Get Paid to Participate - up to $1 per post!     Twitter     Facebook     Google+
Hosting Discussion
 

forgot password?



Reply


Old
  Post #1 (permalink)   04-20-2017, 04:12 PM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Hi all

Don't expect WHMCS backups to work if you secure your servers.

All my servers are set to use SFTP only and using a custom port.
so in WHMCS under the Database Backups i have Daily Remote FTP Backup set up and i know all the settings are correct, but the cron always states

Quote:
Cron Job: ERROR : FTP Backup - Could not connect to backup.hostname
so contacted WHMCS support who told me to make sure my servers have the port open which they have and the IPs whitelisted.
(how i like how they reply to you as if you were a child and not know such things)

anyway after checking and telling them they are all set and open and whitlisted i get this

Quote:
Hello Terry,

Port ***** seems to be SFTP and not regular FTP. I believe this is why it is not working, as SFTP is not supported at this time.
so they don't support secure servers and yet they are always going on about making your WHMCS installation secure
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 


Old
  Post #2 (permalink)   04-20-2017, 11:05 PM
HD Addict
 
Join Date: Aug 2015
Posts: 125

Status: bigredseo is offline
Seems like this has been something going on for quite some time.

here's a thread from 4 years ago, looks to be dealing with the same problems. It's marked as "under consideration" but no timeline;

https://requests.whmcs.com/topic/adv...backup-options

Pretty sad state when they don't offer sFTP ability.
__________________
Conor Treacy
Big Red SEO - Omaha, NE
ConorTreacy.com <- That's Me! ;)
 
 
 
The Following User Says Thank You to bigredseo For This Useful Post:
SenseiSteve (04-25-2017)


Old
  Post #3 (permalink)   04-21-2017, 01:44 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by bigredseo View Post
Seems like this has been something going on for quite some time.

here's a thread from 4 years ago, looks to be dealing with the same problems. It's marked as "under consideration" but no timeline;

https://requests.whmcs.com/topic/adv...backup-options

Pretty sad state when they don't offer sFTP ability.
yes it is sad and even this

Quote:
Limitations
As a DB grows, it becomes too big for a PHP script like the WHMCS cron to handle backing up due to the amount of data within it causing various server limits to be exceeded, usually around the 20MB mark. Unfortunately being big simply means that for a PHP script to loop through and save that data into temporary memory in order to generate a full backup is not possible - either the memory limits or max execution time limits on the server side of things will kick in way before that completes and terminate the script. So the only option at that stage is to look at using an alternative backup means such as WHM automated backups or manual phpMyAdmin exports.
why dont they do as they preach when a client has issues and tell you to increase the limits as daily activity could easily take up 20MB
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #4 (permalink)   04-21-2017, 07:47 PM
HD Master
 
whmcsguru's Avatar
 
Join Date: May 2016
Posts: 271
Send a message via Skype™ to whmcsguru

Status: whmcsguru is offline
Don't want to use FTP? Great. Use local backups and be done with it.
__________________
WHMCS Guru - WHMCS addons, management, support and more.
WHMCS Notifications Extended - Add slack, hipchat, SMS, pushover to your WHMCS install!
WHMCS User and IP Extended Control - Take control of your WHMCS install
Linux admin, WHMCS Guru for hire. PM me for more information

Last edited by Artashes : 04-24-2017 at 11:20 AM. Reason: Edited for content.
 
 
 
The Following User Says Thank You to whmcsguru For This Useful Post:
WPCYCLE (04-24-2017)


Old
  Post #5 (permalink)   04-21-2017, 08:33 PM
HD Addict
 
Join Date: Aug 2015
Posts: 125

Status: bigredseo is offline
A 20MB limitation is a serious limitation! While we used external systems for backups, since WHMCS offers backups, it should be functional.

As far as complaining about things, FTP on it's own is not secure, and at this stage in the game, nobody should be using raw FTP. If you are offering FTP to users, you need to take a look at your security.

For me, sFTP is a requirement. But then I'm more paranoid about security than others might be.
__________________
Conor Treacy
Big Red SEO - Omaha, NE
ConorTreacy.com <- That's Me! ;)
 
 
 
The Following User Says Thank You to bigredseo For This Useful Post:
easyhostmedia (04-22-2017)


Old
  Post #6 (permalink)   04-21-2017, 11:37 PM
HD Master
 
whmcsguru's Avatar
 
Join Date: May 2016
Posts: 271
Send a message via Skype™ to whmcsguru

Status: whmcsguru is offline
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do. It's NOT WHMCS' job to wipe your tail end here. It's their job to provide a working billing client, nothing more.
__________________
WHMCS Guru - WHMCS addons, management, support and more.
WHMCS Notifications Extended - Add slack, hipchat, SMS, pushover to your WHMCS install!
WHMCS User and IP Extended Control - Take control of your WHMCS install
Linux admin, WHMCS Guru for hire. PM me for more information
 
 
 


Old
  Post #7 (permalink)   04-22-2017, 04:17 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by whmcsguru View Post
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do. It's NOT WHMCS' job to wipe your tail end here. It's their job to provide a working billing client, nothing more.
they constantly back on about security and yet they dont make their backup system to work over secure connections, their whole ethos is to make everything automated, but its seems to you to make your servers work on their terms rather them make their software work the way clients and the industry is going as more and more servers move away from std FTP
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #8 (permalink)   04-22-2017, 04:19 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by bigredseo View Post
A 20MB limitation is a serious limitation! While we used external systems for backups, since WHMCS offers backups, it should be functional.

