Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Categories

In this Discussion

› › Is aaPanel secure? I heard it has vulnerabilities in it.
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Is aaPanel secure? I heard it has vulnerabilities in it.

jarjar Patron Provider, Top Host, Veteran
edited September 2017 in General

Just wondering. Anyone know if it's secure? Someone told me it was full of vulnerabilities but I don't know.

Since you want the entire front page to be filled with posts about your panel @aapanel_ken :)

Comments

  • WSSWSS Member

    Well I thought it worked on CentOS, but I am told it works on Ubuntu and Debian. There must be shortcuts somewhere!!

    Also, it's being translated from the original Chinese sources, so it probably peepees in your coke.

  • aapanel_kenaapanel_ken Member

    @jarland said:
    Just wondering. Anyone know if it's secure? Someone told me it was full of vulnerabilities but I don't know.

    Since you want the entire front page to be filled with posts about your panel @aapanel_ken :)

    You can check the reply if you think our product or website is not secure, why we use "https". I am not sure how you get the rumor, but you check by yourself.

    We want to promote our product to international market, that why I post.

  • NeoonNeoon Community Contributor, Veteran
    edited September 2017

    Every software has vulnerabilities, there is not such a thing secure.

    But if he keeps ignoring those or does not implement stuff to reduce the risks, it could end bad.

  • sibapersibaper Member

    aapanel_ken said: You can check the reply if you think our product or website is not secure, why we use "https". I am not sure how you get the rumor, but you check by yourself.

    so by using https your website automagically secure? please tell me more, I'm listening

  • aapanel_kenaapanel_ken Member

    @sibaper said:

    aapanel_ken said: You can check the reply if you think our product or website is not secure, why we use "https". I am not sure how you get the rumor, but you check by yourself.

    so by using https your website automagically secure? please tell me more, I'm listening

    I mean we try our best to make a secure environment, that also why we want to make it be an open source project.

  • WSSWSS Member

    @jarland I feel pretty secure..

  • jarjar Patron Provider, Top Host, Veteran

    aapanel_ken said: You can check the reply if you think our product or website is not secure, why we use "https".

    First... LOL

    aapanel_ken said: I am not sure how you get the rumor, but you check by yourself.

    What I'm trying to say is that if you keep spamming LET I'm going to spread nasty rumors about your control panel, and frankly they'll probably be true because you think SSL makes web applications secure.

    Thanked by 2BharatB sayem314
  • sinsin Member

    Hey @jarland - when does the next version of aapanel come out? Tried using the lowendtalk search button but couldn't find any info at all about aapanel

    Thanked by 1jar
  • WSSWSS Member
    edited September 2017

    I dunno it just doesn't seem to work..

    +----------------------------------------------------------------------
| aaPanel 1.0 beta FOR Ubuntu/Debian
+----------------------------------------------------------------------
| Copyright © 2015-2017 AA-SOFT(https://www.aapanel.cameltowing.com) All rights reserved.
+----------------------------------------------------------------------
| The WebPanel URL will be http://SERVER_IP:8888 when installed.
+----------------------------------------------------------------------

Error: Please run the script with root privileges on Ubuntu, for example: sudo bash install.sh

    I mean what the shit

  • didtavdidtav Member

    @aapanel_ken said:
    You can check the reply if you think our product or website is not secure, why we use "https".

    You have no idea how this world works, kid.

  • pacopaco Member

    @sibaper said:

    aapanel_ken said: You can check the reply if you think our product or website is not secure, why we use "https". I am not sure how you get the rumor, but you check by yourself.

    so by using https your website automagically secure? please tell me more, I'm listening

    You like magic? I like magic!

    Thanked by 1WSS
  • WSSWSS Member

    SO SAYETH THE WIZARD!

  • hwthwt Member
    edited September 2017

    You like magic? I like magic!

    I know how to make money magically disappear.. heard it's a popular trick.

  • aapanel_kenaapanel_ken Member

    @sin said:
    Hey @jarland - when does the next version of aapanel come out? Tried using the lowendtalk search button but couldn't find any info at all about aapanel

    You can view my post, or visit www.aapanel.com

  • cubedatacubedata Member, Patron Provider

    @aapanel_ken said:

    @sin said:
    Hey @jarland - when does the next version of aapanel come out? Tried using the lowendtalk search button but couldn't find any info at all about aapanel

    You can view my post, or visit www.aapanel.com

    ah fair warning he likely was mocking you. as getting the attention of jarland is never good.

