933 results found

1. Interface that show progress process of compress backup before download.

   Interface / control that show progress process of compress backup before download. And reconfigure limit timeout that block dowkload of big files backup

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Backup / Restore  ·  Delete…  ·  Admin →
   declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your feedback. Unfortunately, this request contains two different suggestions, and it’s not technically possible to properly handle them inside one request.

   Please consider creating separate feature requests for each of the items below:

   1. “Interface that show progress process of compress backup before download”

   We could consider the possibility of implementing this feature in future Plesk releases.

   2. “Reconfigure limit timeout that block dowkload of big files backup”

   It seems like a bug, so we need to know more about the issue to try to reproduce it. What is the size of these big backups? What happens when this limit exceeded? Could you please describe your request in more detail?

   Please create a new request with each item, so that others can vote for it.

   Thank you.

   — ES

2. Make SSL/TLS encryption on port 587 optional, not mandatory

   Some mails could not be received due to the fact the Postfix 2.8 and higher in Plesk uses only TLS encryption, when senders use other encryption methods. Manually updating main.cf directly on the server (as discribed in https://plesk.zendesk.com/hc/en-us/articles/213386889) is not always an option since the main Postfix configuration file may be overwritten by any Plesk update. In order to avoid potential issues with non-delivered mails it is required to make SSL/TLS encryption on port 587 optional, not mandatory.

   20 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Mail  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.

   Everyone, please continue voting for this feature if you consider it important.
   —
   IG

3. Kaspersky AV handler must not backscatter

   Kaspersky AV handler must not respond back to the sender address of an e-mail containing a virus. This will cause backscatter and get the server blacklisted.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Mail  ·  Delete…  ·  Admin →
   declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Unfortunately, we have to close your request, because over the years it has not become quite popular for further implementation.

   —
   
IG

4. Add rate-limiting rules to Fail2Ban

   Please implement a rule for rate-limiting requests from outside resources and include it into Fail2Ban's default ruleset.

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Security  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Add enabling "Keep websites secured" with all options via CLI

   Suggest adding the CLI commands for enabling "Keep websites secured" and all four options:
   "Include the "www" subdomain"
   "Secure domain aliases"
   "Secure webmail"
   "Secure mail"
   in SSL/TLS certificates.
   It would enhance the advanced administration of SSL certificates, especially beneficial on servers with large amount of domains.

   7 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Usability and UI  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Thank you for your input! We will consider this functionality in upcoming releases if it is popular. Everyone, please continue voting for this feature if you consider it important.

   —
   IG

6. Limitation for FTP username

   Presently there is 16-char limitation for FTP username. This hinders migration from obscure hosting systems that use longer usernames.
   Please, consider implementing the feature that would remove this 16-char limitation if Providers opts to do so.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  Usability and UI  ·  Delete…  ·  Admin →
   completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Increased the maximum length of FTP usernames to 32 characters – https://docs.plesk.com/release-notes/onyx/change-log/#contents-179-preview12
   —
   IG

7. Better Integration with AWS Services

   There needs to be integration with Amazon SES, like make it another option in the SMTP options. The current method of choosing MSMTP (in order to configure it as an external SMTP service) will uninstall your other inbound mail services, like Dovecot and Postfix.

   Additionally, a way to integrate the AWS Route 53 service would be very helpful. Maybe this could be added as an Extension.

   7 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Plesk (general)  ·  Delete…  ·  Admin →
   already available  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

   Route 53 extension is already available  https://www.plesk.com/extensions/amazon-route53/,   https://youtu.be/3F3Byyea0ds. 

   For the other part of this request,  "integration with Amazon SES" no information was provided how such an integration  should look like, what should it do, what configuration options are expected so that it is an "integration".

   -- PD

8. Send server email notifications through Microsoft Graph API

   Hi to all of you,
   I got an Please Server running in Azure.
   As you may know, SMTP Port 25 Outgoing is blocked default by Microsoft to avoid spamming.
   On request it can be opened but it's not always granted.

   Microsoft Graph API Support in Plesk would be welcomed as it would allow to send Plesk Server Emails notifications.

   such feature already exists for Wordpress and works perfectly after creating an App Registration in Azure with the correct Graph API permissions.

