CPanel Demo Accounts

[randyc]

Is htere a way too setup a really secure cpanel demo account? Ive already disabled shell and of course CGI, but what else can i do to make it secure?

btw, nice forums. ive been browsin for about a year.

 

[dgbaker]

Try this link for a start, http://forums.cpanel.net/read.php?TID=6474

 

[ptez]

Null link above?

cPanel.net Support Ticket Number:

 

[oxygen]

that link seems to be dead..

cPanel.net Support Ticket Number:

 

[pkuk]

Not sure, even disabling shell acess & CGI + setting a quota of 1MB will still allow things to run. Sure you can't set up an email account, but you can install a cart or a forum, even in demo mode, use with caution...

cPanel.net Support Ticket Number:

 

[ciphervendor]

People really don't need to be able to click links in a demo. Why not just create screenshots or static HTML pages? They work the same and I doubt you will loose customers over this.

cPanel.net Support Ticket Number:

 

[Host4u2]

Cpanel Demos

Create unreal-domain name account without CGI, Shell access and Turn on 'demo mode' for that account
-----

To disable email

Remove the domain entry from /etc/userdomains, and /etc/localdomains

Removing these entries will prevent anyone from sending mail from the demo account. They will still be able to go into Neomal they just won't actually be able to send anything.
-----

To disable ftp
Add username on

/etc/ftpusers

Description:
Deny FTP access. The ftpusers file is used to deny FTP access to specific users. The format is a simple text file listing the restricted users one per line.
-----

To disable cgi, SSI, To disable php, not allow calling website from IP address, Disable .htaccess

In /etc/httpd/conf/httpd.conf
<IfModule mod_userdir.c>
# UserDir public_html
UserDir disabled
</IfModule>

This will cause all hosting account on that server couldn't reach by http://IPADDRESS/~username/
This is quite important if you need to setup demo.

cPanel.net Support Ticket Number:

 

[NiN]

Re: Cpanel Demos

Originally posted by Host4u2
In /etc/httpd/conf/httpd.conf
<IfModule mod_userdir.c>
# UserDir public_html
UserDir disabled
</IfModule>

This should be done with or without demo accounts!
Only enable it for shared ssl hosts!

cPanel.net Support Ticket Number:

 

[vabtz]

My solution for this also includes changing the ownership of the demo accounts home directory and all files included in it. Then changing the permissions so noone can install anything in there.

cPanel.net Support Ticket Number:

cPanel.net Support Ticket Number:

 

[chadi]

Create unreal-domain name account without CGI, Shell access and Turn on 'demo mode' for that account
-----

To disable email

Remove the domain entry from /etc/userdomains, and /etc/localdomains

Removing these entries will prevent anyone from sending mail from the demo account. They will still be able to go into Neomal they just won't actually be able to send anything.
-----

To disable ftp
Add username on

/etc/ftpusers

Description:
Deny FTP access. The ftpusers file is used to deny FTP access to specific users. The format is a simple text file listing the restricted users one per line.
-----

To disable cgi, SSI, To disable php, not allow calling website from IP address, Disable .htaccess

In /etc/httpd/conf/httpd.conf
<IfModule mod_userdir.c>
# UserDir public_html
UserDir disabled
</IfModule>

This will cause all hosting account on that server couldn't reach by http://IPADDRESS/~username/
This is quite important if you need to setup demo.

cPanel.net Support Ticket Number:

/etc/ftpusers file does not even exist for me. What should I do here?

 

[chadi]

Also, I did all you said and attempted to send an email using "default" account for this demo enabled account. I used Horde and it sent the email (I did not receive the email but the relayers show as sent and so did Horde itself). Why?

 

[Host4u2]

At the time of my last post it was another world. In today's world I know of no "safe" way to enable a Cpanel Live Demo. I suggest a Flash Demo System such at that at http://demo123.net/rvblue/demoInterface_content.html .

 

[dgbaker]

Selfish plug :D

Or use http://www.cpaneldemos.com

Have a live demo without impacting your servers.

cPanel Demos is proud to be hosting cPanelThemes.com