r/webhosting

Millions of NGINX Servers Face Fresh Zero-Day Concerns After Recent Rift Patch dubbed "nginx-poolslip"
▲ 249 r/webhosting+6 crossposts

Millions of NGINX Servers Face Fresh Zero-Day Concerns After Recent Rift Patch dubbed "nginx-poolslip"

A new NGINX zero-day dubbed "nginx-poolslip" appeared shortly after the recent Rift patch. The issue reportedly affects NGINX >=1.31.0 and involves request memory pool handling rather than the exact same code path fixed for Rift.

thecybersecguru.com
u/raptorhunter22 — 11 hours ago

Looking for a webhost for erotica stories and potentially for taboo themes

I am a writer of erotica and I've been thinking of having a website where people can easily access my stories. Some of my stories, particularly older ones, contain taboo scenarios like non-consent and incest so I want to not run a foul with platforms.

I've been looking at services and see things at around 10 usd a month or less but am okay if I really have to go over

My users are in the US and Europe mostly from what I know. I have about 400 users on my discord server with maybe more people following me on gallery websites

I am thinking WordPress would be the way to go but I am open to alternatives.

I am also open to the possibility of those stories being linked to off site locations if absolutely necessary.

I am not looking for vpses

I've checked out a few sites but many draw a line one way or another

reddit.com
u/TikTikKobold — 14 hours ago

Siteground Shenanigans

Siteground just installed a plugin called "AI Agent by SiteGround" on every single site we have with them, without messaging for approval. They just went ahead and did it. It just showed up. Do I really have to go through all of our 100+ websites and manually deactivate and delete every single one? Why would you just install a plugin automatically on a site... I'm just waiting for all the conflicts this is going to make.

Anyone else in this boat?

reddit.com
u/rousse_polonaise — 10 hours ago

How are hosting/SaaS companies handling “instant access” expectations when transfers are still processing?

A lot of customers now seem to expect services to activate the moment they complete a transfer in their banking app, even though settlement/verification can still take time behind the scenes.

At low volume it’s manageable with manual checks or trust-based exceptions, but once signup volume grows it feels harder to balance fraud risk, support load, and customer expectations.

Are most hosting/SaaS companies now automating activation around confirmed settlement, or is there still usually a manual review layer involved for certain cases?

reddit.com
u/Flashy-Window-8906 — 15 hours ago
▲ 6 r/webhosting+1 crossposts

How do I get away from GoDaddy?

I've had so many bad experiences with GoDaddy and I really want to leave them, but I'm afraid they would sabotage something if I try to start moving things. I can't afford for anything to happen to my domain and stored images. And I just don't trust them.

Those of you who have left GoDaddy, please tell me how difficult it was to get away from them. What obstacles did you encounter? What hosting site did you move to, and did that site make it easy?

Other than my domain, SSL and the storage/sharing of images, I don't believe I need anything else from from a hosting site, and GoDaddy is always trying to make me pay for services that I don't need, such as insisting I have a website!

Any ideas as to how I should go about this? What are the steps?

reddit.com
u/-pegasus — 1 day ago

Hetzner asking for ID — is that normal?

Made a Hetzner account because everyone says their VPS pricing/performance is great, but they’re asking for government ID verification.

I’m not really comfortable uploading my ID just to rent a VPS.

Is this normal with Hetzner now? Has anyone gotten approve

reddit.com

Email fiasco moving domain registration from cloudfare to go daddy

Hello, I’ll warn you upfront, I’m not that tech savey. I had my web domain hosted with cloudfare and it expired. I thought I was going a different direction but long story short, things changed and I find myself with godaddy for my domain registration. I had email set up thru them with an alias but it’s long gone and now I can’t get the same alias set up thru godaddy. I use that email for registration purposes, customer service, etc and I can’t access it. I’m not sure how to proceed. Any advice is appreciated.

reddit.com
u/Candid-Ad-8470 — 17 hours ago

SendGrid charged my card $3,000+ from hacked API key. Any email service with hard limits?

