Security improvements

[kilburn]

Being hosting-oriented, ispcp is fairly secure by default. Each domain has it's own totally independent user, and not even the panel GUI can access other website's files.

Additionally, the only privilege that resellers have over "normal" users is to add new domains/aliases themselves, and this can be used to capture outgoing e-mails from others. Unfortunately this is unavoidable (in *all* control panels, not just ispcp), so you will have to trust your colleagues in this front.

Anyway, it is advisable to setup ssl for the panel itself if your resellers are going to access it from untrusted networks.