Stop users from adding other users sub-domains as pointers

[ljweb]

I stumbled across this accidentally, say i have one user on the server with the domain xyzwebsite.com and another user with the website abcwebsite.com .

Its actually possible for the user with abcwebsite.com to add a domain pointer called subsite.xyzwebsite.com and have it pointing to their site ..

this is kind of a bad thing i think and should be patched .. or is this intentional? I know i wouldnt want other users on the server hijacking sub-domains on my account..

 

[DamnSkippy]

This has been discussed several times. It is considered a feature by some and in certain situations I can see that. However I call it a huge security hole that allows the domains on your server to be hijacked. As far as I can tell there are no plans to do anything about it.