Privacy!
All sites should have a privacy policy but I\'ll bet most or never address the fact that all server log files are viewable by others when they are, do you?
Yes. One of the requirements of responsible net citizenship is respecting the privacy of others. Just as you don\'t forward or post private email without the author\'s consent, in general you shouldn\'t use or post Web usage statistics that can be attributed to an individual or business.
If you are a government site, you may be required by law to protect the privacy of your readers. For example, U.S. Federal agencies are not allowed to collect or publish many types of data about their clients. Yes, most of you are not hosting government sites but you may be hosting local government which many times follows the big brothers rules and regulations and this information being viewable could open up a can of worms at a later date.
Although not the problem of cpanel but of other software developers programming techniques, passwords are often sent as clear text in the url when accessing cgi and php scripts. Often times a URL requested (including the values of any variables from a form submitted using the GET method) are visible. The programmers of these scripts claim the server is not secure if people can see other peoples logs and throw the blame on the server administrators. The server administrators blame the script makers, thus the problem exists.
Many times the passwords are sent by accident and are recorded in the logs, where access could be attained.
It\'s just another avenue of privacy that should be addressed but is still lagging behind. Its a blueprint of operations for the domain or business that is exposed to the public that I\'m sure they don\'t wan\'t visible to be used in any way you can imagine.
Basically it comes down to our responsibility to provide a level of privacy to our users that they would expect to have. I don\'t think the current system does a job to be proud of. Hopefully, this and other areas of concern will be secured in the near future.
Brad
[quote:c2a956407d][i:c2a956407d]Originally posted by bdraco[/i:c2a956407d]
Can anyone give a reason why someone would even care enough to want to access another site\'s domlogs, or why this would ever be a problem? [/quote:c2a956407d]