  • WSSWSS Member

    @cubedata said:
    ah fair warning he likely was mocking you. as getting the attention of jarland is never good.

    I dunno. He's a cuddler. I like that.

  • aapanel_kenaapanel_ken Member

    @WSS said:
    I dunno it just doesn't seem to work..

    +----------------------------------------------------------------------
| aaPanel 1.0 beta FOR Ubuntu/Debian
+----------------------------------------------------------------------
| Copyright © 2015-2017 AA-SOFT(https://www.aapanel.cameltowing.com) All rights reserved.
+----------------------------------------------------------------------
| The WebPanel URL will be http://SERVER_IP:8888 when installed.
+----------------------------------------------------------------------

Error: Please run the script with root privileges on Ubuntu, for example: sudo bash install.sh

    I mean what the shit

    copy the URL into your browser, and use the account and password to login.

    And you can try to use " wget -O install.sh http://www.aapanel.com/script/install-ubuntu-en.sh && sudo bash install.sh "

    Last time I had sent you that for Centos,Fedora,Debian. this is for Ubuntu.

  • WSSWSS Member

    I did copy and used account and password to login. I am not using Ubuntu though!?

  • aapanel_kenaapanel_ken Member

    @cubedata said:

    @aapanel_ken said:

    @sin said:
    Hey @jarland - when does the next version of aapanel come out? Tried using the lowendtalk search button but couldn't find any info at all about aapanel

    You can view my post, or visit www.aapanel.com

    ah fair warning he likely was mocking you. as getting the attention of jarland is never good.

    I dont mind, I just want to let users know what is aapanel.

  • SonOfAMotherlessGoatSonOfAMotherlessGoat Member

    My camel broke down, anyone know of a good towing company?

    Thanked by 1WSS
  • jackbjackb Member, Host Rep
    edited September 2017

    @aapanel_ken said:

    @WSS said:
    I dunno it just doesn't seem to work..

    +----------------------------------------------------------------------
| aaPanel 1.0 beta FOR Ubuntu/Debian
+----------------------------------------------------------------------
| Copyright © 2015-2017 AA-SOFT(https://www.aapanel.cameltowing.com) All rights reserved.
+----------------------------------------------------------------------
| The WebPanel URL will be http://SERVER_IP:8888 when installed.
+----------------------------------------------------------------------

Error: Please run the script with root privileges on Ubuntu, for example: sudo bash install.sh

    I mean what the shit

    copy the URL into your browser, and use the account and password to login.

    And you can try to use " wget -O install.sh http://www.aapanel.com/script/install-ubuntu-en.sh && sudo bash install.sh "

    Last time I had sent you that for Centos,Fedora,Debian. this is for Ubuntu.

    Ok there's security vulnerability #1, installation recommendation is to download a script over http and execute it as root without validating it, and #2 by default panel is served over http.

  • WSSWSS Member

    @SonOfAMotherlessGoat said:
    My camel broke down, anyone know of a good towing company?

    I'm afraid we're flat out. No humps available.

  • pacopaco Member

    @WSS said:

    @SonOfAMotherlessGoat said:
    My camel broke down, anyone know of a good towing company?

    I'm afraid we're flat out. No humps available.

    Can probably help if your camel has trouble walking though

  • jarjar Patron Provider, Top Host, Veteran

    @aapanel_ken said:

    @cubedata said:

    @aapanel_ken said:

    @sin said:
    Hey @jarland - when does the next version of aapanel come out? Tried using the lowendtalk search button but couldn't find any info at all about aapanel

    You can view my post, or visit www.aapanel.com

    ah fair warning he likely was mocking you. as getting the attention of jarland is never good.

    I dont mind, I just want to let users know what is aapanel.

    Well you've annoyed me and several others, and key actions made your intent very apparent. From now on you are limited to that one single thread for aapanel. If you want to open another, you'll need to get moderator or admin approval.

    If I catch you bumping that thread again just to keep it on page one, with no real content, you'll be removed and no longer allowed to participate.

    We're a very relaxed community, but have a deep hatred for those who would seek to spam us.

This discussion has been closed.