Building a modern alternative to cPanel – looking for feedback from the LET community

vuanhson · April 17

@HPanel said:
@doghouch said:

@Alyx said:

@doghouch said:
I just went to the backups page, entered | service nginx stop as a hostname, and clicked on "test connection."

Must be an error on your side.
hPanel is secure. ChatGPT said it fixed all problems 🤡

I'll leave it up for interpretation:
    try {
      const sshpass_output = this._run("sshpass -e sftp -P " + this.port + " -oBatchMode=no -oStrictHostKeyChecking=no -b \"" + sftp_log_tmp + "\" " + this.user + "@" + this.host, _0x3b852b);
      fs.unlinkSync(sftp_log_tmp);
      return sshpass_output;
    } catch (err) {
      // ...
    }
Fixed all vuln thanks for testing

Bruh, after reading 6 pages of comments, I think you just only fix bug when people tell you, and definitely vibe code the page. You don't even thinking what you need to do,than just throw people comment into AI and told it to fix the bug for you, then reply on the forum.

You know, every services, software before go to production need to follow thing call "best practice" on system design, security, etc... It help eliminate almost common exploit and dumb mistake. People in this topic showing you bunch of stupid mistakes, so at this point you clearly didn't follow any practice, and it is serious for every app/service, and more important for sensitive thing like hosting panel. So how people trust you? I didn't even mention the one who know the bug but didn't comment in this post, just wait when many people use your app and harvest their information, and zero day bug too.

Just stop fixing, rebuild your app, at least hire some well known security company to audit your app security then people will use it. Otherwise it just the trash, even use some opensource panel is better than this.

FatGrizzly · April 17

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

woinokiz · April 17

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

ozonti · April 17

Because if you can choose different ports, it must be just like cPanel?

https://panel.registrar-server.com:2053 (:2083 cPanel)
https://panel.registrar-server.com:2057 (:2087 cPanel)

Jord · April 17

Has someone changed the login details already?

HPanel · April 17

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

HPanel · April 17

@Jord said:
Has someone changed the login details already?

trial not available yet

Jord · April 17

@HPanel said:

@Jord said:
Has someone changed the login details already?

trial not available yet

I was talking about your demo, the login details don't work from your website.

HPanel · April 17

@Jord said:

@HPanel said:

@Jord said:
Has someone changed the login details already?

trial not available yet

I was talking about your demo, the login details don't work from your website.

yes login detail not work because we working on it to live demo

woinokiz · April 17

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

ascicode · April 17

That funny, hpanel nd whmdc both based in london?

Jord · April 17

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Ooo but I do see my fav domain https://icanhazip.com

woinokiz · April 17

@Jord said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Ooo but I do see my fav domain https://icanhazip.com

🤸‍♀️

FatGrizzly · April 17

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh

# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"

LOL.

woinokiz · April 17

@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.

Changing file path is a security move?

And LOL for ? , i have nothing to loose on this

FatGrizzly · April 17

@woinokiz said:
@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.
Changing file path is a security move?

And LOL for ? , i have nothing to loose on this

Buddy im siding with you here XD, i think you aren't getting my sarcastic comments

Look at the fucking static hmac key

woinokiz · April 17

@FatGrizzly said:
@woinokiz said:
@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.
Changing file path is a security move?

And LOL for ? , i have nothing to loose on this
Buddy im siding with you here XD, i think you aren't getting my sarcastic comments

Look at the fucking static hmac key

Okay then my mistake 🫱

More regarding static key , I doubt he even knows what the code does , ai did say it's secure

HPanel · April 17

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

@woinokiz said:
@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.
Changing file path is a security move?

And LOL for ? , i have nothing to loose on this

lol these all files are old we already change every thing in new panel

khalequzzaman · April 17

@HPanel said:
@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

@woinokiz said:
@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.
Changing file path is a security move?

And LOL for ? , i have nothing to loose on this
lol these all files are old we already change every thing in new panel

Sure it is! That's why it returns: Not Found
The requested URL was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

woinokiz · April 17

L..> @khalequzzaman said:

@HPanel said:
@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

@woinokiz said:
@FatGrizzly said:

@woinokiz said:

@HPanel said:

@woinokiz said:

@FatGrizzly said:

@woinokiz said:
Complete vibe coded slop this is,

The problem isnt vibe coding itself but he really dont know what he's doing

Lets talk about small thing,
When people complained about license check being lull, he seems to have asked ai "make license verification stronger and make no mistake",
As usual ai did extract the strings (url and key) to a .license file

He is really not a good programmer at all, he thinks just verifying hmac is safe,
Remember verifying license is very important for him and still its so lull,

[[....I'll update things if needed, even completely de-obfuscated js files....]]

