Profile Domain Module - Procedure not Recommended?
Using Jamroom
I guess it comes down to do you trust Jamroom? Do you trust us?
- The config file is written into the public_html directory since 99% of the time the web user has no permission to write outside of that directory.
- Add a domain with the module and look at what it writes to the file. You will see it adds "ServerAlias" entries. If this file WERE to get hacked, the worst that could be done is they could disable your domain.
Let me ask you this:
Is your web server secured?
Are you using hardened PHP?
Are you running FTP on your server? (you're waiting to get hacked if you do)
Are you running SSH on a non-standard port?
Have you installed a firewall to only allow logins by authorized IPs?
Have you disabled root password logins and gone to 100% SSH key logins?
Are you 100% certain CPanel is all secure?
Is everyone with root level access to your server someone you trust?
I bring these up just to point out that there is A LOT of trust that needs to happen here, as well as a lot of things that can go wrong if you do not have a competent admin.
At this point I'd rather not go back and forth with your server guy - I think you just need to make a choice on what you want to do.
I will say again that you can skip the Apache config part and just manually add each ServerAlias by hand if you like.
Thanks!
