Cross domain requires stopped after EA4 upgrade :(

[Headache]

Hi Guys,

New here. I'll introduce myself properly in the lounge later but I'm in a real need of urgent help/advice please.

All my sites are down since my ISP performed the EA4 upgrade today.

The reason.... there are two issues and they seem to be because EA4 is not letting domains on my server access (read) data from a specific other domain on the same server.

All was well for 10 years and more.
So,

1. One script contains the login data for my MySQL DB located on, say, domain 1 and all other domains require that file and read it's contents and then connect to the db.
2. I use a mask.pl file for displaying images. That script builds a filepath and calls in the image from domain 1. The images are stored in a set of directories on domain 1 - a central cms system.

Advice from ISP is to duplicate that Db login file and place it in every website's own file structure.
And even if I did that, my sites won't be able to call in the images and I'd be in a mess when I may change a db password!

Can anyone make a recommendation as to what configuration changes need to be made in whm or cPanel so any domain on this server or in a series of specific ip addresses can read from domain 1

I'd appreciate any advice because currently my sites are down and I can't get a response from the ISP.

Headache.

 

[Headache]

On reading up on security I discovered a setting in WHM -> tweak settings -> security -> enable file protect. Switching that off enables my scripts to work as before. However, I don't want to open up any security issues so, will setting that to 'off' open up the server to bad stuff?

 

[cPanelLauren]

File Protect is described here: The EasyApache 4 FileProtect Option - EasyApache 4 - cPanel Documentation - anytime you're allowing files to be used across different UID's you're opening yourself up to security issues - you can disable it though if you want things to function as they did before though it's not recommended.