Open Source Control Panel Closest to cPanel?

Offshore_Solutions

Which open source control panel looks and feels the most like cPanel? My guess is OVI Panel is closest to cPanel but is it open source because I see they charge $5/month but also offer a free version? (See https://www.ovipanel.in/ )

Are PHP control panels less secure and why?
Partial list below:

1/2. Cyber Panel - Popular on LET - https://cyberpanel.net/

1. Ajenti - http://ajenti.org/

2. Kloxo-Mr - PHP5

3. Webmin (lite version of Virtualmin)

4. Sentora - http://Sentora.org

5. CentOS Web Panel

6. Virtualmin

7. ISPConfig - https://www.ispconfig.org/

8. Vesta - https://vestacp.com/

9. BlueOnyx - https://www.blueonyx.it/

10. zPanel - (earlier outdated version of Sentora)

11. Froxlor

12. Ovi Panel (Free Version) https://www.ovipanel.in/

13. AAPanel - Not PHP - https://www.aapanel.com/feature.html

14. Hestia Panel - https://www.hestiacp.com/

15. i-MSCP - https://i-mscp.net/

16. GNU Panel -https://wp.geeklab.com.ar/gl/gnupanel-en/

17. ZesleCP - https://zeslecp.com/

18. Cloudron - https://www.cloudron.io/

19. SolidCP

20. Website Panel - https://www.websitepanel.net/

Boogeyman

Is this some sort of marketing for Ovipanel as you only gave backlinks to that? Also you joined March 12. Also the panel you are talking about is Sentora fork which uses GPL3 licensing and Ovipanel never published it's code and made it proprietary which breaks GPL3 licensing rule.

HostXNow

Haha not long after I posted this https://www.webhostingtalk.com/showthread.php?t=1840147&page=2&p=10296662#post10296662

Coincidence.

Offshore_Solutions

3) CentOS Web Panel> @Boogeyman said:

Is this some sort of marketing for Ovipanel as you only gave backlinks to that? Also you joined March 12. Also the panel you are talking about is Sentora fork which uses GPL3 licensing and Ovipanel never published it's code and made it proprietary which breaks GPL3 licensing rule.

No, I'm specific about OVI panel because maybe it doesn't belong on this list and asking if that's the case.
If you download the free version of OVI Panel, you don't have access to the source code? Thus not open source?

I'm slowly editing my post to add more links to other Panels while driving in my car.

deank

Smells.

Boogeyman

@HostXNow said: Coincidence.

Nope. As cPanel increasing price drastically everyone that are capable to make a panel wants to enter this market. Also this has related market like sysadmin work, etc. And some startups wants to use this opportunity.

vero

@Offshore_Solutions said:
I'm slowly editing my post to add more links to other Panels while driving in my car.

The moment you disclose your identity you will be reported to police.

Of course not, but this is unresponsible.

Boogeyman

@Offshore_Solutions said: while driving in my car.

Eh, that's illegal and be sure to post an update if you met an accident.

niceboy

CentOS Web Panel seems to be the closest in looks. But, there dev/support seems to be pathetic.

Do take a look at HestiaCP which is very actively developed and supported.

Offshore_Solutions

@niceboy said:
CentOS Web Panel seems to be the closest in looks. But, there dev/support seems to be pathetic.

Do take a look at HestiaCP which is very actively developed and supported.

Is HestiaCP open source and does it have a similar look and feel to cPanel?

niceboy

@Offshore_Solutions said:

Do take a look at HestiaCP which is very actively developed and supported.

Is HestiaCP open source and does it have a similar look and feel to cPanel?

1. Yes. It is open source.
2. No. It does not look like CPanel(Looks like VestaCP that you mentioned in your list).

skorupion

@Boogeyman said: Is this some sort of marketing for Ovipanel as you only gave backlinks to that? Also you joined March 12. Also the panel you are talking about is Sentora fork which uses GPL3 licensing and Ovipanel never published it's code and made it proprietary which breaks GPL3 licensing rule.

