Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Frontpage in cPanel

Discussion in 'Security' started by polkocholo, Apr 19, 2011.

  1. polkocholo

    polkocholo Active Member

    Joined:
    Nov 22, 2010
    Messages:
    42
    Likes Received:
    0
    Trophy Points:
    56
    I activated Microsoft Frontpage in easyapache
    But in ConfigServer Security & Firewall - csf v5.20 ( CSF ) >>>> Check server security display this alert:

    Microsoft Frontpage Extensions were EOL in 2006 and there is no support for bugs or security issues. For this reason, it should be considered a security risk to continue using them. You should rebuild apache through easyapache and deselect the option to build them


    Is this a bug is dangerous?
    Do you need to do to disable this?


    Regards
     
    #1 polkocholo, Apr 19, 2011
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,309
    Likes Received:
    393
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Only install it if you must. There's really no reason to though, IMO.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 Infopro, Apr 19, 2011
  3. polkocholo

    polkocholo Active Member

    Joined:
    Nov 22, 2010
    Messages:
    42
    Likes Received:
    0
    Trophy Points:
    56
    So why csf think this identifies a bug?
     
    #3 polkocholo, Apr 19, 2011
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,309
    Likes Received:
    393
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    The message states:

    there is no support for bugs or security issues

    In other words it's outdated, not supported by MS any longer and probably should not be installed on your server.

    CSF security checklist is a great tool of suggestions. You do not need to comply with every one of them.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 Infopro, Apr 19, 2011
  5. SoftDux

    SoftDux Well-Known Member

    Joined:
    May 27, 2006
    Messages:
    993
    Likes Received:
    2
    Trophy Points:
    168
    Location:
    Johannesburg, South Africa
    cPanel Access Level:
    Root Administrator
    You should really not use FrontPage Extensions anymore. It was discontinued in 2004, full of security holes and will give you more support nightmares than anything else. Most of the FE options don't work anymore.
     
    #5 SoftDux, Apr 19, 2011
  6. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    214
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    DataCenter Provider
    I believe that was true for regular installations of Front Page, but cPanel team once mentioned that *their* installation of Frontpage was not susecptable to the security issues from FrontPage. Is this still the case??? Can someone from cPanel chime in here?
     
    #6 gkgcpanel, Jul 17, 2012
  7. SoftDux

    SoftDux Well-Known Member

    Joined:
    May 27, 2006
    Messages:
    993
    Likes Received:
    2
    Trophy Points:
    168
    Location:
    Johannesburg, South Africa
    cPanel Access Level:
    Root Administrator
    Their Wiki suggest you using something else: FrontPage
     
    #7 SoftDux, Jul 17, 2012
  8. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    214
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    DataCenter Provider
    Thanks. I seem to remember however that cPanel once stated that as long as they can get FrontPage to properly compile via EasyApache, they will continue to support it. The first time that they run into problems trying to compile FrontPage via EasyApache, they will then officially stop supporting FrontPage on cPanel.

    That's what I'm trying to figure out. Have they (meaning cPanel) officially stopped supporting it? If so, why is it still listed as an option in EasyApache? If not, is it still susceptable to the security issues that plague FrontPage in general?

    I desparately want to get rid of it, but I know that I have a handful of customers that still use it, and these people will most likely leave to find another host that still supports FrontPage. I'm trying to avoid that if at all possible. So if someone from cPanel can chime in here and give their 2 cents, that would be great.
     
    #8 gkgcpanel, Jul 17, 2012
  9. voshka

    voshka Active Member

    Joined:
    Apr 4, 2010
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    56
    As far as I remember it also conflicts with password protected directories
     
    #9 voshka, Jul 17, 2012
  10. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,608
    Likes Received:
    32
    Trophy Points:
    238
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    We have not officially stopped supporting FrontPage in EasyApache. We do not recommend installing it or using it (this is why it has [ ] Frontpage *DEPRECATED* in EasyApache), but we do still provide it. We do not yet have any announcement on FrontPage no longer being supported either. This does not make it secure or advisable to use.

    For example, we provide DSO and that isn't advisable to use on a shared machine unless you have enabled mod_ruid2 with it. We don't advise using PHP 4 (and did drop it recently but supported it until it was removed). Here support means we will work to get the component working if it doesn't function properly after installation.

    As for the customers using FrontPage, you might want to have a dialog with each to get them moved over to an up-to-date system for site changes. FTP clients do most of what FrontPage did and ones like Filezilla are free. File manager allows basic revisions on files.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 cPanelTristan, Jul 17, 2012
  11. NetMantis

    NetMantis BANNED

    Joined:
    Apr 22, 2012
    Messages:
    116
    Likes Received:
    1
    Trophy Points:
    66
    Location:
    Utah
    cPanel Access Level:
    DataCenter Provider
    Infopro is giving you very good advice here!

    To say that Frontpage is obsolete would very literally be the under statement of the decade!

    Frontpage was formally discontinued many years ago and should not currently be used by anyone at all.

    The extensions themselves, way back when they were last produced or supported, at that time were compatible to the servers and web technologies that were available at that time. Unfortunately so much has changed and evolved since those were written that they are no longer compatible with most of servers out there today posing not only substantial potential security problems but also a great deal of compatibility problems as well.

    For the first couple of years after Frontpage was formally discontinued, it was fine to continue to support the extensions on your server for users who needed those extensions but that is no longer the case anymore and Cpanel would actually be wise to go ahead and remove them completely from future releases.

    If you have a user who absolutely insists on Frontpage, you could setup WebDAV which provides much of the same functionality as the old Frontpage extensions and the old final releases of Frontpage supported that standard.

    Ideally however, it's more than long since past time for all users to of migrated to something other than Frontpage and there is no reason to any longer try to support what for the most part no longer works on most of the servers.
     
    #11 NetMantis, Jul 18, 2012
  12. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    214
    Likes Received:
    0
    Trophy Points:
    166
    cPanel Access Level:
    DataCenter Provider
    Thank you. That's the pieces of information I needed.
     
    #12 gkgcpanel, Jul 19, 2012
(You must log in or sign up to post here.)
Loading...
Similar Threads - Frontpage cPanel
  1. web-hosting

    Lets encrypt icon missing in cpanel frontpage suddenly

    web-hosting, Jan 27, 2018, in forum: General Discussion
    Replies:
    3
    Views:
    389
    cPanelMichael
    Jan 30, 2018
  2. Jesse Smith

    FrontPage security patch is disabled

    Jesse Smith, Nov 23, 2017, in forum: EasyApache
    Replies:
    1
    Views:
    411
    cPanelMichael
    Nov 29, 2017
  3. Rob CZ

    New Thread When installing SSL via cPanel, "...already has a website on the IP address *..." error message

    Rob CZ, Aug 20, 2018 at 11:20 AM, in forum: General Discussion
    Replies:
    3
    Views:
    3
    rpvw
    Aug 20, 2018 at 12:06 PM
  4. Marcelo_Bittencourt

    New Thread Problems in validating courses at cpanel university.

    Marcelo_Bittencourt, Aug 20, 2018 at 9:11 AM, in forum: General Discussion
    Replies:
    0
    Views:
    11
    Marcelo_Bittencourt
    Aug 20, 2018 at 9:11 AM
  5. Edwin Huijsing

    New Thread information needed for .cpanel.yml

    Edwin Huijsing, Aug 20, 2018 at 3:32 AM, in forum: General Discussion
    Replies:
    0
    Views:
    17
    Edwin Huijsing
    Aug 20, 2018 at 3:32 AM

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice