Hello Webmasters and Programmers, please I have some questions which require your help:

1.) Is it possible for someone with your CPanel login details to make changes to your site, probably from one of the admins account. Details on the site such as phone numbers or account numbers?

2.) Can your webhost access your site either from the CPanel or Admin dashboard, and make any kind of changes?

3.) Can things such as password of Admins of the site be changed directly from the CPanel?

4.) Is it possible for changes like phone numbers or account numbers to be made on a site without the Admins getting mails to notify of the changes?
I guess that this can only happen when the admins are not incharge of the emails that link to their dashboard.

5.) Lastly, is it possible that all these issues might have been the handy work of a hacker. Bear in mind that the site was visited shortly before this issue, so I am ruling the possibility of a DDOS attack but again I may be totally wrong.


Please it is urgent. God bless you for your responses

1, 3, 4 are possible. 5 is also possible.
Cpanel gives more power than admin dashboard because you have direct access to the database and code files.

If you use a shared hosting and perhaps other low cost hosting, then 2 is also possible.

privaldo:
Hello Webmasters and Programmers, please I have some questions which require your help:

1.) Is it possible for someone with your CPanel login details to make changes to your site, probably from one of the admins account. Details on the site such as phone numbers or account numbers?

Well if a person has cpanel details then yes he/she can do just what they like to your details such as changing password and modifying your entire database if they so wish.

2.) Can your webhost access your site either from the CPanel or Admin dashboard, and make any kind of changes?

Well in the strictest sense of things yes they can but let us assume it was by a worker with goofy intentions it wouldn’t be so easy as he may need to go through the hosting database to do that and even if possible most password are store as one-way hash function which most time sound like he/she can’t uncover the password. But hosting may have a master key and password for any account if they so have future plans in mind to do so. Meanwhile a lot of web hosting has agreement to no temper with your data as it can cause a lot of legal issues if well proven would cost insane loss of real money to them.

3.) Can things such as password of Admins of the site be changed directly from the CPanel?

Yes this is too very easy and no one needs to break a sweat for this.

4.) Is it possible for changes like phone numbers or account numbers to be made on a site without the Admins getting mails to notify of the changes?

I guess that this can only happen when the admins are not incharge of the emails that link to their dashboard.

You mean changes of the password on an account of the host website ?? Or your site itself. If your site yes but if for host it depends on who is hosting o your website.

5.) Lastly, is it possible that all these issues might have been the handy work of a hacker. Bear in mind that the site was visited shortly before this issue, so I am ruling the possibility of a DDOS attack but again I may be totally wrong.

DDos Attack is aimed at denial of service of your website and not necessarily about stealing password or logins.
Hacker can be anyone, a friend, a co worker and just practically anyone that has access to your web host. Lastly the handiwork could be as a result of virus from either the webhost or from your own end as per the script you installed.

Well I will advise you reach your webhost for metrics and logs that happened to your cpanel

valzey:
1, 3, 4 are possible. 5 is also possible.
Cpanel gives more power than admin dashboard because you have direct access to the database and code files.

If you use a shared hosting and perhaps other low cost hosting, then 2 is also possible.

Thank you very much for your help.

stanliwise:


Well if a person has cpanel details then yes he/she can do just what they like to your details such as changing password and modifying your entire database if they so wish.


Well in the strictest sense of things yes they can but let us assume it was by a worker with goofy intentions it wouldn’t be so easy as he may need to go through the hosting database to do that and even if possible most password are store as one-way hash function which most time sound like he/she can’t uncover the password. But hosting may have a master key and password for any account if they so have future plans in mind to do so. Meanwhile a lot of web hosting has agreement to no temper with your data as it can cause a lot of legal issues if well proven would cost insane loss of real money to them.


Yes this is too very easy and no one needs to break a sweat for this.


You mean changes of the password on an account of the host website ?? Or your site itself. If your site yes but if for host it depends on who is hosting o your website.


DDos Attack is aimed at denial of service of your website and not necessarily about stealing password or logins.
Hacker can be anyone, a friend, a co worker and just practically anyone that has access to your web host. Lastly the handiwork could be as a result of virus from either the webhost or from your own end as per the script you installed.

Well I will advise you reach your webhost for metrics and logs that happened to your cpanel

I really appreciate your help, thank you very much.