Sue.

@Offshore_Solutions said: Are PHP control panels less secure and why?

PHP has a lot of exploits that could be used to compromise a panel(especially the older versions), there are panels that are secure that are written in PHP, but they are paid, close source, and have a team of devs constantly patching it. But more and more panels use newer versions of PHP and are more secure, btw there is no such thing as perfectly secure Control PAnel, there always will be an exploit.

I personally use Cyberpanel, there is a review stating it has a lot of exploits that people provide, but if ya actually read the article, you will see that cyberpanel worked with them to patch those exploits up, and there is now Cyberpanel Cloud, which lets you have a paid version of Cyberpanel to have more perks, like support via live chat, WordPress manager, etc... And it's written in Js mostly.
And because Cyberpanel cloud is paid that means you have a dev that's working on it 24/7, oh and Ctyberpanel that you are able to install on a Dedi or VPS will be forever open source.

MeAtExampleDotCom

@Offshore_Solutions said:
Are PHP control panels less secure and why?

Less secure than what?

Modern PHP in the hands of competent developers has no need to be less secure than any other modern language & framework.

PHP earned a reputation (and earned it well) for being the source of insecure and otherwise unreliable scripts some time ago, for a few reasons including:

1. Easy availability on shared hosts coupled with the simplicity of getting simple examples going lowered the entry bar low enough that there was a lot of simple naive insecure code out there getting copied and pasted by people who did not yet have the experience to know any better. There was terrible code out there written as perl-via-CGI too, but the great-to-crap ratio for PHP was massively skewed towards the crap.
2. Not actually the fault of PHP, but it caught the blame anyway: many people installing PHP apps like image galleries & forums but failing to keep them uptodate so even though secured versions existed the old broken versions were still out there in great numbers. Again, not a PHP specific problem, but one that was larger in that realm due to point 1.
3. In the name of ease of use (part of what lowered the entry bar) PHP as far as 5.x (as far as I ever used it or supported it in hosting environments myself) has some massively insecure default settings. I'm told this improved greatly from 6.x onwards.
4. Early versions came from a ramshackle glueing together of someone's personal project scripts and developed very organically (like a fungus or a cancer) so the standard library was a mess that made it easy to accidentally create incorrect code with security issues and other nasty edge cases. Big steps were being made to fix this around the 4.x/5.x days, so I assume things are much better now.
5. The way people were taught to use it in those early days (using those insecure defaults, turning on the insecure options when they were no longer default, little thought to good error handling & sensitive data storage leading to credential leaks, etc) and sometimes still around the time I stopped paying attention, lead to poorly thought-out, flaky, poorly supported, spaghetti code, exacerbating the other problems.
6. Breaking changes between major versions of PHP caused many projects to be abandoned, unavoidable with the design goal of fixing the more serious problems of earlier versions, but they are still out there with unfixed security issues.

It probably isn't fair to base an opinion of PHP on how things were a decade and a half ago or before, though there is still a lot of bad code out there (some of it new) but you can say that of other systems too.

Boogeyman

@skorupion said: Sue.

Jarland or cociu?

skorupion

@Boogeyman said: Jarland or cociu?

None and both.

Boogeyman

@skorupion said: it's written in Js, and Typescript mostly.

Nah the great Python from amazon.

vero

@MeAtExampleDotCom said:
insecure default settings. I'm told this improved greatly from 6.x onwards.

There was no PHP 6.

skorupion

@Boogeyman said: Nah the great Python from amazon.

Not them using more CSS than python

And no Typescript must have confused myself with some other project on Github

MeAtExampleDotCom

@vero said:
There was no PHP 6.

Well, there was but it was never released as a stable product. Enough of it was rolled back and redone that they chose to skip a version number, as the number of books & articles referencing PHP6 but meaning the abandoned design would have caused a lot of confusion.

