All Activity

Okay so the above isn't an issue. Can someone answer this because its confused me a little. Clients Account Details Language. What is the purpose of that option I assumed it was so client could select their preferred language seems its not for that. Does it have another purpose is it linked to support so staff can see clients preferred communication Language

Wild guess it's related to the new forced marketplace accounts requirement, and not worth their time to backport it.

I came here to mention this very same thing. Given the significant number of problematic changes in 9.x AND that 9.1 was only released 10 days ago, this is an unreasonable expectation. If the WHMCS devs had done a better job preparing 9.x such that there weren't endless bugs reported for months after, I can see this being more reasonable. However that's not how things panned out. I also would like to request that WHMCS 8.13 remain actively supported until at minimum your planned release date for WHMCS 9.2 so that your customers can feel more comfortable with the 9.x upgrade prior to ending support for 8.x. I would estimate that this would be June 2027.

Hello, Is anyone else having issues with client Languages on version 9.1.0 When clients are selecting there preferred language its saving but visually it stays as the system's default language. Admin language change seems to be functioning correctly.

Welcome to WHMCS in 2026. No care for the user, their focus is 99% pleasing Webpros/shareholders.

i was updating to the latest release and lo and behold! a effin EULA that says that it will force create a account i (we) never wanted. this and the price increase.. i will push at work to look at another product..

On v9 the supported way is to reissue the invoice rather than edit it. It takes a minute once you've done it a couple of times: 1. Open the unpaid invoice and click Duplicate Invoice. The copy is created as a Draft with the same line items, invoice date, due date and payment method. 2. Edit the Draft copy (new price, description, whatever changed), then click Publish, or Publish & Send Email if you want the client to get the corrected one straight away. 3. Go back to the original invoice and Mark Cancelled. Don't forget to fix the price at the source too, otherwise the next renewal invoice comes out with the old amount again. On the client's service (Products/Services tab) update the Recurring Amount, and if the product price itself changed, update the product pricing as well. If you really want the old behaviour back, it's still there for now: Configuration > System Settings > General Settings > Invoices > Invoice Immutability, pick one of the "Immutability disabled" options. That's also what triggers the "Invoice immutability is disabled" banner you saw. WHMCS says that option will be removed in a future release, so I'd get used to the duplicate, publish, cancel routine instead of building your workflow around editing.

We've deliberately remained on WHMCS 8.13 due to the numerous issues with version 9. We've been closely monitoring the WHMCS End of Life (EOL) schedule, where the end-of-support date for version 8.13 has been listed as "TBD" for a long time. When I checked the page today, I was genuinely shocked to discover that the status had changed: support for WHMCS 8.13 is now scheduled to end on December 1, 2026 - roughly one month from now. I checked the page earlier this month, and the date was still listed as TBD. Furthermore, the latest available snapshot on the Internet Archive, dated September 30, 2026, confirms that the status was still TBD at that point. Announcing the end of support for a major software version with only around one month's notice is completely unreasonable. This is particularly concerning given the significant issues that still remain with WHMCS 9, which are precisely why we've continued to run version 8.13 in the first place. Customers need adequate notice to plan, test, and execute a major upgrade - especially when the proposed upgrade path involves a version that continues to present substantial problems. Changing the EOL status from "TBD" to a firm date so close to the deadline, without meaningful advance notice, is simply unacceptable.

Ran into the same wall when we wanted a client's accountant copied on billing mails. You're right about the hooks: EmailPreSend can only add merge fields, attach files or abort the send, and PreEmailSendReduceRecipients can only remove CC/BCC entries, never add them. So it has to come from the recipient side. Three ways, depending on how fixed the extra addresses are: 1. Same extra addresses every time: create a custom email template (General type) under Configuration > System Settings > Email Templates and fill in its CC and BCC fields. Then call SendEmail with messagename set to that template and id set to the client ID. Every send of that template copies those addresses. 2. Addresses that belong to one client (their accountant, a partner, a second mailbox): add them as Contacts on that client and enable the matching email preferences (General, Invoice, Support and so on). WHMCS copies contacts on emails of the types they're opted into, and that's exactly the cc list PreEmailSendReduceRecipients receives. It also works for a custom message via SendEmail with customtype=general. 3. Different addresses on every send: from your script call AddContact with email_preferences[general]=1, then SendEmail, then DeleteContact. A bit hacky, but the message still lands in the client's email log. If you don't need it logged in WHMCS at all, send that one through your own SMTP (PHPMailer etc.) outside the API. Whichever you pick, test it on a dummy client first and check the Email Log to confirm the CC line looks the way you expect.

