Web Hosting Talk







View Full Version : unsecure cpanel


Shyne
08-05-2002, 05:03 PM
Why is the while creating passwords for FTP and E-mail the passwords are not shadowed? Are they passed to the server as clear text?

ToastyX
08-05-2002, 05:13 PM
Not shadowed? They should be...

/etc/proftpd/user has shadowed FTP passwords
/home/user/etc/shadow has shadowed e-mail passwords

Shyne
08-05-2002, 05:55 PM
Yes, on the server they get shadowed, but while you're typing them in the text fields they aren't. When you click submit they are still clear text.

netacore
08-05-2002, 06:04 PM
CPanel secure port: 2083
WHM secure port: 2087

jayjay
08-05-2002, 06:07 PM
Yes, on the server they get shadowed, but while you're typing them in the text fields they aren't. When you click submit they are still clear text.

Even if it was shadowed, you still could get screwed.

Shyne
08-05-2002, 08:30 PM
Originally posted by netacore
CPanel secure port: 2083
WHM secure port: 2087

When you say secure do you mean using SSL? As in https://domain:2083/ ?

If yes then that doesn't work.

ToastyX
08-05-2002, 09:06 PM
What do you mean that doesn't work?

You asked why FTP and e-mail passwords are not shadowed, but they are. If you use SSL, they are not passed to the server as clear text. I don't see what the problem is. :confused:

Also, FTP and POP3 are clear text protocols anyway, so I don't see what you're trying to get at.

Shyne
08-05-2002, 11:08 PM
Doesn't work meaning it displays a standard 404 that IE gives.

Shyne
08-05-2002, 11:09 PM
Originally posted by ToastyX
What do you mean that doesn't work?

You asked why FTP and e-mail passwords are not shadowed, but they are. If you use SSL, they are not passed to the server as clear text. I don't see what the problem is. :confused:

Also, FTP and POP3 are clear text protocols anyway, so I don't see what you're trying to get at.

I realize that FTP and POP3 are clear text passwords but while creating them in the control panel they are not passed as shadowed passwords.