Boogeyman

As I worked in CyberPanel project for sometime I clearly understand how things work in that project. Inputs are passed via JS to an endpoint later to be processed by Python. The backend is completely Python and for frontend HTML, CSS, JS. And installers are written in shell-scripting.

skorupion

@MeAtExampleDotCom said: It probably isn't fair to base an opinion of PHP on how things were a decade and a half ago or before, though there is still a lot of bad code out there (some of it new) but you can say that of other systems too.

Also PHP is used in quickly made scripts, which don't have security in mind whatsoever, thus people weren't even making them secure, and to this day it's done, and makes a lot of quickly assembled scripts from garbage that give PHP more of that insecure smell.

MeAtExampleDotCom

@skorupion said:
Not them using more CSS than python

Would be interesting to see an attempt to write panel in pure CSS...

skorupion

@Boogeyman said: As I worked in CyberPanel project for sometime I clearly understand how things work in that project. Inputs are passed via JS to an endpoint later to be processed by Python. The backend is completely Python and for frontend HTML, CSS, JS. And installers are written in shell-scripting.

So python does most of the work, and javascript is just more commonly used, so we technically are both right.

Boogeyman

@MeAtExampleDotCom said: Would be interesting to see an attempt to write panel in pure CSS...

Missing !important

@skorupion said: so we technically are both right.

Yeah

vero

@MeAtExampleDotCom said:
Well, there was but it was never released as a stable product.

Agree, that's far more correct statement than mine.

Offshore_Solutions

@Boogeyman said:
As I worked in CyberPanel project for sometime I clearly understand how things work in that project. Inputs are passed via JS to an endpoint later to be processed by Python. The backend is completely Python and for frontend HTML, CSS, JS. And installers are written in shell-scripting.

Is Cyber Panel the only open source control panel you're aware of not written in PHP?

In your opinion is Cyber Panel more secure because of the presumably less hacks for Python and more hackers proficient in PHP?
(Like how hackers focus more on PCs instead of Apples due to the sheer numbers of PCs).

Does it look and feel much like CPanel?

skorupion

@Offshore_Solutions said: Is Cyber Panel the only open source control panel you're aware of not written in PHP?

No. There is also aapanel (which i have used), and many more...

@Offshore_Solutions said: In your opinion is Cyber Panel more secure because of the presumably less hacks for Python and more hackers proficient in PHP?
(Like how hackers focus more on PCs instead of Apples due to the sheer numbers of PCs).

Not really, as I said PHP has a stigma of being insecure because of abandoned projects and people who need quick scripts made in 2 mins that don't have security in mind at all. And not only that but js and node.js and any other framework based on js is WAY faster than PHP

@Offshore_Solutions said: Does it look and feel much like CPanel?

It pretty much has the same functions, I have used a lot of panels (incl. cPanel, DA, etc...)
And it's mostly the layout that changes but it's very easy to get used to.
And don't forget that you will never receive the same amount of security and updates for nothing compared to 10 bucks p/m

skorupion

Btw i have used Cyberpanel for a while and had a lot of help from people here on LET, and their discord, and now I know many ins and outs of it and am happy to help set it up. But I probably will never achieve the same level of knowingness as @Boogeyman because he has literally helped make cyberpanel what it is.

kidrock

@skorupion said:
No. There is also aapanel (which i have used), and many more...

I am also currently trying aapanel and found it's easy to use due to simple gui and 1 click installs.
As you are using cyberpanel too, can nginx be installed on it? And how is cyberpanel compared to aapanel for ease of use?

Boogeyman

@Offshore_Solutions said: Is Cyber Panel the only open source control panel you're aware of not written in PHP?

There are other panels in the market that is not written with PHP. Look for any comparison site, you will find out.

@Offshore_Solutions said: presumably less hacks for Python and more hackers proficient in PHP?

Bad practices can always lead to vulnerability whatever language it is.