Hi all, We're ShoHost, a hosting company in Erode, India, and we build a few WHMCS addons in-house. This thread is for ShoSecureAuth, our login protection addon for WHMCS 8.x and 9.x. Questions and feedback are welcome here. Why we built it WHMCS already ships with time-based authenticator codes, Duo Security and YubiKey, and for some setups that's enough. The gaps are around it: not every client will install an authenticator app, a password reused from a leaked site still gets past a ban rule, and there's no simple way to treat the admin area and the client area differently. So the addon adds passkeys and more ways to receive a code, with each area configured on its own. What it adds Passkey sign-in for clients and admins, using a fingerprint, face scan, device PIN or a security key. Passkeys only work on your own domain, so they can't be typed into a fake login page. One-time codes after the password by email (WHMCS mail or a separate SMTP server just for codes), WhatsApp, an authenticator app, or backup codes. Separate switches for the client area and the admin area. You can require passkeys for staff without changing anything for clients, or the other way round. Trusted devices remembered for a number of days you choose, and users can revoke them themselves. Rate limiting per IP and per account, so an attacker rotating through addresses doesn't get a fresh set of attempts on a targeted account. Admin step-up: a registered admin passkey can confirm sensitive actions instead of retyping the password. Code limits you can tune. Lifetime, attempt limit and resend cooldown default to 300 seconds, 3 attempts and 30 seconds. An in-progress code login can be dropped if the IP changes mid-flow. An enrolled-users screen and activity log, so you can see who has passkeys or 2FA, and reset a user who lost their phone. Health checks for the licence, HTTPS, the relying party ID and the login template, plus updates delivered inside the module. Requirements and notes PHP with OpenSSL and cURL, and HTTPS on the live site (passkeys won't work without it). The relying party ID is your root domain, so passkeys work across its subdomains. Activating the addon patches the login templates, and deactivating it removes those patches. WhatsApp codes need our WhatsApp addon or your own MPWA gateway. Email and authenticator codes don't need either. It's sold separately and isn't bundled with any hosting plan. Pricing and trial ShoSecureAuth is for one domain-bound WHMCS install. The price and the 15-day free trial, which you start from the addon's License tab, are on the product page, and as an in-house product it carries a 7-day refund. Features, screenshots and a comparison with the built-in 2FA are on the ShoSecureAuth page for WHMCS passkeys and 2FA. If you try it, we'd like to hear how it fits your setup, especially if you run a mix of client and staff policies.

RedotPay Connect is a WHMCS payment gateway module: clients pay invoices in crypto, the gateway settles the funds to stablecoins and you can withdraw to a bank card or on-chain, no manual conversion step. Fee is 1% flat, no setup or monthly fee. KYB is required to go live. Module and Marketplace listing: https://marketplace.whmcs.com/product/9191-whmcs-crypto-payment-gateway-redotpay-connect Looking for a handful of hosts willing to install it on a staging client area and send feedback on setup, invoice flow, or anything that breaks, happy to credit founding testers and give direct support access while you're testing. Questions and feedback welcome here. RedotPay

Version: 1.0.2 Fixed: WHMCS 9.1 License Updated: Support for WHMCS 9.1 Updated: Improved IonCube Loader 15

Version 1.0.1 Added rendering support for themes that display warning HTML as literal text. Fixed: WHMCS 9.1 License Fixed: Domain registration and subdomain warnings displaying raw HTML and CSS. Fixed: Preserved the configured warning message and support department name. Fixed: Retained the Contact button, its configured label, and department ticket link. Fixed: Preserved formatted notices elsewhere. Updated the addon, manifest, and service versions to 1.0.1. Updated: Support for WHMCS 9.1 Updated: Removed support for WHMCS V8.12.x Updated: Improved IonCube Loader 15

