CCPanel v49.10.12

What's new: SECURITY: with a valid licence, 52 Root panel pages opened without logging in (Email Queue, IP Manager, DNS Zone Manager, Install / Update Packages, Repair Mail Permissions, Nginx / Apache / FTP / Mail settings and others - their views had no login check, and the licence check, which let them through, doesn't check logins), and /enduser/<account>/dbadmin/ handed out a phpMyAdmin one-click sign-on to anyone. Every page of the Root, Enduser, Admin, Reseller, Dashboard and Servers panels now needs a login, enforced centrally (PanelAccessMiddleware) instead of per view; only the token APIs (WHMCS hosting API, Enduser API tokens) check their own credentials. Checked: none of 237 pages opens logged out; logged-in pages, the APIs, reseller login and the demo work as before. Update every server; Agent unchanged (3.0.0).

What's New

• SECURITY: with a valid licence, 52 Root panel pages opened without logging in (Email Queue, IP Manager, DNS Zone Manager, Install / Update Packages, Repair Mail Permissions, Nginx / Apache / FTP / Mail settings and others - their views had no login check, and the licence check, which let them through, doesn't check logins), and /enduser/<account>/dbadmin/ handed out a phpMyAdmin one-click sign-on to anyone. Every page of the Root, Enduser, Admin, Reseller, Dashboard and Servers panels now needs a login, enforced centrally (PanelAccessMiddleware) instead of per view; only the token APIs (WHMCS hosting API, Enduser API tokens) check their own credentials. Checked: none of 237 pages opens logged out; logged-in pages, the APIs, reseller login and the demo work as before. Update every server
• Agent unchanged (3.0.0)