To install cPAddons site software in WHM, navigate to the Install cPAddons Site Software interface, select the checkbox next to the application you want to install (such as WordPress), and click Update cPAddon Config. The system will download and install the application, making it available to your users through their cPanel accounts. cPAddons are applications that extend your hosting environment with features like blogs, forums, and shopping carts.
What Are cPAddons?
cPAddons are third-party applications that integrate with cPanel and WHM to add functionality to your hosting accounts. These applications include popular tools like WordPress, bulletin boards, online shopping carts, and content management systems. Once installed through WHM, these applications become available to your users through their cPanel accounts, allowing them to quickly deploy websites and web applications.
Understanding RPM-Based WordPress Installation
OBHost servers use RPM packages to install WordPress through cPAddons. This modern installation method uses the yum package manager to discover, install, and manage WordPress installations. When you install WordPress through the RPM-based cPAddon, users can update WordPress directly through its own administrative interface without requiring server-level intervention.
The RPM package contains an unaltered WordPress installer obtained directly from wordpress.org, ensuring you receive the official, secure version of WordPress. This approach replaced the legacy WordPress installation method that was deprecated in cPanel version 64 and disabled in version 70.
If you have existing WordPress (legacy) installations on your server, you can migrate them to the modern RPM-based version using the /scripts/migrate_legacy_wordpress_to_modern_wordpress script through SSH.
Installing a cPAddon Application
Follow these steps to install a cPAddon on your WHM server:
- Log in to WHM as the root user
- Navigate to Software and then Install cPAddons Site Software
- Locate the application you want to install in the available cPAddons list
- Select the Installed checkbox next to the application name
- If you need to refresh all cPAddon sources (useful if you suspect corruption), select the Force Refresh of All cPAddon Sources checkbox
- Click Update cPAddon Config to begin the installation
- Wait for the installation process to complete
- Click Back to return to the main cPAddons interface
Once installed, the system automatically enables the cPAddon for all feature lists in WHM's Feature Manager interface. You can customize which hosting packages have access to specific cPAddons by modifying feature lists in WHM under Packages and then Feature Manager.
Security Considerations for cPAddons
Before installing cPAddons on shared hosting environments, understand the security implications. Many cPAddons contain security-sensitive files, including configuration files with passwords in clear text. On shared hosting servers without proper isolation, these files could be accessible by other users on the same server.
For shared hosting environments, use one of these Apache modules to ensure proper user isolation:
- mpm-itk for process-level isolation
- mod_ruid2 for user ID switching
- mod_suphp for PHP script execution under user accounts
Without these modules, you may need to manually adjust file permissions to prevent security issues between users. For this reason, avoid installing cPAddons on shared hosting servers that lack proper user isolation mechanisms.
Additionally, some cPAddons may have security vulnerabilities inherent to their PHP code. Always keep installed applications updated and follow PHP security best practices to minimize risk.
Adding New cPAddon Vendors
The default cPAddons list includes applications from trusted vendors. However, you can add additional vendor sources to access more applications. To add a new cPAddon vendor:
- Obtain the vendor information URL from the cPAddon developer or provider
- In the Install cPAddons Site Software interface, locate the vendor management section
- Enter the vendor's information URL in the provided field
- Click Add Vendor to include their applications in your available cPAddons list
Only add vendors from trusted sources, as third-party cPAddons have full access to your server environment and user data. Research any vendor thoroughly before adding their repository to your system.
Managing Installed cPAddons
After installation, you can manage your cPAddons through the same WHM interface. To uninstall a cPAddon, simply deselect the Installed checkbox next to the application name and click Update cPAddon Config. This removes the application from your server and makes it unavailable to users.
Keep in mind that uninstalling a cPAddon does not remove existing installations that users have created. Users who already installed the application through cPanel will retain their installations, but new users will not be able to install it.
Frequently Asked Questions
Why should I use RPM-based WordPress instead of legacy WordPress?
The RPM-based WordPress installation offers several advantages over the legacy version. Users can update WordPress directly through the WordPress admin interface without server administrator involvement. The RPM package receives regular updates through the standard yum package manager, ensuring security patches are deployed quickly. The installation process is also more reliable and consistent across different server environments.
Can I install cPAddons on a shared hosting server safely?
You can install cPAddons on shared hosting servers, but only if your server uses proper user isolation through modules like mpm-itk, mod_ruid2, or mod_suphp. Without these security measures, cPAddons may create security vulnerabilities that allow users to access each other's sensitive files. If your server lacks these isolation mechanisms, limit cPAddon installations to dedicated or VPS hosting environments where each user has their own isolated server space.
What should I do if my cPAddons appear corrupt or outdated?
If your cPAddons are not functioning correctly or appear to have outdated information, use the Force Refresh of All cPAddon Sources option when updating your configuration. This option forces the system to re-download all cPAddon metadata and packages from their source repositories. Select this checkbox before clicking Update cPAddon Config to refresh all sources simultaneously.
How do I control which users can access installed cPAddons?
Control cPAddon access through WHM's Feature Manager interface. After installing a cPAddon, the system automatically enables it for all feature lists by default. To restrict access, navigate to WHM, select Packages, then Feature Manager, and edit the feature lists assigned to your hosting packages. Disable specific cPAddons in feature lists to prevent certain user groups from accessing those applications through their cPanel accounts.
Need help installing or managing cPAddons on your server? Our support team is available 24/7 to assist you. Visit our contact page or email us at support@obhost.org for technical assistance.
