All Activity

Thanks for clarifying that, Vaishnaviiii — the override point is easy to miss if you assume the option adds on top of the base limit. One practical tip is to word the option clearly on the order page, for example stating the total limit that will apply, so clients are not surprised by a bill later. It is also worth testing with a test order first and checking the generated invoice, since that quickly shows whether the limit behaved as expected. Did you end up setting the option to the combined total you wanted, or did you go with a custom approach for additive limits?

Give clients the ability to request account closure or deletion from the client area — with password confirmation, optional captcha, an optional emailed verification code, a grace period they can extend once, client and admin email notifications, and automatic execution by the daily cron. Before they go, an exit survey captures why they are leaving, matching answers can trigger a win-back discount offer, and pre-closure safeguards flag unpaid invoices, open tickets, pending transfers, active services and leftover credit. High-value requests can be held for manual admin approval, a finance guard blocks or warns on unpaid balances while leftover credit is kept, applied to invoices or forfeited, and the analytics dashboard tracks pending requests, win-backs, churn reasons and grace distribution with CSV exports throughout. Requests are managed from the admin area, every action is audit-logged with actor attribution and IP, sub-user access is permission-controlled, and the whole flow runs in native WHMCS modals on any template, with or without sidebars. Owned License ($40.00) - https://www.hardsoftcode.com/cart/link/deleteclose-account-for-whmcs/owned Source Code License ($280.00) - https://www.hardsoftcode.com/cart/link/deleteclose-account-for-whmcs/source Features Client self-service Sidebar link (Close/Delete My Account, translated) in the configured panels — Account and/or Your Profile, primary and secondary sidebars — with a configurable text color. WHMCS-native modal flow: password confirmation (with optional reCAPTCHA) → warning/confirm step → done notice. No custom dialog libraries. Scheduled-request notice: clients who log back in while a request pends get a locked modal (date + notice) that cannot be dismissed — owners choose Confirm or Cancel in the footer; sub-users without permission get Logout only. Deep link for sidebar-less templates: any client-area URL ending in #deleteaccount (e.g. clientarea.php#deleteaccount) opens the modal — paste it into any custom menu. Sub-user permissions: owners can flag individual users on the /account/users//permissions page (new checkbox, same styling); flagged users may run the flow like owners. Grace period & execution Configurable grace period in days (close or delete mode); the request date and end date show in the admin grid with remaining-days countdown. Daily cron executes due requests via closeclient / deleteclient and prunes the activity log per retention. Emails: client notice + admin notification (with client details and admin link) on scheduling, using five seeded templates (close/delete notices + verification code) with merge fields registered in the editor. Admin & audit Analytics dashboard (landing tab): KPI cards (pending, due today, win-backs, completed), cancellation-trend line chart with range switcher, churn-reason doughnut, grace-distribution bar, summary CSV export. Requests grid (DataTables): client link, request/end dates, remaining days, requested/canceled badges, token-protected cancel/delete with SweetAlert2 confirms. Client summary alert: any client profile with a live request shows a red banner (schedule date, countdown, approval/extension state) linking to the Requests tab. Activity Log: every settings save, admin cancel/delete and client schedule/acknowledge/cancel, attributed to admin (username), owner (client name) or sub-user (name), with per-actor colors, request IP + browser user-agent, DataTables search/sort/paging and day-based retention. AJAX settings with top-right toast confirmations and session-expiry handling; MiniColors picker for the sidebar link color. Every save writes one log entry listing exactly what changed (Days 15 > 30; Finance Guard warn > block). Admin homepage widgets: pending queue (stats + grace bar) and win-back pulse (stats + churn doughnut); enable them from the homepage Customize panel. Changelog v2.0.0 Fresh rewrite on the modern addon architecture (namespaced classes, Smarty admin + client templates, WHMCS-native modals). Expansion pillars (shipped) Exit survey (optional/required, stats + recent + DataTables). Win-back offers (reason-matched promo with claimed/dismissed tracking). Grace extension (+N days once, badge + modal notice, legacy-safe columns). Pre-closure safeguards (warn/block scan: invoices, tickets, transfers, services, credit; Flags column). Admin review (high-value requests held for approval: credit/services thresholds, Review badge + Approve action, locked client notice, cron skips unapproved). CSV exporter (requests + survey answers, Excel-friendly, logged). Finance guard (warn/block on unpaid balances at request + execution time; leftover credit kept, applied to invoices, or forfeited). Email verification code (optional 6-digit second factor, auto-sent on step open, 10-minute expiry, 5-attempt lockout) + request IP and browser user-agent on every activity-log entry. Analytics dashboard (default landing tab: KPI cards, Chart.js trend/survey/grace charts with range switcher, summary CSV export; cron logs completions). Client summary alert (red banner on profiles with a live request) + per-change settings audit (Days 15 > 30; secrets masked). Admin homepage widgets (pending queue + win-back pulse via AdminHomeWidgets, each with stats and a mini chart). New features WHMCS-modal request flow (password → confirm → done; locked scheduled notice). Analytics dashboard as the default landing tab (KPI cards, Chart.js trend/survey/grace charts, summary CSV export). Sub-user permission checkbox on the core permissions page with owner-or-flagged enforcement everywhere. Sidebar-less deep link (#deleteaccount) with copy button in Settings. Activity log with admin/owner/sub attribution, retention and cron pruning. Sidebar link color picker; Account/Your Profile panel toggles across both sidebars. AJAX admin (toasts, SweetAlert2 confirms, DataTables grids, MiniColors). Updates & improvements Legacy mod_* data auto-migrates on activation without overwriting. Email templates seeded only when missing (re-activation can't duplicate). Cron condition fixed (due + pending only); merge-field editor guards. Captcha remote-IP, unserialize and token handling hardened. Fixes Late sidebar priority so the Account panel exists before linking. Beacon-era click work replaced by modal POSTs; session-expiry redirects detected. Captcha render races, footer button timing, modal lifecycle resets.

