The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Cpanel "domain parking" FRAUD

Discussion in 'General Discussion' started by H2Hosting.com, Sep 12, 2002.

  1. H2Hosting.com

    H2Hosting.com Well-Known Member

    Joined:
    Sep 4, 2001
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    The problem:

    1) For example, I host 2 domains for 2 customers - domain_1.com and domain_2.com

    2) 1st customet who own first domain can park sub.domain_2.com (!!! - subdomain of second domain) on top of his own domain_1.com

    If i own &pornogirls.com& i can park &support.hostingcompany.com& on top of &pornogirl.com& even if i do not own &hostingcompany.com& domain

    ha ha ha ;)
     
  2. webdave

    webdave Active Member

    Joined:
    Jul 4, 2002
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    hostingcompany.com's nameservers would have to point to your server for the parking to work.
     
  3. H2Hosting.com

    H2Hosting.com Well-Known Member

    Joined:
    Sep 4, 2001
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    I know. In this example, both domains are on the same server.
     
  4. moronhead

    moronhead Well-Known Member

    Joined:
    Aug 12, 2001
    Messages:
    706
    Likes Received:
    0
    Trophy Points:
    16
    H2, are you saying that support.hostingcompany.com is redirecting to pornogirls.com and hostingcompany.com's owner knows nothing about it?
     
  5. Marty

    Marty Well-Known Member

    Joined:
    Oct 10, 2001
    Messages:
    630
    Likes Received:
    1
    Trophy Points:
    18
    That is exactly what he is saying. I can park a sub of any domain on the server to my domain whether I own the domain that I made the sub of or not.
     
  6. ecoutez

    ecoutez Well-Known Member

    Joined:
    May 23, 2002
    Messages:
    152
    Likes Received:
    0
    Trophy Points:
    0
    Eek, that's very scary!

    The implications of this are seriously frightening. I don't want to spell out the possibilities, but those subdomain names could be really bad... like payments. or billing. or order. etc. And for those of us hosting our own websites on CPanel boxes with our clients... oh man... I'm gonna need a Valium for something. ;)

    - Jason
     
  7. H2Hosting.com

    H2Hosting.com Well-Known Member

    Joined:
    Sep 4, 2001
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    yes, this is not good and should be fixed asap.
     
  8. H2Hosting.com

    H2Hosting.com Well-Known Member

    Joined:
    Sep 4, 2001
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    yes, this is not good and should be fixed asap.
     
  9. cbservers

    cbservers Member

    Joined:
    Sep 10, 2002
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Aussie Land
    Zoneedit

    If you use zoneedit.com as your nameservers you can direct only your primary domain to your servers
     
  10. H2Hosting.com

    H2Hosting.com Well-Known Member

    Joined:
    Sep 4, 2001
    Messages:
    192
    Likes Received:
    0
    Trophy Points:
    16
    [quote:44eb4b26c0][i:44eb4b26c0]Originally posted by cbservers[/i:44eb4b26c0]
    If you use zoneedit.com as your nameservers you can direct only your primary domain to your servers[/quote:44eb4b26c0]

    And what? :)
    If you host &1000 customer's sites there is no reason to use zoneedit as DNS provider.

    Why not to use another control panel? :)
    We use Cpanel and we pay for it, so ALL bugs should be fixed asap.
     
  11. moronhead

    moronhead Well-Known Member

    Joined:
    Aug 12, 2001
    Messages:
    706
    Likes Received:
    0
    Trophy Points:
    16
    Can someone tell me if there's a difference between setting up a parked domain in WHM and setting it up inside Cpanel?
     
  12. bdraco

    bdraco Guest

    this should be resolved in build 40. In the future, please submit a support ticket rather then posting here about potential security problems.
     
  13. YukFoo

    YukFoo Well-Known Member

    Joined:
    Sep 1, 2002
    Messages:
    135
    Likes Received:
    0
    Trophy Points:
    16
    I agree, security issues shouldn't be posted in the forum. Just my 2 cents. ;)
     
Loading...

Share This Page