@Offshore_Solutions said: Does it look and feel much like CPanel?

It doesn't look like cPanel but it is somewhat like cPanel with it's features. And in upcoming releases it will have more good features.

@kidrock said: cyberpanel too, can nginx be installed on it?

No.

Offshore_Solutions

@Boogeyman said:

@kidrock said: cyberpanel too, can nginx be installed on it?

No.

Please, from the best of your knowledge, can you compare the pros & cons of AAPanel vs. Cyber Panel?

Do you feel Cyber Panel is more secure?

Does AApanel also use Python and Javascript similarly?

How much/month is Cyberpanel Cloud & is it more secure than the non-cloud version?

Offshore_Solutions

@kidrock said: I am also currently trying aapanel and found it's easy to use...

@kidrock, does AAPanel look and feel anything like cPanel? How important is nginx for you and could you settle for Lightspeed?

skorupion

@kidrock said: As you are using cyberpanel too, can nginx be installed on it?

No, you need to use litespeed (whichever version you choose the open one or paid one.)

@kidrock said: And how is cyberpanel compared to aapanel for ease of use?

It honestly seems more up-to-date with the GUI. It has one-click install WordPress, Joomla, Git, Presta shop, etc... And the rest are available via docker. It has the same auto issue SSL from Let's encrypt. And I think it actually may have an easier GUI, but one thing is different and that is that their forum is less active, ie with aapanel it will take 24 hr to answer your post on the forum, while on cyberpanel it may take a week or two. But I am yet to need to post on the forum, as most things can be solved on their discord with community support.

And cyberpanel has account management where you can create more than one account, with options for resellers and end users.

skorupion

@Offshore_Solutions said: @kidrock, does AAPanel look and feel anything like cPanel? How important is nginx for you and could you settle for Lightspeed?

NOT even close, aapanel is meant for personal use where you can only have one account.

seriesn

Open source but not free and definitely quality, ApisCp @nem

elliotc

@kidrock said: cyberpanel too, can nginx be installed on it?

Cyberpanel is developed by Litespeed corp itself. I do not think they will add nginx or any other web server

skorupion

@elliotc said: Cyberpanel is developed by Litespeed corp itself. I do not think they will add nginx or any other web server

I don't think so. It just seems like Litespeed might be donating some money to Cyberpanel, but that's it

elliotc

@skorupion said:

@elliotc said: Cyberpanel is developed by Litespeed corp itself. I do not think they will add nginx or any other web server

I don't think so. It just seems like Litespeed might be donating some money to Cyberpanel, but that's it

The guy Usman Nasir - github owner of the project is employee of Litespeed. Python Developer at LiteSpeed Technologies. Check LinkedIn.

Offshore_Solutions

@seriesn said:
Open source but not free and definitely quality, ApisCp @nem

Great point! I wish I had included that in the list as, to my knowledge, ApisCP is the only paid control panel that currently offers a Lifetime License. Others used to.

Has ApisCP released their code?
Is ApisCP anything like the look and feel of cPanel?

seriesn

@Offshore_Solutions said:

@seriesn said:
Open source but not free and definitely quality, ApisCp @nem

Great point! I wish I had included that in the list as, to my knowledge, ApisCP is the only paid control panel that currently offers a Lifetime License. Others used to.

Has ApisCP released their code?
Is ApisCP anything like the look and feel of cPanel?

Their codebase is opensource. And no, it is not like Cpanel. Tbh, no good should be or look like another one. That’s just lazy work to make quick bucks.

The rest @nem can talk about it.

vero

@Offshore_Solutions said:
Is ApisCP anything like the look and feel of cPanel?

You're just like a guy, who is demanding that new girl would be the same as your ex. If you like cPanel, stick with it, if you can't afford it - that's another question. The whole beauty of people and things in the world is that they are different, every has their own advantages; one just need some willingness and time to discover them.

seriesn

@vero said: who is demanding that new girl would be the same as your ex

Who does that? Yuck

skorupion

@elliotc said: The guy Usman Nasir - github owner of the project is employee of Litespeed. Python Developer at LiteSpeed Technologies. Check LinkedIn.