   Therefor creating such feature for Plesk should not Rocket Science.

   Some useful URLs:

   https://wordpress.org/plugins/wpo365-msgraphmailer/

   https://learn.microsoft.com/en-us/graph/api/user-sendmail?view=graph-rest-1.0&tabs=php

   TY in advance.

   BR,
   Greg

   Hi to all of you,
   I got an Please Server running in Azure.
   As you may know, SMTP Port 25 Outgoing is blocked default by Microsoft to avoid spamming.
   On request it can be opened but it's not always granted.

   Microsoft Graph API Support in Plesk would be welcomed as it would allow to send Plesk Server Emails notifications.

   such feature already exists for Wordpress and works perfectly after creating an App Registration in Azure with the correct Graph API permissions.

   Therefor creating such feature for Plesk should not Rocket Science.

   Some useful URLs:

   https://wordpress.org/plugins/wpo365-msgraphmailer/

   https://learn.microsoft.com/en-us/graph/api/user-send… more

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  API  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   open discussion  ·  AdminPeter Debik (Community Manager, Plesk International GmbH) responded

   Hi Gregory,

   Thank you for your input! We will consider this functionality in upcoming releases if it will be popular.

   Everyone, please continue voting for this feature if you consider it important.

9. I'm using Horde email, why do I have to log into my mail account every day?

   I'm using Horde email, why do I have to log into my mail account every day? Can Plesk have an option to allow my email web page to be open every day for a month or two? I use Yahoo email, and it will stay signed in for months, as long as I don't clear my browser cache. Why can't Horde email do the same thing?

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Mail  ·  Delete…  ·  Admin →
   not a feature  ·  IgorG responded

   Note, only feature requests allowed here. If you have a question – please contact Plesk Support Team or community at https://talk.plesk.com

   As for your question, please look at https://support.plesk.com/hc/en-us/articles/360006924113-How-to-adjust-session-timeout-in-Horde-webmail-on-a-Plesk-for-Linux-server
   —
   IG

10. Error with an email format in php

    Hello I've got the following error when I try to send an email php format: "his Warning: mail() has been disabled for security"... Do you have any solution? Thank you

    •  

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Mail  ·  Delete…  ·  Admin →
    not a feature  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    This means that “mail()” function is disabled in PHP configuration (directive “disable_functions” in php.ini).
    You shall or address this question to your service provider (from whom you have purchased the account) directly.
    Sorry, but we are closing this item because it is not a feature request. We would appreciate if you ask questions about Plesk and report bugs found in Plesk using our forum: http://forum.odin.com
    Thanks!

    — ES

11. Different notification settings for available WordPress updates: Plugin, Theme or WordPress core

    Email notifications to customers are sent on every available WordPress update, that's far too much. My clients don't take them for important anymore and don't update at all. I suggest to fine tune available settings in Tools & Settings > Notifications > APS application updates (customer’s digest): Different notification options if the available update is a WordPress Core update, a plugin update or a theme update. So for example the plugin and theme update notification could be turned off for customers, but WordPress core update notifications would be still sent.

    Another suggestion would be an option to cutomize the FREQUENZY (= e.g. once a week, once a month) for sent digest mails, as it was already asked for in this here (and closed as already available, but it's NOT available):

    https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/6034455-stop-wordpress-toolkit-emails-going-out-every-nigh
    https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/6665897-wordpress-update-notification-e-mails-adjust-mai

    Email notifications to customers are sent on every available WordPress update, that's far too much. My clients don't take them for important anymore and don't update at all. I suggest to fine tune available settings in Tools & Settings > Notifications > APS application updates (customer’s digest): Different notification options if the available update is a WordPress Core update, a plugin update or a theme update. So for example the plugin and theme update notification could be turned off for customers, but WordPress core update notifications would be still sent.

    Another suggestion would be an option to cutomize the… more

    20 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    6 comments  ·  WP Toolkit  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thanks for submitting this suggestion. It definitely looks useful, so we’ll consider adding it in upcoming Plesk / WPT updates.

    Everyone, please continue to vote for this feature so we could evaluate its popularity.

