Messages

It seems that new Kernel is not added in grub configuration. You can regenerate it using the following command:

Code Select Expand

grub2-mkconfig -o /boot/grub2/grub.cfg
You will need to reboot your server after executing the above command.

- Kailash

This should really affect their Exchange users and businesses depend on it.

cPanel informed its partners about a price increase which will come into effect from the 16th of December 2022. There is no official link for this price hike but you can refer the following external resource:

https://cloud7.news/hosting/cpanel-announces-price-hike-in-december/

PHP 7.4 is reached to end of life Today, 29th November 2022. That means there will be no official updates available for PHP 7.4 version. It's time to migrate to PHP 8.1.

https://www.php.net/supported-versions.php

Regards,
Kailash

[checkallsslcerts]

This is known issue in cPanel and as of now there is not direct solution to fix this.

As per cPanel support, their team is currently working to identify the exact cause of this issue, but they have identified that running  checkallsslcerts script at another time will result in a successful certificate installation.

As a workaround, you can set the following cron at different time:

30 8 * * * /usr/local/cpanel/bin/checkallsslcerts > /dev/null

- Kailash

So far there is no news or official announcement from cPanel. No news means it is good for us 

Yes, it can access other websites and data using PHP shell code. When you are hosting different website, it is recommended to use the operating system like CloudLinux with CageFS to restrict it. Unless you have such type of restriction, it is possible to access any data and even critical system files like passwd etc.

- Kailash

Hi WHD Members,

Before you post in web hosting offer section, kindly go through this post to avoid account restriction / ban:

• To post an offer for your hosting company, your profile email address must match with the company for which you are posting offfers
• You can post 1 offer in a week. If you frequently violate this, your account may lead to ban.
• You cannot hijack other member's thread to post your own offer.
• If we identify the false offer, your account can be restricted or ban.
• If you are looking for the premium account to post 3 times a week, you can contact us for the premium membership.

Regards,
WHD Admin

[bulk email verification]

When it comes to email marketing, it is essential that you have cleaned email list to about bounce, IP reputation issue and low delivery rate. Before using any email marketing service, you should clean bad email addresses from your lists.

There are several bulk email verification providers available to filter and remove such email addresses. For more details, you can visit top bulk email verification comparison chart.

- Kailash

This is a good list of seo automation tools providers. Such tools can help to boost your website ranking, SEO.

Critical vulnerability has been patched in popular SEO WordPress plugin All In One SEO. If you are using this plugin, you should upgrade to latest version as soon as possible.

Refer the following blog post for more information about this privilege escalation vulnerability:

https://www.webhostingdiscussion.net/blog/critical-vulnerability-all-in-one-seo-wordpres/

- Kailash

If your subdomain is redirecting to wrong URL, it is most likely related to your nginx configuration or .htaccess rule issue. You should review your .htaccess rule and nginx configuration. Also, it is recommended to activate free Let's Encrypt SSL so that you can use HTTPs for your subdomain.

- Kailash

[best WordPress hosting]

WordPress performance and website speed depend on many factors including WordPress Hosting environment, theme selection, plugins etc. The basic steps are as follow:

• Select the best WordPress hosting provider
• Do not select theme having too much options. Just find the suitable and lightweight theme
• Do not install too much plugins. Just install only necessary plugins
• Use caching plugin like Litespeed Cache (Lscache), W3 Total cache, WP Super cache etc.
• Use optimized image with lazy load

We have detailed KB of WordPress speed and performance optimization. You can refer our article WordPress Speed and Performance Optimization Tips.

[Workaround]

After recent cPanel update to cPanel v98.0 on CloudLinux 6 server, clamd is failing as follow:

Code Select Expand


/scripts/restartsrv_clamd --start
Service "clamd" is already stopped.
[...............]
Startup Log
/usr/local/cpanel/3rdparty/bin/clamd: error while loading shared libraries: libpcre2-8.so.0: cannot open shared object file: No such file or directory

clamd has failed. Contact your system administrator if the service does not automagically recover.


This is due to a missing shared library object (libpcre2-8.so.0) file that is required by ClamAV which you can confirm by this:

Code Select Expand

ldd /usr/local/cpanel/3rdparty/bin/clamd
[...............]
libz.so.1 => /lib64/libz.so.1 (0x00007f64ae2db000)
libpcre2-8.so.0 => not found
libm.so.6 => /lib64/libm.so.6 (0x00007f64ae056000)
[...............]

The libpcre2-8.so.0 shared library file is provided by the pcre2 package. However that package fails to be installed as a dependency when ClamAV is installed on the server.

Workaround

To get around this issue, you can manually install the missing package and then restart ClamD:

Code Select Expand

yum install pcre2

Code Select Expand

/scripts/restartsrv_clamd --start

[Forex VPS hosting]

I have never heard of them but you can refer our recommended Forex VPS hosting providers from our following blog post:

https://www.webhostingdiscussion.net/blog/forex-vps-hosting-platforms/

[Forex VPS Hosting]

Forex market is one of the largest financial market. Anyone can invest and trade in Forex market from anywhere. You just need a system which is connect during Forex market days/hours.

