Allow closing shellinabox
The shellinabox service that runs on port 4200 is not secure enough, for a number of reasons:
* it accepts non-TLS traffic
* no multifactor authentication
* no battle-tested frontend webserver like nginx before it
Instead of fixing all of these, perhaps just allow to disable this service like you allow for other services.
3
votes
Anonymous
shared this idea
-
Anonymous
commented
Just wanted to echo this great suggestion. Having this port open (without the ability to close it) poses a lot of security issues.
Currently, any effort for closing this port requires 'sudo' privilege, which Cloudways does not allow for obvious reasons.