security with paypal issue / need help

Portal Home > Knowledgebase > Articles Database > security with paypal issue / need help

Posted by The Calling, 06-04-2013, 05:03 PM
Is there a way with CSF, CXS or LFD (or any other method) to automatically alert via sms or email of any new scripts, files or directory names with "paypal.com"? I've been notified by PayPal regarding phishing attempts Sample form
Examples This is a Centos / CloudLinux / Cpanel box with suPHP enabled, apache 2.2, PHP 5.4, MySQL 5.5 and CSF/LFD and CXS enabled.
Posted by zacharooni, 06-04-2013, 05:11 PM
This seems like more of a job for either mod_security or cPanel hooks: http://docs.cpanel.net/twiki/bin/vie...::addsubdomain See these 2 links for more information about Function Hooks: http://docs.cpanel.net/twiki/bin/vie...gFunctionHooks http://docs.cpanel.net/twiki/bin/vie...omEventHandler You could write it such that you can match it against a list of disallowed subdomains, else return 1;
Posted by The Calling, 06-04-2013, 05:12 PM
It's not an actual subdomain, but created directory/files under /home/user/public_html/ Have mod security enabled with atomicorps rules too