Usually it is preferred to find Forex VPS Hosting provider and get a VPS to run it as Forex Trading. We have comprehensive list of Forex VPS hosting provider in our blog. That can help you to select right provider for your Forex trading.

For more details, kindly refer our following blog:

Best Forex VPS Hosting for Uninterrupted Trading

Regards,
Kailash

Hi,

We have used AccuWeb Hosting Magento Hosting plans for several projects and they just work perfectly. You can give it a try.

- Kailash

Hi,

I have never heard of their name but I recommend AccuWeb Hosting Dedicated servers. They have wide range and global locations available for Dedicated servers.

- Kailash

It looks like company is no longer exists hence closing this thread.

- Kailash

Microsoft has released a security update to address a critical vulnerability in Windows Print Spooler. The vulnerability called "PrintNightmare," that was discovered last week, allows attackers to remotely execute malicious code with system privileges and install programs, make changes in the existing programs, and create new accounts with full user rights.

Fore more details, you can refer Microsoft's official website:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

It is strongly recommended to apply this security update in your desktop or server as soon as possible.

- Kailash

[4th of July Independence Day Sale! - Save 25% - Limited Time Offer]

Astra Premium WordPress theme is giving 25% discount on 4th July Independence day sale. This is limited time offer so it is right time to grab your 25% discount.

Fore more details, 4th of July Independence Day Sale! - Save 25% - Limited Time Offer

Astra WordPress theme offers three different editions and you can select as per your need.

- Kailahs

xpertDNS announced that they are closing the business on May 15, 2021. They announced as follow:

------------------------------------------
We want to inform you that we shall be closing our company Xpert Group Technologies, Inc from May 15, 2021 onwards. We are not taking any more orders and user data will be user data will be deleted on that date.

For the past 15 years that we have been in business it was our sincere effort to offer excellent customer service to our customers, and we hope we were successful in our endeavors.

We request you to contact us in case you need any explanation for any issue.

ACTION REQUIRED:

    DNS Zones will need to be migrated to another hosting provider. ( Zones can be exported from the DNS Manager using "Zone Export". )
    Domains no longer use our name servers.
    If you have a domain registered through us, you will need to transfer to a new registrar before May 15, 2021 as we will not be processing domain renewals.

Yours Sincerely,
------------------------------------------

If you are using xpertDNS, you will need to find the alternative DNS provider to avoid any service outage.

- Kailash

[@salesforce is experiencing a major disruption due to what we believe is a DNS issue causing our service to be inaccessible. We recognize the significant impact on our customers and are actively working on resolution.]

Salesforce faced a service outage on May 12, 2021 and it was confirmed by them on Twitter:

https://twitter.com/parkerharris/status/1392253069690343424

@salesforce is experiencing a major disruption due to what we believe is a DNS issue causing our service to be inaccessible. We recognize the significant impact on our customers and are actively working on resolution.

As per their status page, all services were restored and operational. For more information, you can refer the status:

https://status.salesforce.com

Regards,
Kailash

[ElegentThemes]

ElegentThemes is offering 20% OFF on WordPress Divi theme as a part of their "Anniversary Sale". This is a good time to buy this theme if you are looking for a multi-purpose WordPress premium theme.

[WHMCS 8.0 Release Candidate]

WHMCS has release WHMCS 8.0 in release candidate now. This should be available for production release within next few days. To check what's New in WHMCS, refer our blog post on WHMCS 8.0 Release Candidate.

Thanks you!

CVE-2020-1530 and CVE-2020-1537 – Windows Remote Access Elevation of Privilege Vulnerability

Microsoft has recently released a security update for all supported operating systems. An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how Windows Remote Access handles memory. A privilege elevation vulnerability (CVE-2020-1530 and CVE-2020-1537) affects all supported versions of Windows server so far.  This vulnerability exists when Windows Remote Access improperly handles memory or file operations. The exploit requires an attacker to have execution capabilities on the victim system. Systems hosting websites or with web-accessible services are particularly vulnerable.

For more information refer the following URL:

https://www.webhostingdiscussion.net/blog/cve-2020-1530-cve-2020-1537/

- Kailash

You install only script? or you also install theme / plugins / modules and etc?

We install plugins, themes, modules etc. as well.

- Kailash

Self-hosted tools are less effective unless you have large number of IPs without any reputation issue. That is the reason most of the users go for transactional email service.

- Kailash

It seems that you are referring to integrated WHM with WHMCS. It is very easy. You can refer their official documentation from the following URL:

https://docs.whmcs.com/CPanel/WHM

- Kailash

[CVE-2020-1350 Windows DNS Server Remote Code Execution Vulnerability]

Microsoft DNS servers are affected by critical security vulnerability. There is remote code execution vulnerability exists in all DNS servers used in Windows Server 2008 and higher operating system. Microsoft has released an update for Windows Server 2012, Windows Server 2012 R2, Windows server 2016 and Windows server 2019. They have released an update for end of life operating system Window Server 2008 R2 but it looks like it is available to those users who have opted their paid addon to continue use Windows Server 2008 R2.

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as DNS servers are at risk from this vulnerability.

For more information, refer CVE-2020-1350 Windows DNS Server Remote Code Execution Vulnerability.

- Kailash