SendGrid hit me with a $3,000+ overage after an old compromised API key started sending spam. This all occurred in the span for 4 hours while I was asleep. My normal bill is ~$21/mo on the 50k plan.

They didn’t stop sending at the plan limit and just kept billing.

I manage website contact forms for multiple client sites, so I’m looking for either:

  • One account that supports isolated client/API key limits
  • Or a cheap transactional email service with hard caps (reject/stop sends at limit, no surprise overages)

Main priorities are high deliverability and hard spending limits.

What are you guys using?

Please help!

reddit.com
u/Pyada — 1 day ago

Best way to by an existing domain from someone?

Looking for some advice here.

I have a list of domains that would be perfect for a project I’m working on, but they are all currently registered to someone else. They are not listed on any marketplace and are just sitting there, parked or unused.

what's the best way to buy an existing domain from someone who isn't actively trying to sell? I'm not sure whether to use a broker or just handle the outreach myself..

reddit.com
u/One-Year6936 — 1 day ago

My client website is wrongly classified as phishing. Clean html code.

Hello, my single-page website https://lumanpericias.com.br has been flagged as Phishing, but this is a clear false positive. The site belongs to a client with medical expertise consultancy that I know personally. The page is completely static, single html, placed besides a few images folder, strictly informational, contains no login forms, no credential harvesting fields, and no malware. The only outgoing action is a direct link for clients to contact the professional via WhatsApp. I kindly ask help from anyone that knows any sort of possible solution.

*Initially I performed wordpress autoinstaller, then deleted all the files replacing with the index.html file.

reddit.com
u/Double_Move_9795 — 1 day ago

Anyone here tried GiddyHost yet

I found them while looking for cheaper Cloud hosting for side projects. Specs/pricing look decent, but I haven’t seen many long-term reviews yet.

Would love to hear real experiences before I migrate anything important.

reddit.com

Building First Site for Dental Office - Help!

Hi Everybody! I am purchasing a Dental Office with my Wife (Dentist), and I would like to save on hiring someone to build our website. I'm a very fast learner and tech savvy. Mechanical Engineer by trade. I was quoted $6500 to have my website built using WordPress, and I figured I could probably do it myself.
Anybody have any advice for me on learning how to build it, templates to use, and what is the best host for a dental office website? I am looking for speed because it plays a factor into google SEO when ranking your dental office. Slow loading websites do not get loaded. The fastest do! Who is the best host for this?

  • What is your monthly budget? $10-50 a month depending
  • Where are you/your users located? Midwest USA
  • What kind of site are you hosting (Wordpress, phpBB, custom software, etc) or what is your use case? WordPress
  • Do you have a monthly traffic volume? Estimates are ok. 300-2000
  • If you’re looking at VPSes: Do you have experience administrating linux servers and infrastructure? Not looking at VPS
  • Did you read the sidebar/check out the hosts listed there? I've personally vetted these companies and their services are a good fit for 99% of people. Yes
reddit.com
u/RecoverCultural9197 — 1 day ago

FOSSBilling as WHMCS Alternative

I've seen many posts about this, but I wanted to start this thread to ask for recent experiences from those who have tried it.

We started with WHMCS because it allowed us to get up and running very quickly and gave us a solid foundation for our service management platform, primarily for hosting. Since we also develop other types of SaaS products, we've been using it for that as well.

But from the beginning, we've had the problem that WHMCS customization, especially the client area, isn't very developer-friendly. Furthermore, trying to expand it makes it very unintuitive. Another problem is that WHMCS's overall performance is too slow for our standards compared to the custom services we develop. And now, due to our dependency on a third-party platform for the client area, we want to migrate it to React, but the API is limiting us somewhat, and as I mentioned, expanding it is becoming very tedious.

