Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

permissions and limiting PHP file modifications

Discussion in 'Security' started by team_dale, Jul 15, 2016.

  1. team_dale

    team_dale Member

    Joined:
    Jul 9, 2014
    Messages:
    12
    Likes Received:
    1
    Trophy Points:
    3
    cPanel Access Level:
    Root Administrator
    We run a lot of wordpress sites and as usual, clients aren't great at updating their plugins.

    What we find is that a lot of php files get modified after an exploit is - exploited, with malicious code being spidered into legitimate files, and also files being created that are 100% malicious code.

    We have a way around this on non cPanel servers by just setting everything to read only for websites. However when we do this on a cPanel site, everything fails spectacularly.

    On these read-only servers, we do all the plugin updates on a development box and then push to live.

    Is there a way to make all the files folders (except for the uploads folder) read only on cpanel?
     
    #1 team_dale, Jul 15, 2016
  2. georgeb

    georgeb Well-Known Member

    Joined:
    May 23, 2010
    Messages:
    49
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Montreal, QC, Canada
    cPanel Access Level:
    Root Administrator
    You, like admin, have to control any files that are uploaded. If the user is not updating the software block access to that folder so the user will let you know they can't access their files. I recommend the CXS scanner from Configserver.

    Regards
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 georgeb, Jul 16, 2016
  3. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,802
    Likes Received:
    1,895
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    The limitation isn't necessarily with cPanel, but with Apache and the PHP handler you are using. You can read more about the permission requirements with the various PHP handlers at:

    PHP Handlers - EasyApache - cPanel Documentation

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 cPanelMichael, Jul 18, 2016
(You must log in or sign up to post here.)
Loading...
Similar Threads - permissions limiting file
  1. Andee

    Permissions on files links not working

    Andee, Sep 29, 2018, in forum: General Discussion
    Replies:
    1
    Views:
    52
    cPanelLauren
    Oct 5, 2018
  2. CanadaGuy

    Zone Ownership and API Permissions

    CanadaGuy, Sep 28, 2018, in forum: cPanel Developers
    Replies:
    6
    Views:
    91
    CanadaGuy
    Oct 9, 2018
  3. Otávio Serra

    In Progress [CPANEL-19869] Apache mod_evasive permissions

    Otávio Serra, Sep 24, 2018, in forum: General Discussion
    Replies:
    10
    Views:
    156
    cPanelLauren
    Oct 10, 2018 at 10:23 AM
  4. maestroc

    SOLVED How to reset permissions on hosting account files

    maestroc, Sep 9, 2018, in forum: General Discussion
    Replies:
    8
    Views:
    135
    cPanelLauren
    Sep 11, 2018
  5. Thunderchild

    Compromised wordpress and file permissions question

    Thunderchild, Sep 1, 2018, in forum: General Discussion
    Replies:
    21
    Views:
    301
    Thunderchild
    Sep 7, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice