Skip to content

Instantly share code, notes, and snippets.

@cPFence
cPFence / cpfence-wp2shell-mitigation.php
Last active July 19, 2026 22:19
cPFence wp2shell Mitigation
<?php
/**
* Plugin Name: cPFence wp2shell Mitigation
* Plugin URI: https://cpfence.app
* Description: Temporarily blocks malformed WordPress REST batch requests that trigger wp2shell (CVE-2026-63030).
* Version: 1.0.0
* Author: Linkers Gate LLC — cPFence.app Team
* Author URI: https://cpfence.app
* License: GPL-2.0-or-later
* License URI: https://www.gnu.org/licenses/gpl-2.0.html
#!/bin/bash
# Script by cPFence Team, https://cpfence.app
#
# Description:
# This script performs routine server maintenance tasks:
# - Truncates user error logs larger than 5MB and server logs larger than 100MB, keeping only the last entries using `sponge` (ensure `sponge` is installed on the server).
# - Retains only the last 10 days of system journal logs.
# - Updates and upgrades packages non-interactively and checks if a reboot is required.
# - Clears APT cache to save space.
#!/bin/bash
# Written by: cPFence Team / https://cpfence.app/
#
# Description:
# This script is designed to automate the optimization and configuration of OpenLiteSpeed
# running inside a Docker container or directly on the host. It backs up the existing
# configuration file, applies updates to critical server settings such as worker processes,
# CPU affinity, memory buffer sizes, and external application configurations for PHP-LSAPI.
# MD5 checksum validation is added to detect changes and prevent redundant updates.
#!/bin/bash
#
# cPFence OpenLiteSpeed Freeze - v2 (Enhance CP / Ubuntu 24)
# Version adapted for Enhance v12
# Copyright (C) 2023 - 2026 Linkers Gate LLC.
#
# Usage:
# ./cPFence_ols_freeze.sh freeze -> store current top-of-config and freeze + auto-install systemd manager
# ./cPFence_ols_freeze.sh unfreeze -> remove freeze marker and stored files + disable systemd manager
# ./cPFence_ols_freeze.sh -> run enforcement (intended for systemd path/timer or manual)
@cPFence
cPFence / delete_old_backups
Created March 2, 2025 11:50
Delete Old Snapshot Backups in Enhance v12 ext4
# Dry-run version
DAYS=2
SECONDS_OLD=$((DAYS * 86400))
for site in /backups/*; do
[ -d "$site" ] || continue
current_snapshot=$(readlink "$site/current")
echo "Checking site: ${site##*/}"
find "$site" -maxdepth 1 -type d -name "snapshot-*" | while read -r snapshot; do
if [ "$snapshot" = "$current_snapshot" ]; then
#!/bin/bash
# enhance_backup_sync.sh
#
# cPFence Team | https://cpfence.app
#
# Description:
# This script synchronizes the Enhance backup server's /backups directory with a remote server
# for disaster recovery (backup mode) or restores data from the remote server to the local server (restore mode).
#
# Usage:
#!/usr/bin/env bash
# Script by cPFence Team, https://cpfence.app
# Tested on Enhance v12 only!
# Safe Ubuntu cleanup: logs, apt, snap, temp, Docker (no volumes by default)
# Usage: sudo ./safe_cleanup.sh [--with-volumes]
WITH_VOLUMES=0
[[ "${1:-}" == "--with-volumes" ]] && WITH_VOLUMES=1
human() { # bytes to human readable
@cPFence
cPFence / Blacklist File Manager Plugins
Last active November 23, 2025 10:30
List of File Manager Plugins to Blacklist on Shared Hosting
wp-file-manager
file-manager-advanced
filester
filebird
file-manager
real-media-library-lite
wpide
folders
fileorganizer
media-library-organizer
@cPFence
cPFence / Whmcs Module Enhancement
Created January 29, 2025 20:08
Whmcs Module Enhancement
function enhance_ClientArea($params)
{
$systemurl = Setting::getValue('SystemURL');
$webmailLink = 'https://webmail.enhance.com/';
// Fetch domain IP
$domain = $params['domain'];
$domainIP = gethostbyname($domain);
function enhance_ClientArea($params)
{
$systemUrl = Setting::getValue('SystemURL');
// Replace this link with your own master login webmail login link
$webmailLink = 'https://webmail.enhance.com/';
$domain = $params['domain'];
$domainIP = gethostbyname($domain);
$serviceId = $params['serviceid'];
$analyticsURL = "https://{$domain}/traffic-reports";