Hosting people with WHM : risky?

[M31]

hi there , I got a quick question here.

I'm planning to create packages and host some people with my WHM account and i've been wondering , is there any risk? like can someone upload something malicious to their account which will affect my site? I'm afraid , even if there wasn't malicious intention , that someone might install something vulnerable which will allow someone to take over all of the site i host.

Sorry if this doesn't make sense , i'm new to these stuff

appreciate your help

[Jonathan]

Some stuff if it gets on there, it COULD exploit the ENTIRE server.
Really unless they are extremely computer illiterate (sp?) I'd not worry.

[M31]

"entire server" like my site and couple of other sites hosted at the same server (not the same WHM) , right?

[Jonathan]

Entire server, like everybody hosted on the cPanel## your on. Not just your accounts.
Really though, I mean it'd take a whole ton of mess ups to do that I'd think, I really
am not as good on security as some others here (lol- Budda, oz-SOMEBODY)

But really, I mean your paying for reseller capibility so why not exercise it?
Most the "harmful" stuff the adverage user can upload is scripts that have
holes in them and somebody got mad @'em and decided to rip it down. (Deface their site)

[sdjl]

I'm planning to create packages and host some people with my WHM account and i've been wondering , is there any risk? like can someone upload something malicious to their account which will affect my site? I'm afraid , even if there wasn't malicious intention , that someone might install something vulnerable which will allow someone to take over all of the site i host.

The "game" of web hosting entails the risks that you say above. This is where you have to be watchful and make sure that no harm is being commited by the services that you offer.

At the end of the day, you just have to keep an eye on things. Nothings ever going to be 100% safe and it's up to you to make sure that your clients use your services safely and responsibly.

Every so often i have a quick look through users files, looking for anything with dodgey names, large file sizes or weird extensions. If i don't like the sound/look of something i'll see what it is by opening it in the browser.
You then take steps from there, like leaving it, suspending the account, etc etc.

My advice, keep your eyes open, that's all there is to it.

David