If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.
We handle a couple of sites every week where the user had an old installation of Wordpress, hidden on a subdomain on a separate folder. Which leads to the whole account being removed/hacked etc. This is quite bothersome as well because there is a lot of sensitive stuff in the users homedir, just as an example, the /ssl folder or /mail. We had an idea, where maybe we could through .htaccess/.user.ini control which folders lsphp could access, to go even further, maybe even split read/write, in good cases the users actually know what they are doing and they update the site through ssh, and only allow volatile material through update folders. Have you thought about such a control, is it feasible?