Security issue! Read asap

[timechange]

As posted in WHT (the text is not mine):

+++

Any website that is hosted on CPanel, if you type /bandwidth/ after the domain, you can view the bandwidth stats for that server. These stats also display ALL the domains hosted on that server!

Imagine your competitor just loading up your /bandwidth/ page and viewing all your hosted sites, they contact them all offering a better deal!

What I did is put a .htaccess file in /usr/local/bandmin/htdocs that blocks anyone not coming from my IP address.

If you haven't already taken care of this problem I suggest you do ASAP.

[smartcomputers]

cool!

[jkeller]

This is a double post. I'll leave it becuase I can't merge into the security forum (and leave a pointer in this forum), but please post future additions to the thread over there.

The thread to use is CPanel security issue.

Thanks...