Web Hosting Talk







View Full Version : cpanel demo


batcavenet
06-24-2002, 01:04 PM
I'm debating whether or not to have a cpanel demo. I realize this can be a potential risk even though in cpanel demo mode. What issues should I be aware of in providing a demo in true cpanel demo mode? or should I not even do it - thanks!

AcuNett
06-24-2002, 01:10 PM
I'd recommend screen shots (every page if you wish) instead of a demo.

The Prohacker
06-24-2002, 01:32 PM
If you know how to secure up the demo its fine...

The stock way of making a demo account is very insecure....

mas3000
06-24-2002, 11:55 PM
Screen shots would probably work well.

Warren
06-25-2002, 01:19 AM
What type of security issues are there with the cpanel demo?

The Prohacker
06-25-2002, 01:44 AM
Typically the demo user could still have shell and ftp access...

I haven't made a demo account in awhile, but I go though remove all access except to cpanel, and chmod the /home/demo dir to 000 and own it by root....

I do a few other things... But those are things I like to keep as a trade secret almost :D

Warren
06-25-2002, 01:45 AM
Trade secret eh? Anyway you could throw some of that info my way?

chrisb
06-25-2002, 02:24 AM
Good question. I was just about to start a thread about this issue since it's a pet peeve of mine.:(

ummm... I loathe screen shots!:) You can't check out functionality of a control panel with a screen shot.

However, for any Control Panel, I don't think the host should have to have their own working demo, either. You are paying for that Control Panel, so the CP manufacturer should take care of the demo for you.

IOW, the control panel manufacturer should have a good working demo for you to use that is reliable. That way when someone clicks on demo, the link takes them to the manufacturer's site. Yes, this is done now in some cases; but IMHO, not well.

Also, the manufacturers should know enough about how to make it secure, that they allow every feature on their Control Panel to work, including shell and ftp, as prohacker stated. If they don't, then you might want to look at another Control Panel since Control Panel manufacturers should be experts in security also.

Here's what I think that H Sphere, CPanel, and other manufacturers of CP's need to do: put their control panel demo on separate servers for all of their clients to use.

And then, if the features that you support on your CP differ from the demo site, state the differences on your web site.