This module has two options you can choose from: 1. If you use the All Page Option: When registering a new account (without placing an order), WHMCS would normally allow the customer to do anything, even without verifying their email address. With our module, after registration, they will be redirected to the page where they will have to verify their email. If the customer doesn't verify, they CANNOT access any part of their account (except Support Tickets and client details) until they have verified their email address. If they do not verify their email address within X days, then their account will automatically be closed. Admin can also manually mark the email as verified. As part of WHMCS's standard procedure, when a new customer orders a product/service, they will be asked to register before making the payment. After they have registered, they will be asked to verify their email address before proceeding to make payment (Credit Card Only). Once they have successfully verified their email address, then they will be able to proceed to payment - and only then. 2. If uses Checkout Option, then they need to verify they email before they place an order, and it will not store in the Database until they verify the email. If they don't verify, then they can not place an order. This module helps to stop many fraudulent emails, but allows legitimate emails Feature: Verification Type (Checkout or All Pages) Enable auto-termination for checkout and all page types Send sub-users an email verification after changing email Resend email after X days if the email address is not verified Auto-terminate after X days if the email address is not verified Manage bans, IP blocks, and Email Blocks history Ban IP for X days to ban the desired IP Ban Email Ban IP Admin can add Ban Email Provider Services Integrated Google reCAPTCHA v3 & Cloudflare Turnstile option to verify emails (Extra Security) Auto Inactivate account: Admin can set x days from module configuration, and the module inactivates the unverified client after x days of registration An option to delete an unverified account with no active order and its users after x days of registration. This will permanently delete the account from the WHMCS system Show Client IP Generate PINs using cryptographically secure randomness Rate limiting and abuse protection PIN configuration Anti-fraud configuration Email database blocking Settings and CAPTCHA configuration Administration and event logging Verification interface Mobile layout Account deletion timing Home bulk actions Deletion visibility Frequent deletion checks Deletion status wording For more information and Screenshots: Click Here Sale Price: Owned License: $29.99 USD. Order Here I have a Special offer at https://www.whmcsservices.com/halloween.php that is 25% to 35% off. Do You Need Custom Development For Your Business? Click Here Remember to check out also the list of our other new versions released since: WS Abandoned Cart v1.0.2 WS MailerLite v2.0.1 WS 2FA Security v2.0.2 WS WhatsApp Chat Support v1.0.3 Coming Soon: WS Close Account 4.0.0 WS Ticket Count Restriction 2.0.0 WS Trial Promotions 1.0.0 WS MailerSend with WhatsApp 2.1.0 Our Social Media: Twitter Here Facebooks Here Instagram Here LinkedIn Here

Based on the official WHMCS Upgrade Service description, the standard service primarily focuses on upgrading WHMCS itself, applying template updates to one custom theme, and preserving existing customizations where possible. However, it does not explicitly include a comprehensive compatibility review of custom hooks, order forms, custom developed addons, or 3rd-party modules. Nor does it guarantee that incompatible customizations will be updated or fixed. Your requirements go beyond a standard WHMCS upgrade, particularly since you're planning a staged upgrade with compatibility verification at each step. For a production environment with existing custom development, I would recommend working with an experienced WHMCS developer

Hello WHMCS community, We'd like to introduce HPanel (https://hpanel.net/), a modern self-hosted web hosting control panel built for hosting providers, and its WHMCS provisioning module. What the WHMCS module does - Automatic account provisioning, suspend, unsuspend and terminate - Package (plan) changes and password changes - Single sign-on from the WHMCS client area into HPanel - Client area integration - Works with WHMCS 8.x (PHP 7.4+) About HPanel - Clean, fast user and admin dashboards - Built-in security: ModSecurity WAF, malware scanning and Fail2Ban - Git deploy, file manager, DNS, email, databases and SSL tools - Easy migration from legacy control panels - One flat license per server Pricing (current offer) - Starter: $9/mo (was $15), up to 20 accounts - Growth: $17/mo (was $28), up to 50 accounts - Business: $24/mo (was $40), up to 100 accounts - Enterprise: $37/mo (was $62), unlimited accounts - Save 15% with yearly billing Links - Buy now: https://hpanel.net/pricing.php - Features: https://hpanel.net/features.php - WHMCS module docs: https://hpanel.net/docs.php?section=whmcs - Support: https://hpanel.net/support.php Questions and feedback are welcome in this thread. HPanel Team, Hostlic Webhosting Ltd

We are having an issue with the new dynamic Stripe gateway where it adds an extra "failed" entry in the transaction history status. This becomes a problem as a duplicate "Credit Card Payment Failed" email is then sent. On the legacy Stripe module it would only post the "declined" entry and was working properly. Does anyone know why this might be happening? Are others seeing this as well? Any help is greatly appreciated!

I have experienced the same issue on the default Blend theme. Start typing, the cursor jumps down to the status box and typing continues there. Not aware of any fix at the moment unfortunately.

Update: HostingSupport.ai is now listed on the WHMCS Marketplace, compatible with WHMCS 8.8 to 9.0: https://marketplace.whmcs.com/product/9180-hostingsupportai-ai-agent-for-whmcs-tickets-live-chat Feedback and questions are very welcome here.