However, from the beginning, we've had the problem that WHMCS customization, especially the client area, isn't very user-friendly. And of course, there's the issue of price. Our biggest expenses are for WHMCS and Plesk licenses, which we want to get rid of eventually (we'll replace Plesk with our own solutions that are already in the testing phase).

Obviously, we've already assessed these problems and decided to create our own solution that will allow us to easily modify and expand it as we wish using Go and Node.js. However, this will take a lot of time, and honestly, we want to finish developing other products right now. Until then, we plan to take an intermediate step by testing a pre-built backend like FOSSBilling. From what little I've seen of it, I liked how intuitive the API is for modification, and we plan to test it on a test server and, of course, migrate until we have our own solution.

So, I'm asking to this community: What did those of you who tried FOSSBilling think? How was your migration, if you had one?

reddit.com
u/Mountain-Adept — 1 day ago
▲ 6 r/webhosting+1 crossposts

What kind of automation are you still missing in WHMCS?

As a company focused heavily on WHMCS automation, we've always considered close contact with the community an imperative part of product development. But after 15 years in the industry, we've also learned that even the best feature requests may never get shared at all, often because opening tickets, or writing forum posts easily gets pushed aside by more immediate work.

That's why we decided to launch a dedicated anonymous survey focused entirely on collecting feedback from people actively working with WHMCS.

The survey contains only two short questions and can be completed at any time. We'd genuinely like to understand which gaps, inefficiencies, or missing tools you run into most often - whether related to our existing WHMCS modules, additional integrations, or completely new products altogether.

u/ModulesGarden — 2 days ago

Agency-hosted Pressidium setup: stay put or take control ourselves?

Looking for some advice/opinions on our company’s WordPress hosting/setup situation.

Sorry for the essay!

Small-medium Australian B2B company with a WooCommerce product catalogue site. Website was originally built by Perth Web Design (PWD) about 5 years ago for around $8k AUD.

For years we were paying roughly $20k AUD/year covering hosting, SEO, AI-generated blog/landing page content, updates/security, support etc. Earlier this year I took over the website internally and convinced management to reduce the arrangement down to basically hosting only because the additional services weren’t providing much value.

To elaborate on that a bit:

- A lot of the SEO/content work being delivered was AI-generated blog and landing page content that often needed heavy editing before it was usable

- Some of it was factually wrong or didn’t really fit our industry/products properly

- Some sections were suspiciously similar to competitors

- It was usually very obviously AI-generated content/slop

- The time spent internally reviewing and rewriting it often outweighed the value of just writing proper content ourselves

Apparently before I started, it had gotten to the point where a lot of what PWD sent over for approval was just being ignored because nobody had time to properly fix/review it.

That’s when I learned the site is actually hosted on Pressidium through PWD. From what I can tell, Pressidium itself seems pretty solid.

We also have a separate IT company that handles our PCs, servers and office tech support, and they offer hosting too. We originally thought we’d just move the site over to them, but they don’t use Pressidium or managed WordPress hosting. Just more generic hosting infrastructure. That’s one of the main reasons we kept the site with PWD.

The site itself is also not tiny/simple. 400+ WooCommerce products, some with huge variation/SKU counts into the thousands. General performance is okay but not amazing. Some product pages can be heavy/slow. That’s another reason I’m hesitant to just throw it onto generic hosting, because I assume the managed WordPress infrastructure is helping keep it stable.

The issue now is workflow/control.

Today I made a mistake editing functions.php cause I'm a stupid idiot dum dum. Simple syntax error. That immediately took down both the live website and WP admin, which also locked me out of the only access I had to fix it myself.

PWD do not provide:

- Pressidium dashboard access

- SFTP/file access

- staging sites

So even though I had a working backup copy of the .php file ready to go, I still had to go back through PWD just to replace the broken file on the server. About $600 AUD for what was essentially a copy/paste restore job.

To be fair, the mistake was mine, not theirs. But it highlighted how little direct control we have over the environment despite now managing most of the site internally.