This is malformed <a href='href=https://socialbee.com/calendar/'> link found in /www/wwwroot/orders.systron.net/lang/farsi.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/romanian.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/ukrainian.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/russian.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/arabic.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/english.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/hebrew.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; /www/wwwroot/orders.systron.net/lang/portuguese.php:$_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='href=https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; The only change is removing the extra href= inside the single quotes. Solution: cd /www/html/WHMCS/lang/ sed -i "s|href='href=https://socialbee.com/calendar/'|href='https://socialbee.com/calendar/'|g" english.php farsi.php romanian.php ukrainian.php russian.php arabic.php hebrew.php portuguese.php

Enabling Configuration → System Settings → General Settings → Localisation With Dynamic Field Translations enabled, Product Duplicate runs until the PHP-FPM/Nginx timeout. PHP-FPM slowlog shows execution repeatedly inside WHMCS core classes: WHMCS\Language\Loader\DatabaseLoader, DynamicTranslation, Sanitize::purifyHtml(), and HTMLPurifier. With it disabled, the exact same operation completes within seconds. WHMCS Admin: Configuration → System Settings → Products/Services Action: Duplicate Product Dynamic Field Translations ENABLED: - request runs >300 seconds - ends in 504 Gateway Timeout Dynamic Field Translations DISABLED: - same product duplicates within seconds PHP-FPM slowlog: script_filename = .../ordadmin/configproducts.php Stack: convertFromUTF8() HTMLPurifier::purify() WHMCS\Input\Sanitize::purifyHtml() WHMCS\Language\DynamicTranslation::getTranslationAttribute() WHMCS\Language\Loader\DatabaseLoader::load() Symfony Translation\Translator...

Can't say for sure if your installation isn't compromised or that WHMCS has changed something in the licensing server that broke your really old license, but that IP appears fine for WHMCS.

Hi everyone, We're running a festive sale at WHMCS Global Services to celebrate Diwali and Halloween. If you've been planning to add new features to your WHMCS setup, upgrade your client area, or try one of our modules, this is a good time to take a look. Here are the offers available during the sale: 20% OFF on monthly plans — Use code FESTIVE20 30% OFF on annual plans — Use code FESTIVE30 50% OFF on open-source code — Use code FESTIVE50 WHMCS Themes If you're looking to refresh the design of your WHMCS client area or admin interface, check out our themes and templates: HostX WHMCS Theme CloudX WHMCS Theme TwentyX WHMCS Theme AdminX WHMCS Admin Theme ClientX WHMCS Template One Step Checkout VueJS + WHMCS One Step Checkout WHMCS Modules We also have modules for hosting automation, domain management, billing, and infrastructure provisioning. Cloudflare WHMCS Module VMware WHMCS Module Proxmox VPS WHMCS Module Passkey WHMCS Module Qatar .qa Domain Registrar Module .in Registry Domain Registrar Module Account Statement Module WHMCS GST Module - India Partial Payment WHMCS Module Pay Invoice without login WHMCS Module These are just some of the products available. We offer many more WHMCS modules, themes, and integrations for hosting businesses. Browse our products: https://whmcsglobalservices.com/ Have a WHMCS project in mind? Share your requirements and hire our WHMCS developers to bring your ideas to life. To use the offer, enter the relevant coupon code at checkout. Please check the product page for applicable plans and licensing terms. Wishing everyone a happy Diwali and a great Halloween!