As far as complaining about things, FTP on it's own is not secure, and at this stage in the game, nobody should be using raw FTP. If you are offering FTP to users, you need to take a look at your security.

For me, sFTP is a requirement. But then I'm more paranoid about security than others might be.
exactly Conor all my servers work under sFTP and wont work under std FTP.
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #9 (permalink)   04-22-2017, 04:23 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by whmcsguru View Post
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do.
not everyone is a developer and can write scripts, they offer a backup service that is way out of date and sever users have requested they offer this over SFTP, which would not take long for them to set up, just like them increasing their mem limits over 20mb as if your are under a certain limit their software wont work and you are forced to increase limits, but they clearly dont do as they preach
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #10 (permalink)   04-24-2017, 11:01 AM
HD Amateur
 
Join Date: Sep 2013
Posts: 72
Send a message via AIM to Licensecart Send a message via Skype™ to Licensecart

Status: Licensecart is offline
Nothing new it's been an issue for a while, this is a funny video (database backups) comparison www.billingbrawl.com.

You need to be able to do backups easily and if it can't do that with security you might as-well email yourself backup
 
 
 


Old
  Post #11 (permalink)   04-24-2017, 11:18 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by Licensecart View Post
Nothing new it's been an issue for a while, this is a funny video (database backups) comparison www.billingbrawl.com.

You need to be able to do backups easily and if it can't do that with security you might as-well email yourself backup
i have daily backups of my full WHMCS and i also use the email function to email to my gmail account
so i have 2 backups, but the point is that WHMCS keep telling up about making our installations more secure and if something fails then they will say you need to increase your memory, but they find it difficult to increase their own memory above 20MB and turn on sFTP, which wont take that long
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #12 (permalink)   04-24-2017, 01:19 PM
HD Addict
 
Join Date: Aug 2015
Posts: 125

Status: bigredseo is offline
Quote:
Originally Posted by whmcsguru View Post
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do. It's NOT WHMCS' job to wipe your tail end here. It's their job to provide a working billing client, nothing more.
I 100% agree that it's their job to provide a billing client. That's what we used it as. However, when they introduce extra things, such as backup, then it's their duty to ensure it's functional from a security point of view.

I've never used their backup system. I use the cPanel backup as a client, but never even did the incremental backups in WHM. We used r1soft and backed up all servers (and databases) every hour. Rarely had an issue.

The issue at hand is that WHMCS offers a backup solution, but provides a very insecure method. It would be better if they didn't provide any!
__________________
Conor Treacy
Big Red SEO - Omaha, NE
ConorTreacy.com <- That's Me! ;)
 
 
 
The Following 2 Users Say Thank You to bigredseo For This Useful Post:
HostLeet (04-24-2017), SenseiSteve (04-25-2017)


Old
  Post #13 (permalink)   04-24-2017, 02:48 PM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by whmcsguru View Post
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do. It's NOT WHMCS' job to wipe your tail end here. It's their job to provide a working billing client, nothing more.
Actually its a billing and management software and part of that is backup but as i stated why dont they do as they preach and be more secure and increase their limited
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #14 (permalink)   04-24-2017, 09:56 PM
HD Newbie
 
Join Date: May 2016
Posts: 31

Status: WPCYCLE is offline
Quote:
Originally Posted by whmcsguru View Post
WHMCS offers a backup. Don't want it? GREAT, then write your own script. It takes about 5 seconds to do. It's NOT WHMCS' job to wipe your tail end here. It's their job to provide a working billing client, nothing more.
Double agree.

Write your own script and configure it to do backups as you want...not what they limit you too.
 
 
 


Old
  Post #15 (permalink)   04-25-2017, 02:03 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,817
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by WPCYCLE View Post
Double agree.

Write your own script and configure it to do backups as you want...not what they limit you too.
no good for people that cant write scripts, why is WHMCS so security minded when it come to everything else on WHMCS, but cant be bothered to make the backup feature secure.
They provide a feature then it should be secure, which FTP is not secure and why should they restrict backups to 20mb as backups dont effect them as you are making a backup from your server1 to your server2. it would be different if the databases were being held on their servers, but they are not
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 
The Following User Says Thank You to easyhostmedia For This Useful Post:
SenseiSteve (04-25-2017)
Reply
Previous Thread Next Thread


Thread Tools

New Post New Post   Old Post Old Post
Posting Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Sponsored By: