DNS Manager - Security Issue

Discuss our WHMCS modules and everything associated with them.

DNS Manager - Security Issue

Postby insertcoin » 3rd February 2015, 1:40 pm

Hi,

Been installing the DNS manager, but its being a little odd.

The biggest issue I have at the moment, is that it doesn't seem to know who owns a domain.

Example:
domainA.com - Account User1
Bdomain.com - Account User2

If I login to User1 who owns domainA.com, go to DNS Manage "clientarea.php?managedns=domainA.com" I am able to edit the dns for domainA.com, however if I change the URL to "clientarea.php?managedns=Bdomain.com" it shows me the DNS for that domain, and I am able to edit it even though I am still logged in as "User1".

I assume I have done something wrong, but this seems very insecure!
insertcoin
 
Posts: 7
Joined: 3rd February 2015, 1:33 pm

Re: DNS Manager - Security Issue

Postby insertcoin » 4th February 2015, 10:45 am

Bump.

Can someone give me an answer to this issue?
insertcoin
 
Posts: 7
Joined: 3rd February 2015, 1:33 pm

Re: DNS Manager - Security Issue

Postby Joanna » 4th February 2015, 2:25 pm

Hello,

Thank you for reporting the issue.

You did nothing wrong. There was a problem with the module itself but it is already resolved. You can now download a fixed version of DNS Manager For WHMCS from your client area.

If there is anything else we can help with, please let us know.

And once again, thank you for your perceptiveness!
Joanna Byjoś
ModulesGarden Sales & Marketing Team Leader
Site Admin
ModulesGarden - Unique Approach To Custom Software Development Services & High-End Modules
User avatar
Joanna
Site Admin
 
Posts: 269
Joined: 23rd October 2014, 10:00 am
Location: Poland

Re: DNS Manager - Security Issue

Postby insertcoin » 4th February 2015, 5:28 pm

Hi,

Thanks for the reply, I will give it a go. Has anything changed with the installation procedure?
insertcoin
 
Posts: 7
Joined: 3rd February 2015, 1:33 pm

Re: DNS Manager - Security Issue

Postby insertcoin » 4th February 2015, 6:16 pm

This appears to be resolved. I have another issue with the installation but will open another post.
insertcoin
 
Posts: 7
Joined: 3rd February 2015, 1:33 pm

Re: DNS Manager - Security Issue

Postby ghanley » 17th February 2015, 3:30 am

I get this message - The domain owner is another user

Is this related??

How to fix?
ghanley
 
Posts: 7
Joined: 17th February 2015, 3:26 am

Re: DNS Manager - Security Issue

Postby Joanna » 17th February 2015, 12:23 pm

Please note that we have already answered your question here.
Joanna Byjoś
ModulesGarden Sales & Marketing Team Leader
Site Admin
ModulesGarden - Unique Approach To Custom Software Development Services & High-End Modules
User avatar
Joanna
Site Admin
 
Posts: 269
Joined: 23rd October 2014, 10:00 am
Location: Poland

Re: DNS Manager - Security Issue

Postby insertcoin » 19th February 2015, 4:26 pm

Hi,

Unfortunately we have moved on to a competitors product. Finding such a massive and obvious security hole did not instil any confidence in the product for obvious reasons.

Thank you for replying and fixing the fault.
insertcoin
 
Posts: 7
Joined: 3rd February 2015, 1:33 pm

Re: DNS Manager - Security Issue

Postby Joanna » 20th February 2015, 11:52 am

In this case, we can only express our hope that your trust in our company is not completely lost and we will get a chance to prove the efficiency of our products again. The issue discussed in this thread has been entirely fixed and we ensure that it will not happen again. Keep in mind that you are very welcome to come by any time you need.
Joanna Byjoś
ModulesGarden Sales & Marketing Team Leader
Site Admin
ModulesGarden - Unique Approach To Custom Software Development Services & High-End Modules
User avatar
Joanna
Site Admin
 
Posts: 269
Joined: 23rd October 2014, 10:00 am
Location: Poland

Re: DNS Manager - Security Issue

Postby ghanley » 23rd February 2015, 5:36 am

Insertcoin,

Which product did you move to - I to am experiencing huge frustrations.

I have not been able to edit zone records at all.

Seems I have to wait 3 days for replies.
ghanley
 
Posts: 7
Joined: 17th February 2015, 3:26 am


Return to WHMCS Modules

Who is online

Users browsing this forum: No registered users and 6 guests