Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Advertise on LowEndTalk.com
opinions about aapanel
New on LowEndTalk? Please read our 'Community Rules' by clicking on it in the right menu!

opinions about aapanel

donkodonko Member

I recently found about it while searching for free control panels with OpenLiteSpeed (besides cyberpanel which i don't like), anyone who have used it long time for "production" or sites with traffic can share some review?
Also i want to know if they don't usually break critical things with their updates.

Comments

  • hzrhzr Member, Moderator
    edited May 23

    https://www.lowendtalk.com/discussion/123884/aapanel-the-preferred-panel-for-spammers-everywhere/p1

    0) their installer is still a plaintext-http pipe into root shell. (note for jsg: this is also on a cloudflare free plan, with backend connection set to flexible/http to origin)

    image

    1) you need python, openssl or other dependencies? instead of using an apt or yum repo, you get unsigned, random, untrusted downloads directly run as root:

    image

    2) hidden tracking code, not mentioned anywhere as far as I can tell

    image

    3) almost no QA, also bonus http download from a bare ip somewhere, no signatures or even a md5:

    image

    4) downloads and runs additional plaintext http bash scripts as root:

    image

    5) doesn't bother hashing or verifying packages downloaded from some random webserver, instead checks if their filesize happens to be big enough (WTF?)

    image

  • notarobonotarobo Member
    edited May 23

    Aapanel good. Fast loading, most time stable if not always follow upgrade. Many small apps can install like fail2ban , one click migration.

    OLs is beta now but working good. Just not possible one click migrate because it detect as Apache (error). Normal nginx migrate no problem

    No problem uptime, bug just few but fixing always.

    Thanked by 1donko
  • notarobonotarobo Member

    @hzr said:
    https://www.lowendtalk.com/discussion/123884/aapanel-the-preferred-panel-for-spammers-everywhere/p1

    0) their installer is still a plaintext-http pipe into root shell. (note for jsg: this is also on a cloudflare free plan, with backend connection set to flexible/http to origin)

    image

    1) you need python, openssl or other dependencies? instead of using an apt or yum repo, you get unsigned, random, untrusted downloads directly run as root:

    image

    2) hidden tracking code, not mentioned anywhere as far as I can tell

    image

    3) almost no QA, also bonus http download from a bare ip somewhere, no signatures or even a md5:

    image

    4) downloads and runs additional plaintext http bash scripts as root:

    image

    5) doesn't bother hashing or verifying packages downloaded from some random webserver, instead checks if their filesize happens to be big enough (WTF?)

    image

    Is this real bad for user? And what is tracking about is it one time or always

  • hzrhzr Member, Moderator

    notarobo said: Is this real bad for user?

    It's either extremely incompetent or careless or intentionally insecure.

  • jetchiragjetchirag Member

    @hzr the last part tho -

    Thanked by 1AlwaysSkint

    ^-^!

  • Don't, just don't.

    Long live LowEndInfo.com

  • MohamadSYMohamadSY Member

    I use it for my websites and for production, it’s a great lightweight one ☝️
    Try it, I think it’s a good free one.

    Thanked by 1donko
  • yokowasisyokowasis Member

    Shady owner, will create shady product.

  • ThyTeThyTe Member

    Have there ever been improvements in security and privacy?

  • donkodonko Member

    @ThyTe said:
    Have there ever been improvements in security and privacy?

    Don't know, i have been using it anyway because can use OLS with LSCache for wordpress and works ok... nothing happened and no issues.

    And i can have daily backups directly on my google drive.

  • dedipromodedipromo Member

    OLS comes with a very handy control panel out-of-the-box; and if all you need is OLS + LSCache + WordPress, they have a one-click installation script that handles everything for you. Thus, I don't really see any advantage using another web panel with, as hzr mentioned in his reply, so many security flaws that brings hugh risks to your server.

    Easy Website Backup Script: easybackup Extremely affordable FTP backup storage: 1Fichier

  • donkodonko Member

    Yes i know that, but i was looking for a cyberpanel :-& alternative.
    aapanel is lightweight have a good file manager, google drive backups, ols and all with easy install and that's what i needed.

    If any of my vps get hacked or infected, i will post here crying, but meanwhile i'll take the risk (?) :>

  • @donko said:
    I recently found about it while searching for free control panels with OpenLiteSpeed (besides cyberpanel which i don't like), anyone who have used it long time for "production" or sites with traffic can share some review?
    Also i want to know if they don't usually break critical things with their updates.

    what made you want to move from cyberpanel? just recently moved to cyberpanel from vesta. I looked into aapanel too but got cold feet after reading some comments here

  • MissFortuneMissFortune Member
    edited July 5

    aapanel is good. I am having a faster config with Nginx rather than Openlitespeed, good thing about aapanel, is I can switch to Nginx, Openlitespeed or Apache anytime.

    Also, for the tracking code, they have explained it here https://forum.aapanel.com/d/1504-about-the-tracking-code-of-the-aapanel-installation-script

  • suricloudsuricloud Member

    +1 for aapanel

  • XiNiXXiNiX Member, Provider

    Go with :

    1. Webmin / Virtualmin
    2. keyhelp
    3. KloxoMR ( its very much like cpanel )
    4. Ajenti
    5. CWP

    I would recommend you to go with some cheap providers who offer free DirectAdmin with VPS. This is infact the best option for a few extra bucks.

    XiNiX™ InfoTech Pvt. Ltd. ( Since - 2005 ) : Virtual & Dedicated in United States / Europe & India
    Server Range in INDIA ( Mumbai / Delhi ) Unmetered Cloud & Dedicated Servers : [ www.istack.in ]

Sign In or Register to comment.