OnlySachin

Member
Nov 12, 2013
6
0
1
cPanel Access Level
Root Administrator
Hello,

I have issue when we login to the cpanel. is this issue or not but I think it should be stop somewhere.
Ok. we will take following 2 accounts with login details which are hosted on same server.

For example.

--------
1. abc.com
Username : abc
Password : abc123
---------
2.xyz.com
Username : xyz
Password : xyz123
---------

When you access cpanel abc.com:2082 or abc.com/cpanel whatever as you wish. Then it needs login details itself.
Right.......means Username : abc and Password : abc123 but I noticed that if you entered login details of another cpanel account which is hosted on same server eg. username xyz and password xyz123. Then also it works. No doubt, it will show you cpanel which login details you are using.

I need know how it works and is there any fixed to stop this or not ?

I am waiting for your kind reply :)

Thanks.
 

dgware

Registered
May 28, 2010
4
0
51
I believe that's intended.

The domain points to an A record (IP address) and the /cpanel is just a route to the port 2082. So... [Ip Address] xxx.xxx.xxx.xxx:2082 is the same as abc.com/cpanel
 

OnlySachin

Member
Nov 12, 2013
6
0
1
cPanel Access Level
Root Administrator
thanks dgware. I know on shared server all domains work on a shared ip. But if you take another domain which has dedicated ip address then also it works. Is there any fixed or rules to stop this ?

- - - Updated - - -

There is not a browser issue. All the domains work on same shared ip. So, browser consider ip address not hostname like as above abc.com/cpanel. Is there any fixed or rules to stop this ?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
Hello :)

This is the intended behavior. All cPanel-related services (.e.g. cPanel/WHM/Webmail) that run on the server are accessible from any IP address or domain name that points to the server. Thus, you can access cPanel for any account from any domain name or IP pointing to the server as long as you use the correct port. Note that valid authentication is required no matter what URL you use.

Thank you.
 

OnlySachin

Member
Nov 12, 2013
6
0
1
cPanel Access Level
Root Administrator
(.e.g. cPanel/WHM/Webmail) that run on the server are accessible from any IP address or domain name that points to the server.

Yes. You are right. cPanel/WHM/Webmail that run on the server and they are accessible from any ip address which is point to the server. But I just to know that is there any rule can we do for particular domain so, for that domain other domain login details will not work.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
It's not possible to restrict logins based on the initial URL used for access. You are welcome to submit a feature request for this at:

Submit A Feature Request

Thank you.