Hello, We are running WHMCS 8.13.5 in production. We want to update in two steps: 1. Stay on the 8.13 branch and apply the maintenance updates in order: first 8.13.6, then 8.13.7. 2. After that update is complete and verified, move to WHMCS 9.1. If we purchase the official WHMCS Upgrade Service, does that service include checking compatibility of our existing custom development and third-party modules for both steps, or does it only update WHMCS core? Please confirm: 1. Whether the service can apply 8.13.6 and 8.13.7 first, and 9.1 afterwards, or whether it only upgrades straight to 9.1. 2. Whether custom hooks, custom order-form themes, and local addons are reviewed as part of the service for both versions. 3. Whether third-party registrar and payment gateway modules are included in that compatibility check. 4. What happens if something custom is not compatible with 8.13.7 or with 9.1. 5. What you need from us to confirm this before we contract the service. Thank you.

Hi everyone, We build WHMCS themes, order forms and addons. This is our first post here, so I'll start with the product we spend most of our time on. THE PROBLEM The default WHMCS order flow spreads a purchase across up to five pages — product selection, configuration, domain, review, then payment. Every page transition is somewhere a customer can leave, and most hosts never see where they lost them. WHAT IT DOES One Step Order Form replaces that flow with a single page: • Product configuration, domain search, account details and payment on one screen • Live price updates as options change — no page reloads • Domain availability and suggestions inline, so a taken .com does not end the order • All your enabled payment gateways shown on the same page • Mobile-first layout (most hosting orders now start on a phone) • Works with your existing products, pricing, promotions and gateways — no re-setup COMPATIBILITY • WHMCS 8.x • No core file edits — survives WHMCS updates • Tested against current WHMCS releases; we publish per-release compatibility DEMO Click through a real install, no signup: https://billing.hostmodules.com/checkout.php?spage=product&group=vps-hosting&carttpl=HmSingleOrderForm PRICING • Single Site — $299/year (2-year and 3-year terms available at a lower yearly rate) • Developer License — $1,499/year • Your install keeps working if you stop renewing; renewal covers updates and support • 7-day money-back guarantee Product page: https://hostmodules.com/products/whmcs-one-step-checkout Happy to answer questions in this thread — including the awkward ones about compatibility with specific modules. If you want something tested against your setup before buying, say so here and I'll tell you honestly whether it fits. Tasfin Host Modules

That is a very valid point regarding the conflict between privacy regulations (GDPR) and financial auditing requirements (like tax and accounting retention laws). Anonymization / Data Redaction is indeed the industry standard for balancing this. Instead of a hard destroy, the module can pseudonymize the client profile—stripping out personally identifiable information (PII) like names, emails, addresses, and phone numbers while preserving the isolated financial invoices, transaction rows, and tax logs required by law. We can introduce this as an advanced "GDPR Anonymize / Redact" mode alongside the existing Close and Delete options in the upcoming release.

Closing Account is OK with GDPR, but Deleting Account is not OK for financial history and other records. Maybe instead of Destroying the records, redact them due to GDPR, after user request. You will cover both cases.

Hi everyone, I'm Tasfin, founder of Host Modules. We're a small team building commercial software for hosting businesses running WHMCS — client-area themes, a single-page order form, a WordPress↔WHMCS bridge, and a few smaller addons around authentication and notifications. I've been reading here for a while and decided it was time to take part properly rather than just lurking. Most of our working time is spent inside WHMCS order forms, templates and hooks, so those are the areas where I can probably be most useful in the support boards — checkout behaviour, template customisation that survives updates, login and upgrade problems, and WordPress integration. I'll keep anything promotional to the Third Party Add-ons section where it belongs. Here I just wanted to say hello and introduce myself. If you have a WHMCS problem in any of the areas above, tag me — I'm happy to help whether or not it has anything to do with what we sell. Tasfin Host Modules · hostmodules.com

Both options are supported depending on your choice in the settings: Close Account (Soft Delete): This deactivates the account, terminates/cancels active services, and marks the status as closed without destroying any database records. This is ideal if you need to retain financial history, invoice records, and support logs for tax or audit compliance. Delete Account (Destroy / Permanent Wipe): This runs a complete deletion process, removing the client profile and wiping their records directly from WHMCS. This is designed for GDPR compliance and full data erasure requests. You can toggle between Close or Delete mode at any time directly from the module settings to match your business requirements.