    —AK

12. E-Mail Whitelist export

    Please make it possible to export the whitliste to a file...so that I can import this to my system. I Upgraded to new Plesk and they are all gone! Very bad.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Mail  ·  Delete…  ·  Admin →
    not a feature  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Whitelist records are stored in psa database table smtp_poplocks and can’t be lost during upgrade.
    To solve this upgrade issue, please contact your hosting provider (the company that hosts your website) and request support from them directly. We are the authors of the software you and your hosting provider are using, and unfortunately, we cannot help with this particular request because we do not host your website.

    —
    IG

13. add mail adress for Parked domain in plesk

    we cant add email adress for parked domain in plesk.
    please add this function. this function have in cpanel.

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Web / HTTP functions  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input!
    Unfortunately, we have to close your request, because over the years it has not become quite popular for further implementation.
    —
    IG

14. Add SSH2 extension to PHP default extensions to improve security

    Hi,

    Please consider add SSH2 extension to PHP default available extensions.

    To be able to use FTP over SSH (SFTP) the SSH2 extension must be installed on PHP.

    IN SHORT: SFTP (SSH2 EXTENSION) = SECURITY

    SFTP means secure file transfer via Secure Shell (or SSH), hence the name SSH File Transfer Protocol (SFTP). The two devices (server and client) communicate via a single channel, that of SSH, in which the remote file management commands are sent and where the file transfer takes place. By default, the only port required for SFTP is 22, the same as SSH.

    SFTP implements the same specifications at the cryptographic level supported by SSH, also TLS 1.3.

    WHAT ARE FTP AND SFTP:

    FTP is the traditional file transfer protocol. It’s a basic way of using the Internet to share files. SFTP (or Secure File Transfer Protocol) is an alternative to FTP that also allows you to transfer files, but adds a layer of security to the process. SFTP uses SSH (or secure shell) encryption to protect data as it’s being transferred. This means data is not exposed to outside entities on the Internet when it is sent to another party.

    Businesses often choose SFTP solutions due to enhanced security. However, many others still rely on FTP to facilitate data transfers. To better understand which file sharing option can meet your company’s needs, let’s look at the differences between SFTP vs. FTP. Understanding how these file transfer options differ will help you choose which option is best to transfer your data. There are three key areas in which SFTP vs. FTP differ: encryption, firewalls, and potential vulnerabilities.

    ENCRYPTION:

    Transferring data is a vital, day-to-day task for many businesses. While some data transfers may not require protection, other files may house sensitive information – information that is too sensitive to fall into the wrong hands. This is why encrypting your data is essential. Encryption scrambles data, making it decipherable only by the sender and the recipient, ensuring that even if a file is intercepted, it won’t be intelligible to any unintended parties.

    So, how does encryption impact your choice between SFTP vs. FTP? The traditional file transfer protocol (FTP) is a simple way of transferring data, but it offers nothing in terms of data protection. Files are transferred without encryption, making data readable for anyone who intercepts it. While this is fine if you’re just sending unimportant files, this could lead to major data compromises if you’re sending crucial data.

    SFTP, in contrast, offers a secure shell protecting files. Because files are encrypted, you don’t have to worry about data falling into the wrong hands. This is the ideal mode of transfer for any file that you want to protect. SFTP uses an encrypted type of fingerprint technology to first verify host keys before any data transfer has taken place.

    In terms of compliance, encryption makes a huge difference. If your organization is subject to compliance standards (including, but not limited to, the ones listed below), you could face serious consequences if you fail to encrypt data:

    HIPAA
    ITAR
    PCI-DSS
    SOX
    GLBA

    Encryption isn’t just a feature offered by SFTP that’s nice to have. It’s an essential step you should take to protect your data. If you fail to comply with these standards, your business could be subject to some serious fines.

    FIREWALLS:

    Another way in which FTP and SFTP differ is how channels are used. When you send files via FTP, this protocol needs to open multiple channels in order to complete the transfer. While the client and software negotiate these channels automatically, the client-side firewalls need to open multiple ports. Opening multiple channels can also open the client’s firewalls to vulnerability.

