• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Concern about alias of other hosted account.

A

AlexisS

Guest
Hi,

I'm concerned about an operation I was able to perform inside Plesk 10.

I've set up two different account. One we'll call plane.com, the other shoe.com
Both accounts are owned by different users ("Customers inside Plesk")

On my shoe.com Control Panel, inside Aliases, I've entered small.plane.com
And it worked ! Now if I visit the URL small.plane.com (That the user has normally no right to it) I see the content hosted inside the normal shoe.com account.

How is that possible ? That's a major fail for the security of all account.
Is that evitable ?

Regards,
 
Back
Top