CRITICAL NEW FINDINGS:
1. WordPress Cron Manager - CATASTROPHIC
- 33 references to /var/cpanel/userdata
- 9 references to public_html
- Completely relies on cPanel userdata for domain→user lookups
- Will be 100% broken on InterWorx without major refactor
2. cPanel API Dependencies - SILENT FAILURES
- whmapi1/uapi calls found in 3 modules
- These commands DON'T EXIST on InterWorx!
- Will fail silently without proper error handling
Affected modules:
- live-attack-monitor.sh: whmapi1 cphulkd_list_blocks/add_whitelist
- enable-cphulk.sh: Multiple whmapi1 calls
- system-health-check.sh: whmapi1 in help messages
3. 500-error-tracker.sh - PHP Handler Issues
- Reads php_admin_value from /var/cpanel/userdata
- InterWorx uses different PHP configuration method
UPDATED TOTALS:
- Was: 14 modules need fixes
- Now: 16 modules need fixes
- 3 with critical API dependencies
- 1 requires complete refactor (wordpress-cron-manager)
SOLUTION DOCUMENTED:
- Wrap ALL whmapi1/uapi calls in SYS_CONTROL_PANEL checks
- InterWorx has ModSecurity + fail2ban (no CPHulk equivalent)
- Must fail gracefully with warnings
UPDATED IMPLEMENTATION PLAN:
- Phase 3: Security modules + API wrapping
- Phase 4: WordPress + website diagnostics (MAJOR REFACTOR)
- Phase 5: Monitoring tools
- Phase 6: System health conditional checks
This audit is now COMPLETE and accurate.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>