    SFTP presents a more secure process for the client-side firewall. Only port 22 will need to be open to send and receive data. This simplifies firewall configurations and is a better choice in terms of file sharing security.

    VULNERABILITIES:

    In addition to encryption and firewalls, SFTP beats FTP in terms of potential vulnerabilities, too. Any vulnerability can potentially be exploited and turned into a data breach. When it comes to inherent vulnerabilities in the file transfer process, FTP has a number of prominent ones.

    The first vulnerability is that FTP is prone to human error. Sending a file to the wrong recipient or sending the wrong file altogether can lead to some serious problems for your company. With a greater level of security provided by SFTP, you can minimize the potential for human error. You can also take steps to promote a culture of security awareness within your business to reduce the potential for human error.

    Intercepting data is simple with FTP, too. All it takes is the right tools and a little bit of knowledge to take advantage of these vulnerabilities. Even the most amateur hackers can intercept an FTP transfer. Sensitive data is often worth too much to risk a breach.

    Again, host keys can present vulnerabilities. Unlike SFTP which uses host keys to verify a recipient's identity before a transfer takes place, FTP does not. This is yet another way FTP transfers are less secure. All it takes is one accidental transfer to a wrong recipient for a file to be compromised.

    When it comes to secure data transfers, SFTP is your best option. You can feel confident that encryption measures are up to compliance standards, and you’re avoiding the inherent vulnerabilities of FTP transfers.

    Thanks to ftptoday(dot)com for this documents:
    - What are FTP and SFTP;
    - Encryption;
    - Firewalls;
    - Vulnerabilities.

    Thanks in advance for the support.

    Hi,

    Please consider add SSH2 extension to PHP default available extensions.

    To be able to use FTP over SSH (SFTP) the SSH2 extension must be installed on PHP.

    IN SHORT: SFTP (SSH2 EXTENSION) = SECURITY

    SFTP means secure file transfer via Secure Shell (or SSH), hence the name SSH File Transfer Protocol (SFTP). The two devices (server and client) communicate via a single channel, that of SSH, in which the remote file management commands are sent and where the file transfer takes place. By default, the only port required for SFTP is 22, the same as SSH.

    SFTP implements the… more

    33 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Web / PHP  ·  Delete…  ·  Admin →
    completed  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Since Plesk Obsidian 18.0.49 that was published December 20th, 2022, the Plesk PHP configuration page in "Tools & Settings" has a new option where you can easily install PHP PECL packages. The SSH2 extension is a PECL package as described in https://pecl.php.net/package/ssh2. It can be installed right out of the Plesk user surface using the new PECL installer.

    -- PD

15. Add IgnoreHosts options to Plesk`s DMARC implementation

    Currently it is possible to whitelist only domain with IgnoreMailFrom parameter. However there could be false-positive DMARC failures (in case sender's strict policy and mail going throughout relay) due to which it could be useful to have option to whitelist specific network. It would be nice having this option available

    12 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    6 comments  ·  DNS  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    We are closing the current request due to low demand and lack of reasonable explanation on why "IgnoreHost" is required over SRS.

    
    

    Please use Tools & Settings > Mail Server Settings > SPF local rules to configure an SPF record which will be used by Plesk to validate emails (including emails from an intermediate anti-spam solution). See KB article for mode details (https://support.plesk.com/hc/en-us/articles/360022753174) and Plesk documentation.

    
    

    -- SH

16. Option when forwarding mail not to include original message just a notification that there is a message to be read..

    I would like to be able to send a noitfication to my work account that I have mail. I do not want my work address to see the content of that mail.
    In the forward options smb/email-address/edit/id/xxx
    On the Forwarding tab. Include a checkbox that says something like Notify but do not include message content. The default should be unchecked withno change to the current functionality. When checked on receipt of an email a different message should be sent to the addresses specified in the list box labeled "Forward incoming messages to the following email address" saying that an email has been recieved and the senders address. It is important that the subject and the body are not sent.

