Hello,
A day ago, i have problem to access file manager. And i posted it here https://forums.cyberpanel.net/discussion/210/cannot-login-to-file-manager#latest
The solution for my case is to remove deny 0.0.0.0/0
. But, in this post https://forums.cyberpanel.net/discussion/171/some-donts-after-installing-cyberpanel
We know that removing deny 0.0.0.0/0
will make some trouble in security. I am trying to remove deny 0.0.0.0/0
, and tried to create normal user, then i tried to access file manager which owned by admin
and yes it accessible. It is mean, a user can see and browse the other site in same server using file manager.
So, why i write this post on bug category ? Because
deny 0.0.0.0/0
deny 0.0.0.0/0
even if i don't change anything on vhost conf.Thank you
Comments
Does your domain use a reverse proxy?
Nope. I don't configure reverse proxy. With default installation, it is working. But, i don't know why, a day ago it is just not working.
To solve this problem, i will reinstall my panel
Hello,
I reinstall my CyberPanel, and use same configuration like before, and i use default configuration with
deny 0.0.0.0/0
, it is working well, my file manager can be accessed.But, i tried to :
1. Create normal user (just say user2)
2. Create website which owned by normal user (For example, the domain is domain.com, owned by user2)
3. User 2 login to his CyberPanel dashboard
4. User 2 try to access file manager other user (for example admin), and yes, it is accessible
If a user could see other user's file, it is mean, CyberPanel is not ready yet to be used for shared hosting purpose
So, just test it with your environment, and if you have same case with me, it is mean there is bug on file manager. Hope it wil be fixed soon.
Thank you
This issue is now resolved in CyberPanel 1.6.3. You can upgrade using this guide: https://forums.cyberpanel.net/discussion/85/how-to-manually-upgrade-downgrade-cyberpanel
CyberPanel
Blog
Thank you for your update