All site running as www is okay?

jfoc

hi,
As we know all website running inside the aaPanel box is using www user/group.
When one of the website got hacked, how safe is the another website ?
Since all website running and directory/file permission is www user/group

and sometimes a site need open_basedir disabled

aaPanel_Kern

hello yes aapaenl all php sites run with www user
open_basedir is enabled by default
You can try to use waf to intercept some attacks
Use Website Tamper-proof to disallow tamper-proofing of websites

jfoc

aaPanel_Kern I do not use NGINX for some reason of rewrite is not fully compatible with htaccess.
WAF/Website Tamper only for detecting any changes on files/folders?
But wont able avoid the access folder/files outside of the infected website directory?

aaPanel_Kern

These are intercepts before infection.
The system can use System hardening, Anti-intrusion

jfoc

aaPanel_Kern WAF / website tamper? is the subscription for once time or monthly?

jfoc

aaPanel_Kern What kind of system hardening? Some system hardening will makes some script/web wont work well when its not anticipated. there is no detailed information on the app-store

aaPanel_Kern

jfoc
monthly

aaPanel_Kern

jfoc

aaPanel_Kern can this protect from directory/file traversal outside the infected site?

aaPanel_Kern

jfoc

aaPanel_Kern which one could?