Permanently disable Copy account with account password

[cgilbert001]

Am trying to figure out how to permanently disable "Copy an account from another server with ACCOUNT PASSWORD" because I have proprietary (though non-copyrighted) files that I host, which I do not want other persons to be able just to transfer to a new server in 10 seconds and open their own hosting business.

This is the last hole I need to plug so can anyone tell me a way to do this?

Thanx

[HostMerit]

Why not protect the files through PHP encryption + protection to make sure it's running on your server?

Perhaps you should not be giving access to CPanel but enable your users to edit the sites through another manner.

What's preventing them from downloading files via FTP etc?

So many ways to copy / move an account, perhaps you shouldn't be giving direct cpanel access...

[brianoz]

The correct fix to this problem is to put your proprietary files into /usr/local/lib/php and include them (without a path) when you want to access them. The average user will have no idea what this means.

This way, the accounts will not work if they are copied to another server, and your source won't go along with them. It also has the advantage (and caveat) that any change you make will immediately affect all the domains on the server - the advantage being that it's easy to upgrade and fix security problems, the caveat being that it's much easier to break every account on the server.

Of course, PHP encryption is also a really good idea, but this approach coupled with encryption makes it impossible for anyone to steal your ideas or your accounts!