Ouuu, then he knows ins and outs of litespeed. So he is able to utilize every aspect of litespeed

skorupion

@seriesn said: Who does that? Yuck

You see, sometimes its not you that broke up with someone, but that someone breaks up with you... Not every breakup is toxic waste.

nem

@Offshore_Solutions said: Has ApisCP released their code?

Yup.

Is ApisCP anything like the look and feel of cPanel?

It's hard to lead if you follow.

ApisCP was built specifically to address needs I found while running my hosting business for close to 19 years. I don't see the value in copying cPanel nor do I believe in blackbox system administration. I do see value in leveraging newer technology and integrating critical components (web apps, WAF, defect monitoring, resource enforcement, agnostic DNS) to build a better platform even if the UI is lacking currently. I don't know exactly when that will become a priority as engineering is far more important at this stage in adoption.

Best way to see if it's a good fit for you is to spin up a free trial with the stack customization tool. Docs will give a deep dive. Architecture overview is a good starting point.

Offshore_Solutions

@vero said:

if you can't afford it - that's another question.

This

I also covet my neighbor's wife but couldn't afford her either

niceboy

Cyberpanel with openlitespeed will be great if a single person want to manage different domains/user accounts considering the way it handles htaccess.

if you want to manage multi user hosting environment where literally more than one users will be using the system(aka shared hosting), you have to use Pro version of Cyberpanel.

kidrock

@Offshore_Solutions said:

@kidrock said: I am also currently trying aapanel and found it's easy to use...

@kidrock, does AAPanel look and feel anything like cPanel? How important is nginx for you and could you settle for Lightspeed?

It's like a child of cpanel. Simple gui and easy to use for personal purpose. After going through all recommended panels and checking their demos, I found aapanel to be user-friendly since I had been using cpanel. As I do not have much knowledge of linux commands, for me gui and one click installs matter similar to cpanel. I have shortlisted aapanel, centos web panel and cyberpanel.

I am just a personal user and came from shared hosting. Currently, trying vps server to learn and aapanel was my first panel on Ubuntu. My first try is nginx, next I will go with Litespeed too. For Litespeed, I will try both aapanel and cyberpanel.

angstrom

There are no well-guarded secrets in this area.

If you want or need cPanel, then save your money so that you can pay for cPanel.

Otherwise choose and learn to live with another (perhaps free) panel.

Also, this is a frequent topic, so a little search wouldn't have hurt. For example:

https://www.lowendtalk.com/discussion/166536/decent-alternatives-to-cpanel-any-suggestions
https://www.lowendtalk.com/discussion/158567/best-cpanel-alternatives
https://www.lowendtalk.com/discussion/168800/looking-for-a-free-cpanel-alternative
https://www.lowendtalk.com/discussion/98667/cpanel-alternatives
https://www.lowendtalk.com/discussion/159617/any-cheapest-alternative-to-cpanel
https://www.lowendtalk.com/discussion/17833/best-free-cpanel-alternative
https://www.lowendtalk.com/discussion/23502/best-free-or-open-source-cpanel-alternative-for-vps
https://www.lowendtalk.com/discussion/18143/is-there-any-free-alternative-to-cpanel-that-can-restore-a-backup
https://www.lowendtalk.com/discussion/153114/is-centos-panel-best-free-panel-alternative-to-cpanel

Go4Mart

Well, there is a cheaper Plesk maybe

eris

For VestaCP there have been multiple vulnerabilities reported in the last few weeks.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28379
And in the next few days multiple will follow...

VestaCP is without the knowledge to manually patch and fix your self not "safe" any more .

If you need an safer replacement please use MyVesta (1 to 1 fork) or HestiaCP with more new features.