how to create user, site and DB from WHM plugin without access hash?

rustyhex2

• July 11, 2014 10:16

Hello. I need to create user, domain and DB from WHM plugin. I know, that's possible only with XML-api, but it requires login/pass or access hash. It seems strange, because i already logged into WHM as root and have session in url. This session is not valid for requests, sent from local script (php/curl xml api request). I wish i could call API without any access creds. Is this possible in the current version of cPanel? If so, how can it be accomplished?

• 

  vanessa

  • July 12, 2014 02:33

  You cannot call the API without either the access hash or the password. Being able to do so would be considered a huge security vulnerability, considering what the API can do. You may want to consider using a cPanel API2 call instead, which can authenticate using the cPanel user's credentials.

  0
• 

  KostonConsulting

  • July 15, 2014 16:01

  If you're already logged in as root, you'll have read access to /root/.accesshash. Just load it out of the file and use it to make the API call Be warned that you should use an appconfig file to make sure your WHM plugin executes as the logged in user so that other users cannot act as root via your plugin.

  0
• 

  cPanelMichael

  • July 17, 2014 12:20

  Hello :) I just wanted to note the documentation on AppConfig is found here: cPanel - AppConfig Thank you.

  0

Please sign in to leave a comment.