My recommendation : dont use this at all even for personal usages

Shh. Let the trial come out.

We all deserve to test, don't shit on this project, it really seems viable against cPanel.

I hope the licensing is as secure as licensing from 2024's cPanel version

Its already out, just download zip folder and everything's there

And yes its your choice to test or not , but dont expect this to be secure

Go ahead, download it 😂 You'll find dist files, compiled binaries, and production builds just like cPanel leaves its files on every server too. Does that mean cPanel gave away their source code? Lol

>

Good luck building a panel from minified JS and stripped binaries. Let me know how that goes 👍

Binaries???
Lol there's no single binary file , you completely vibe coded on js , and you think stripped js files are safe?

And lol for you comparing yourself with cpanel, cloning ui doesnt build same product

I didnt wanted to do this but here is his full license verification logic : https://pastebin.com/KcT64m4y

He didnt even took time to remove ai slop comments in production release

Well the panel wont work because that file wont exist.

according to latest.sh/setup.sh
# Create system verification config
mkdir -p /etc/hpanel
cat > /etc/hpanel/.sysconf << 'PANELCONFEOF'
V_EP=https://xadmincp11newhpanel.hpanel.net
V_SK=hpanel_license_hmac_2024_secure_key
PANELCONFEOF
chmod 600 /etc/hpanel/.sysconf
log "System config created"
LOL.
Changing file path is a security move?

And LOL for ? , i have nothing to loose on this
lol these all files are old we already change every thing in new panel
Sure it is! That's why it returns: Not Found
The requested URL was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

He's just lying nothing more , the zip i downloaded had release dates and build numbers of 2026/04/17, i dont know what new binaries he vibe coded in 2/3 hours

HPanel · April 21

UPDATE: HPanel is Now LIVE!

Hey everyone! Quick update HPanel is officially live and available for Trial & purchase.

What's new:

Free 15-Day Trial full access, no credit card needed
Automated provisioning via WHMCS order → install → active in minutes
License management through client area

Quick Links:

Free Trial: https://store.hpanel.net/freetrial.php
Live Demo: https://panel.registrar-server.com:2057

Live Demo Credentials:

Admin: root / admin123
User: logax / logax123

Current version: v1.21.0 all features included in every plan. No Imunify, no CloudLinux, no Softaculous fees. Everything built-in.

Questions? Drop a reply or open a ticket!

plumberg · April 21

Cannot work on ipv6 only server
Cannot register from Macedonia

Fail?

aphex · April 21

How the hell did you manage to build that country list dropdown. It's the most random assortment of countries

HPanel · April 22

@plumberg said:

Cannot work on ipv6 only server
Cannot register from Macedonia

Fail?

@plumberg
IPv6 support We're actively working on IPv6-only server support. It'll be available in an upcoming update soon.

Country list Fixed! The registration form now includes all countries worldwide

ChrisMiller · April 22

Good Luck!

khalequzzaman · April 22

Ah, still running an unauthorized copy of WHMCS—though honestly, that doesn’t come as a surprise.

https://www.whmcs.com/members/verifydomain.php?domain=store.hpanel.net

HPanel · April 22

@khalequzzaman said:

Ah, still running an unauthorized copy of WHMCS—though honestly, that doesn’t come as a surprise.

https://www.whmcs.com/members/verifydomain.php?domain=store.hpanel.net

No worries, everything will be resolved today.

yeungon · April 22

What if the user forgets the password bro ?

HPanel · April 22

@yeungon said:
What if the user forgets the password bro ?

For Users: The admin can reset any user's password from the Admin Panel Accounts Management Edit User.

For Admin: Since admin uses root system login, password can be reset via SSH: passwd root

A "Forgot Password" email-based reset feature will be done next update maybe tomorow

NushairAlvi · April 22

@HPanel said:

@yeungon said:
What if the user forgets the password bro ?

For Users: The admin can reset any user's password from the Admin Panel Accounts Management Edit User.

For Admin: Since admin uses root system login, password can be reset via SSH: passwd root

A "Forgot Password" email-based reset feature will be done next update maybe tomorow

Good step

Howdy, Stranger!

Categories

In this Discussion

Building a modern alternative to cPanel – looking for feedback from the LET community

Comments