hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Software and Control Panels : How to suspend user without suspendind cpanel account
Reply

Forum Jump

How to suspend user without suspendind cpanel account

Reply Post New Thread In Hosting Software and Control Panels Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 09-06-2011, 08:22 AM
Vans Vans is offline
Junior Guru
 
Join Date: Sep 2004
Posts: 234

How to suspend user without suspendind cpanel account


Hi,

Anyone here know how it's possible to suspend a website on WHM in keeping the customer to use his cpanel and ftp access ?!



Thanks



Sponsored Links
  #2  
Old 09-06-2011, 08:30 AM
daimon666 daimon666 is offline
WHT Addict
 
Join Date: Feb 2010
Posts: 164
Can you explain the circumstances why you need to do this? Not being noisy but help come up with an answer for you.

__________________
█ DMB SOLUTIONS LTD
DMB Hosting - UK Web hosting and VPS Servers
█ All owned hardware Chicago and UK

  #3  
Old 09-06-2011, 08:39 AM
sysguru sysguru is offline
Temporarily Suspended
 
Join Date: Jan 2011
Posts: 160
simple rename index.html, this will be enough to take his site down.

Sponsored Links
  #4  
Old 09-06-2011, 09:21 AM
Patrick Patrick is offline
Security Ninja
 
Join Date: Mar 2003
Location: Canada
Posts: 8,606
1. chmod 000 public_html
2. chown root:root public_html

That will prevent files under public_html from being served, and prevent them from enabling it again.

__________________
Patrick William | Rack911 Research Labs | Software Security Auditing
250+ Vulnerabilities Found - Get a quote on a professional audit @ Rack911.com

www.HostingSecList.com - Security notices for the hosting community.

  #5  
Old 09-06-2011, 10:20 AM
anythingss anythingss is offline
Junior Guru Wannabe
 
Join Date: Oct 2010
Posts: 64
every option i could think of (including the ones mentioned above) allow the user to un-suspend themselves if they wanted.
which brings me to daimon666's question

  #6  
Old 09-06-2011, 10:41 AM
dhcart dhcart is offline
Web Hosting Master
 
Join Date: Dec 2005
Posts: 2,508
You can disable a file or directory by changing it's permission.

__________________
█ █ █ DHCart - Domain and Hosting shopping cart with Domain availability checking and Whois lookup.
█ █ █ www.dhcart.com Demo

  #7  
Old 09-06-2011, 10:44 AM
KMyers KMyers is offline
Technical Nutcase
 
Join Date: Mar 2009
Location: Miami, Florida
Posts: 18,503
Hello,
You could try creating the following .htaccess file containing. It would cripple anything in the webroot. This however would still allow any outbound scripts to work.

Redirect 301 / http://domain.com/cgi-sys/suspendedpage.cgi

__________________
Keith M.- CTO
VPS | Cloud Resource Pools | Dedicated Servers | Colocation
99.999% Uptime | 24x7x365 Support | onApp Powered Cloud | Global Data Centers
Big Brain Global Networks | A Division of Big Brain, LLC

  #8  
Old 09-06-2011, 11:44 AM
Vans Vans is offline
Junior Guru
 
Join Date: Sep 2004
Posts: 234
Sure,

I have a customer that his website overload my server at 600% due at a script php problem... I want allow him to fix the problem to get his website back online. I have suspended his account because if the account is active the entire server crash.. so what i can do for allow the customer to make the change of his website without see his website online.

Thanks for your answer

  #9  
Old 09-06-2011, 12:10 PM
mSuleman mSuleman is offline
Web Hosting Guru
 
Join Date: Mar 2010
Posts: 347
create .htaccess file and past the following code.

single ip address access

order deny,allow
deny from all
allow from 192.168.1.1


http://www.yourdomain.com/.htaccess

multiple ip address access

order deny,allow
deny from all
allow from 192.168.1.1
allow from 192.168.1.2
allow from 192.168.1.3


Authorize the ip for your client only he will be able to access site without any problem no one else.

__________________
HostingOwner.com Shared and Reseller Hosting
cPanel/WHM, Softaculous - Premium Network - 99.9% Uptime
Managed, Unmanaged Premium VPS Hosting by vpsCrew.com



  #10  
Old 09-06-2011, 12:19 PM
twhiting9275 twhiting9275 is offline
Just me
 
Join Date: Sep 2002
Location: Among the corn
Posts: 10,413
Quote:
Originally Posted by anythingss View Post
every option i could think of (including the ones mentioned above) allow the user to un-suspend themselves if they wanted.
No they don't (or they shouldn't).
If you change ownership of public_html to root:root, nobody should be able to change that back.

.htaccess files will be easily removed by the user, theoretically.

If you want to REALLY suspend things (without suspending the account):
Code:
chown root:root /home/username
chmod 000 /home/username
This way, even if they can login (they can), they can't change anything back to themselves, or shouldn't be able to.

  #11  
Old 09-06-2011, 09:11 PM
anythingss anythingss is offline
Junior Guru Wannabe
 
Join Date: Oct 2010
Posts: 64
Quote:
Originally Posted by linux-tech View Post
No they don't (or they shouldn't).
If you change ownership of public_html to root:root, nobody should be able to change that back.

.htaccess files will be easily removed by the user, theoretically.

If you want to REALLY suspend things (without suspending the account):
Code:
chown root:root /home/username
chmod 000 /home/username
This way, even if they can login (they can), they can't change anything back to themselves, or shouldn't be able to.

proftpd running without pam (such as the config cpanel does) allows you to do many things to override file permissions, regardless of their ownership or permissions.

#touch testfile
#chmod 000 testfile
#chown root:root testfile

ftp> Command: DELE testfile
ftp> Response: 250 DELE command successful

#ls testfile
ls: cannot access testfile: No such file or directory


edit: i think its the lack of pam that allows it to happen, not sure tho.


Last edited by anythingss; 09-06-2011 at 09:16 PM.
  #12  
Old 09-06-2011, 09:22 PM
twhiting9275 twhiting9275 is offline
Just me
 
Join Date: Sep 2002
Location: Among the corn
Posts: 10,413
all the more reason to switch from proftpd.
If you follow the advice about chmoding /home/user and changing ownership, the user has nowhere to login to, even with ftp programs

Reply

Similar Threads
Thread Thread Starter Forum Replies Last Post
cPanel : Suspend account w/o killing cPanel Access KMyers Reseller Hosting 9 05-04-2009 09:10 PM
automatic suspend account in cpanel mirheydari Web Hosting 15 07-18-2008 03:27 AM
Problem with suspend account cpanel robocap Hosting Security and Technology 1 07-19-2007 05:41 PM
cPanel Suspendind an Entire Package? lindmar Running a Web Hosting Business 1 12-09-2006 12:10 PM
[cpanel] Suspend account suspend email? technicalws Web Hosting 4 03-25-2003 12:27 PM

Related posts from TheWhir.com
Title Type Date Posted
What's New at cPanel: IPv6 and 1:1 NAT Support Web Hosting News 2013-10-01 18:12:07
Hosting Control Panel cPanel & WHM 11.34 Release Hits Stable Tier Web Hosting News 2012-11-12 17:04:57
cPanel Releases cPanel, WHM 11.34 with New User Interface Web Hosting News 2012-10-16 13:09:49
cPanel Conference 2012: Branding and How to Do it Better with Felipe Gasper Web Hosting News 2012-10-09 18:00:02
Control Panel cPanel Invests in WHMCS, Plans Integration with Billing Software Web Hosting News 2012-07-23 16:57:50


Tags
cpanel, suspend, whm

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?