a safe route and if there is, what method I should use.

    Appreciate anyones thoughts on this!

  2. #2
    cPanel Staff cPanelTristan's Avatar
    Join Date
    Oct 2010
    Location
    somewhere over the rainbow
    Posts
    7,611
    cPanel/WHM Access Level

    Root Administrator

    Default Re: How to Install script to IP, securely?

    On suPHP, any PHP script will not function with permissions 777 regardless. The script might require it on DSO, but it will not require 777 permissions under suPHP if it is a PHP-based script. You can run it with 755 and 644 file permissions and because the script will run as the user of the account, it will still run properly in PHP. If the script is not PHP-based, then suPHP or DSO PHP handlers don't matter in the permissions you set on the files.

    If you only allow your IP to access the script, then there isn't any way for anyone else to load the pages for the script. Additionally, you could use password protect directories and password protect the folder to require a username and password for accessing it. This can be set in cPanel > Password Protect Directories for the account you setup for the script.
    cPResources: Support Options | More Support Options | Forums Search | cPanel.net Site Search | Mailing Lists(Alt) | Docs
    -- Tristan, Technical Analyst III, Forums Specialist, cPanel Tech Support

    Submit a ticket | Check an existing ticket

Similar Threads

  1. Installing FCGI Securely
    By markb14391 in forum Optimization
    Replies: 3
    Last Post: 02-04-2011, 06:38 PM
  2. Securely roll out email accounts/pw to remote users
    By awgerber in forum cPanel Developers
    Replies: 1
    Last Post: 07-16-2009, 10:34 AM
  3. Changed MX record, can't connect securely
    By CRichardson in forum E-mail Discussions
    Replies: 0
    Last Post: 03-06-2008, 10:00 AM
  4. mysql file upload securely
    By johnnywalker in forum cPanel & WHM Discussions
    Replies: 5
    Last Post: 04-15-2007, 09:36 AM
  5. Can you securely transmit files wihout shell access?
    By trakwebster in forum cPanel & WHM Discussions
    Replies: 0
    Last Post: 03-27-2003, 08:05 PM