Go Back    Forum > Digital Publishing / Web Sites > Web Hosting

Reply
 
LinkBack Thread Tools
  #1  
02-13-2011, 07:52 PM
kpmedia's Avatar
kpmedia kpmedia is offline
Site Staff | Web Hosting, Photo
 
Join Date: Feb 2004
Posts: 4,311
Thanked 374 Times in 341 Posts
While setting up a new VPS today, I gave some space to a friend to host his domain. And just in case his wife or son wants to have their own site, I went ahead and set him up as a reseller. That way, he can monitor all of the accounts, but still give them their own cPanel separate from his.

So I set up a reseller domain, and two more domains:
  • Account 1 - his main site + reseller account
  • Account 2 - test/dummy account, to verify reseller was working
  • Account 3 - another test/dummy account, to verify reseller was working

Account 1 had the password PQ123vczAD
Account 2 had the password PQ456vczAD
Account 3 had the password PQ123vczAD

Notice that the passwords for account 1 and account 3 are the same. I was simply being lazy, and setting up a dummy account that I would re-delete a few minutes later seemed like a waste of keystrokes to change it to "789". And how typical that a moment of laziness would lead to problems!

This is what the drop-down should look like, when you're on one of the client domains:

cpanel-reseller-dropdown.jpg


However, when the password for the reseller matches the password for the client domain, the dropdown for 'Switch Account' will disappear, and cPanel will refresh directly into the client cPanel. You can't click back to the reseller account, and you basically have to logout and re-login to get to the reseller panel. That, of course, defeats the purpose of the dropdown -- convenient access to all accounts/domains.

The problem goes away when you use unique passwords.

This problem will most likely afflict VPS owners, who have undoubtedly subscribed to the VPS for their own sites. It may also affect any reseller that happens to have the same password as a client. To some degree, this really comes back to good password policy, and using strong unique passwords for everything.

Hope this helps.



- Did my advice help you? Then become a Premium Member and support this site.
- Please Like Us on Facebook | Follow Us on Twitter

- Need a good web host? Ask me for help! Get the shared, VPS, semi-dedicated, cloud, or reseller you need.
Reply With Quote
Someday, 12:01 PM
admin's Avatar
Ads / Sponsors
 
Join Date: ∞
Posts: 42
Thanks: ∞
Thanked 42 Times in 42 Posts
Reply




Similar Threads
Thread Thread Starter Forum Replies Last Post
Replacement screws for JVC VCR top panel? premiumcapture Video Hardware Repair 4 06-03-2014 02:12 AM
How to create additional FTP accounts in cPanel Brent Web Hosting 0 08-25-2013 08:41 PM
Kloxo control panel review, do you use it and what do you think of it? kpmedia Website and Server Troubleshooting 1 02-09-2013 08:08 PM
Client wants email address for domain she doesn't own! kpmedia Web Development, Design 3 11-08-2012 12:31 PM
IP banned by forum, can it be fixed? tony1337 General Discussion 4 11-04-2011 06:31 AM

Thread Tools



 
All times are GMT -5. The time now is 08:45 AM