Vesta Control Panel - Forum

imperio wrote: ↑

Wed Oct 17, 2018 7:11 pm

Now we are working under fix

Errr, what about all the passwords that were sent in something similar to plaintext to your servers? This reply is honestly not going to cut it.

I do think the only way to get their attention is through Github, so I did post about the issue in the on-going thread on their Github:
https://github.com/serghey-rodin/vesta/issues/1715

This seems like some dirty stuff. I basically see three options 1. We get an explanation from the developers (considering how inactive they are, highly unlikely) That's very unlikely indeed and especially since they did know about this months ago. Who knows, maybe someone in the Vesta team implante...

codename="$codename:$(echo $vpass:$servername | base64)" which is not in the older version. as we can see this adds the servername and admin password ($vpass) encoded as base64 string to a variable named codename. so I looked up what is done with that var in the process and found this # Sending ins...

Anyone?

Hellos guys, I wonder if anyone can give me some advice, or place where I should start (since online security has so many information that I dont know where to start) I use vesta+ubuntu and then I have a web page with Prestashop plataform, sometimes I get some kind of DDOS, people or bots click at ...

As CentOS lacks official support for http/2 on Apache due to an old version being available in the repos and that Nginx performs better in general, I've been thinking about swapping out the webserver running on my current VestaCP installation. I know that this generarily require a reinstall of Vesta...

VestaCP is great but since we have some problems recently I think we should fix some problems, for example on Centos 7 the apache version installed is 2.4.6 from 2014, this is a really old version, this version is installed directly from vesta repository. Why don't you updated for one of the lastes...