Their recommendation was:

- develop locally

- then migrate changes live

Which makes sense in theory, except if replacing a single .php file costs ~$600 AUD, I can only assume requesting the full files/database exports needed to build and maintain a proper local copy would also become a paid process.

And even then, a local copy is only accurate as of the export date. Any newer products/content/orders/plugin changes on the live site wouldn’t exist locally unless we constantly request fresh exports.

So now I’m trying to work out the best direction going forward:

  1. Stay with PWD hosting/support

  2. Host directly with Pressidium and manage updates/security/plugin compatibility ourselves

  3. Move to another managed WordPress host entirely

  4. Move to hosting through our existing IT support provider

A few things:

- PWD’s hosting pricing itself doesn’t seem outrageous

- Historically the expensive part has been support/dev work

- Pressidium advertises 24/7 DevOps support which sounds appealing if hosting directly

- I’m comfortable managing a lot of the WordPress/admin side myself, but I’m not a full-time sysadmin. Definitely capable and willing to learn though.

- What we really need is safer workflows, staging, file access, and quicker rollback ability

Curious what people here would do in this situation.

reddit.com
u/GospodinMaksim — 2 days ago

Help about email hosting

Hey everyone,
I’m looking for some advice on email hosting providers for managing email accounts for my existing clients.
I’m not trying to start a hosting business or do large-scale reselling just want a reliable solution to manage email for the clients I already work with through web design / IT services.
The setup would basically be:
I manage domains, DNS, mailbox creation, passwords, etc.

clients use Thunderbird, Outlook, Apple Mail, phones, etc.

mostly small businesses and local clients

no mass marketing or bulk email sending

I’ve been looking at:
MXroute

Migadu

Fastmail

maybe Google Workspace for some clients

I do NOT want to self-host email because I don’t want to deal with deliverability, spam reputation, blacklists, server maintenance, etc.
For people already doing something similar:
which provider has been the most reliable?

how has MXroute been for client use long term?

any providers I should avoid?

anything important I should know before moving clients over?

Thanks!

reddit.com
u/RicardoFreitas1965 — 3 days ago

Best hosting platform for website

So I want to host my blogging /startup website can you guys guide me how to choose best hosting platform for it.?

reddit.com
u/tinyyetmiighty — 3 days ago

Anyone experience hosting a next js project directly on a vps , to bypass Vercel? Which blob storage would you recommend which is not aws?

The title says it everything
I’m migrating the hosting of a project built with next js from Vercel into a vps and looking for a way to replace the blob storage

Options could be to even use the same VPS as the storage as the project is regional enough cloud blob storage is an overkill imo

Any serious engineering recommendations?
(cross post from the next js community)

reddit.com
u/ndr3svt — 2 days ago

Malware protection

I am running a WP site and have been using Wordfence and Sucuri plugins.
I am considering using the hosting provider malware scanning, as they say that this should provide robust, server-side protection that scans web files, databases, crons, and scripts for hidden threats.

The main drawback of this is that it will add a few $$ to my monthly bill ($4 probably).

On the one hand the WP plugins are free and it seems that everything is working properly.

On the other hand, I guess that "built in" server side protection is probably better.

Anyone switched from WP plugins security to "server based" security?

Thanks for your help.

reddit.com
u/Revolutionary_Bee773 — 3 days ago

CAcloud.ca (CanadianWebHosting.com) OFFLINE

CAcloud.ca (CanadianWebHosting.com) OFFLINE

Vancouver hosting center OFFLINE
system panel offline, our webs offline, VM unreachable

Down 90 minutes - then up long enough for me to file a ticket, then down again. (Still down)
They had their DNS nuked a week or two ago, we were down three hours on that one (though I could still SSH into our VM there).

Anything else gone awry in the vancouver network scene right now?

reddit.com
u/No_Disk_8823 — 4 days ago