How to remove phpinfo in Status

[monoblue]

Hi there, I was wondering is there some way to remove PHPINFO link on the status of servers.

[MACscr]

just remove the smarty variables from that template. I forget the name of it, but its pretty obvious.

[monoblue]

Thanks, I didn't have on mind that, anyway it is serverstatus.tpl

 

P.S. For adding aditional protocols, for example SSH, IMAP, and etc. are there some variables by default so I can call it and put in that template, so they could show up, are they up or down. Or I need to made them? For example $server.statusimap and etc...

[MACscr]

you should make a smarty plugin to do that, might even be one that arleady exists. Check out google and if you find it, just throw it in lib/Smarty/plugins/

[YodaCows]

Has anyone found any of these extra plugins?

[Matt]

No need for any extra plugins, you can just add your own PHP code to the template files in between {php} and {/php} tags to ping the required port and check if its online.

 

Matt

[plattapuss]

Just removing the cell from the template is not good enough. Anyone who knows WHM completesolution could possible still figure out the link to your status file.

 

Be sure to edit ./status/index.php and remove the following code:

 

if ($action == "phpinfo") {
phpinfo();
}

 

Now it is not possible to get a phpinfo listing.

[Matt]

Not really. There's no way they could find out where you have your status folder uploaded once the PHP Info link has been removed. Most people would not have it directly above the WHMCS directory.

 

Matt

[plattapuss]

hehe. Guess I should move it then.

[Utrust-Hosting.com]

I dont see why you would want to remove this if i was looking for a host and i was going to have forums, portals ect... i would want to see this to make sure thay have stuff installed like GD module and pspell some forums need some modules to run and php info allows clients to see if your servers can support there software.

[bear]

Mainly because it shows exactly what's installed at a glance, including path info. Though your server should be secure enough to handle someone having this info, it makes it easier for a "bad guy" to see if you're exploitable. If someone needs to know if we can support their software, let them ask us.

[VehiCROS]

No need for any extra plugins, you can just add your own PHP code to the template files in between {php} and {/php} tags to ping the required port and check if its online.

 

Matt

 

Very smart thinking Matt, so here is what I replaced it with.

 

title = SFTP

 

 

{foreach key=num item=server from=$servers} {get_port_status num="$num" port="22"}

 

{foreachelse} {/foreach}

 

Now the SFTP port status is displayed

[VehiCROS]

No need for any extra plugins, you can just add your own PHP code to the template files in between {php} and {/php} tags to ping the required port and check if its online.

 

Matt

 

I just tried replacing PHP Info with SFTP status.

 

At first it was displaying all green check boxes. Then just minutes later (and a few page refreshes) the status has turned to red.

I would expect them to be red anyway, and I was really surprised that the status indicators were all green. So back to the drawing board, so what else can I put there..? ?

Edited December 16, 2011 by VehiCROS