    I would like to be able to send a noitfication to my work account that I have mail. I do not want my work address to see the content of that mail.
    In the forward options smb/email-address/edit/id/xxx
    On the Forwarding tab. Include a checkbox that says something like Notify but do not include message content. The default should be unchecked withno change to the current functionality. When checked on receipt of an email a different message should be sent to the addresses specified in the list box labeled "Forward incoming messages to the following e… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Mail  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input. We will consider this functionality in upcoming releases ​if it will be popular. Everyone, please continue voting for this feature if you consider it important.
    —
    IG

17. Ability to restrict all incoming messages for a mail account, keeping the account active

    Ability to restrict all incoming messages for a mail account, keeping the account active

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Mail  ·  Delete…  ·  Admin →
    declined  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Upd: Sorry, we are closing the request as no information was provided for over a month.

    —
    
IG

18. Allow the use of LetsEncrypt for default certificates

    I would like to be able to use the Let's Encrypt extension to add new certs to the "list of certificates in server pool" and make use of a Let's Encrypt (LE) cert as the "default certificate" for domains that have not added their own specific certificate.

    I thought this was already possible, but was incorrect. I added a LE cert on the Tools/Settings > SSL/TLS Certificates page, and made it the default certificate.

    However, I used a different certificate to secure the Panel and the mail server. It appears, in that case, the LE cert will never be renewed.

    I would like to have the LE certificate renewed if it's set as the default cert even if it is not used to secure the Panel or the mail server.

    I don't consider using LE certs a good idea to secure the mail server because some e-mail clients, especially Apple clients, break when the cert is changed or renewed, causing end user support problems. Due to this, I use a different cert, that lasts for 2 years, to secure the mail server, to avoid that issue happening frequently (every 90 days). See...

    https://support.plesk.com/hc/en-us/articles/115004756974-Mail-users-with-iOS-and-MacOS-devices-cannot-access-mail-after-certificate-renewal-on-Plesk-server-Cannot-Verify-Server-Identity

    Thanks for your consideration.

    I would like to be able to use the Let's Encrypt extension to add new certs to the "list of certificates in server pool" and make use of a Let's Encrypt (LE) cert as the "default certificate" for domains that have not added their own specific certificate.

    I thought this was already possible, but was incorrect. I added a LE cert on the Tools/Settings > SSL/TLS Certificates page, and made it the default certificate.

    However, I used a different certificate to secure the Panel and the mail server. It appears, in that case, the LE cert will never be renewed.

    … more

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Web / SSL  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Add an ability to change mail queue lifetime from control panel

    Currently, it is only possible to change mail queue lifetime from CLI. It would be useful to be able to set this from Plesk UI as well.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Panel/Mail  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. check passwords against Pwned Passwords API

    Plesk should check user typed passwords against Pwned Passwords API

    https://haveibeenpwned.com/API/v2

    that way you could further improve systems running Plesk against Brute-Force attacks - and Dictionary attacks

    WordFence plugin for WordPress is already offering this, checking WordPress administrator passwords against https://haveibeenpwned.com/API/v2

    it shouldn't be too much work to compare Plesk password hash between Plesk and https://haveibeenpwned.com/API/

    I would like to use this feature for all services (FTP, E-Mail, Plesk, WordPress, etc.)

    It makes a lot of sense to do this, there are no drawbacks
    it should be option that users can enable/disable
    if you don't need it, you can disable it
    leave it enabled, your server will be more secure

    Plesk should check user typed passwords against Pwned Passwords API

    https://haveibeenpwned.com/API/v2

    that way you could further improve systems running Plesk against Brute-Force attacks - and Dictionary attacks

    WordFence plugin for WordPress is already offering this, checking WordPress administrator passwords against https://haveibeenpwned.com/API/v2

    it shouldn't be too much work to compare Plesk password hash between Plesk and https://haveibeenpwned.com/API/

    I would like to use this feature for all services (FTP, E-Mail, Plesk, WordPress, etc.)

    It makes a lot of sense to do this, there are no drawbacks
    it should be option that users can enable/disable
    if you don't need it, you… more

    8 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Security  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    open discussion  ·  AdminPlesk Staff (Community Manager, Plesk International GmbH) responded

    Thank you for your input. We will consider this functionality in upcoming releases, if it will be popular.
    Everyone, please continue voting for this feature if you consider it important.

    —
    IG