cpanel bug deleted all my email accounts

jcorreia

Well-Known Member
Apr 25, 2005
53
0
156
Hi,
I´ve come across a bug(?) and trying to solve that I run into a bigger one and deleted all my email accounts.

The problem is that a mysterious email account appeared in cpanel (in http:....../frontend/x3/mail/pops.html), this account had only the domain and no user like this '@example.com'.
I thought that was strange and decided to delete it. After I deleted it in cpanel(
Code:
https://........./frontend/x3/mail/dodelpop.html?redirectdomain=&email=john&domain=example.com
), it trow an error (sorry didn´t saw what it said), and all my 29 emails accounts disapparead !!
I´ve logged off in cpanel and logged in again and the accounts were there again..Or so I thought..I´ve checked on server file system and I didn´t had mail folder :( It delete all my accounts, although in web interface they were there.

There are here 2 issues here :

1. the mysterious email @example.com, and how it appeared in cpanel

2. I think that the email deletion in cpanel, is accepting wildcards, because after I deleted the account @example.com , all the email accounts were gone. Please check and fix at least this and don+t allow wildcard email deletion. I think you are allowing email parameter in this url to be null
Code:
https://............/frontend/x3/mail/dodelpop.html?redirectdomain=&email=john&domain=example.com
probably, when it deleted all the accounts the url was
Code:
https://............/frontend/x3/mail/dodelpop.html?redirectdomain=&email=&domain=example.com
Thanks