GST Tax Module V3.0.3 Released We've released GST Tax Module V3.0.3 with fixes for invoice listings and improvements to CSV report exports, making it easier to manage invoices and download reports containing large datasets. Changelog Fixed invoice listing issues in the admin area, with or without filters applied. Optimized CSV exports for large datasets. Resolved server timeout issues during report downloads. Avail 30% flat discount on Annual license and 50% on Open source version.

OVH Dedicated & VPS Server Module V8.0.9 Released The latest version of our OVH Dedicated & VPS Server Module includes improvements to product availability, automated backups, and the checkout process, along with compatibility updates for WHMCS 9.1 and PHP 8.4. Changelog Fixed product-fetching issues across different servers and locations. Enabled automated backup functionality in the client area through direct API integration. Improved product visibility based on location availability. Updated the checkout location dropdown to display only available locations. Added support for WHMCS 9.1. Added support for PHP 8.4. Buy Now and avail 30% flat discount on Annual license and 50% on Open source version.

OVH Dedicated & VPS Server Module V8.0.9 Released The latest version of our OVH Dedicated & VPS Server Module includes improvements to product availability, automated backups, and the checkout process, along with compatibility updates for WHMCS 9.1 and PHP 8.4. Changelog Fixed product-fetching issues across different servers and locations. Enabled automated backup functionality in the client area through direct API integration. Improved product visibility based on location availability. Updated the checkout location dropdown to display only available locations. Added support for WHMCS 9.1. Added support for PHP 8.4. Buy Now and avail 30% flat discount on Annual license and 50% on Open source version.

Cloudflare Module V5.5.1 Released We've released Cloudflare Module V5.5.1 with fixes for missing Zone ID issues and the EmitterException error, along with improved PHP compatibility and support for newer WHMCS and PHP versions. Changelog Fixed an issue that occurred when the Cloudflare Zone ID was missing. Resolved the EmitterException error. Improved PHP compatibility. Added support for WHMCS 9.1. Added support for PHP 8.4. Buy Now: https://whmcsglobalservices.com/whmcs-cloudflare-module/ Avail 30% flat discount on Annual license and 50% on Open source version.

Cloudflare Module V5.5.1 Released We've released Cloudflare Module V5.5.1 with fixes for missing Zone ID issues and the EmitterException error, along with improved PHP compatibility and support for newer WHMCS and PHP versions. Changelog Fixed an issue that occurred when the Cloudflare Zone ID was missing. Resolved the EmitterException error. Improved PHP compatibility. Added support for WHMCS 9.1. Added support for PHP 8.4. Buy Now: https://whmcsglobalservices.com/whmcs-cloudflare-module/ Avail 30% flat discount on Annual license and 50% on Open source version.

I bought a permanent license about 10 years ago, and still using in with WHMCS 6.1 However, a few days ago, it's no longer working as it is not connection to the WHMCS Licensing Server. Connection Error WHMCS has not been able to verify your license for the last few days. Before you can access your WHMCS Admin Area again, the license needs to be validated successfully. Please check & ensure that you don't have a firewall or DNS rule blocking outgoing connections to our website. Error below when performing connection test. My webhost company was telling me that this is due to recent changes to WHMCS, and I need to upgrade my WHMCS. Is this true? Testing Connection to whmcs.com... URL resolves to 104.20.36.75 Error: The IP whmcs.com is resolving to the wrong IP. Someone on your server is trying to bypass licensing. You'll need your host to investigate and fix.

Thank you for your reply. We just wanted to make sure there was no patch needed for WHMCS itself..

Hi everyone, We've released the HostingSupport.ai addon module for WHMCS (8.8+). It connects WHMCS to an AI support agent built specifically for hosting companies. What it does: - Answers WHMCS tickets in the customer's language, using their invoices, services and domains. - Per department, you choose: internal note only, draft for approval, or automatic reply. - Live chat in the client area with handover to your team (chats nobody answers become tickets). - Diagnoses DNS, SSL, HTTP 500/508 errors, full disks, resource limits, blocked IPs and malware. - Fixes common issues on cPanel, Plesk and DirectAdmin: PHP version changes with automatic rollback, SPF/DKIM/DMARC, mailboxes, databases, FTP, DNS records and cron jobs. - WordPress and PrestaShop debugging, JetBackup restores prepared for one-click confirmation. Safety first: - No root password. Lightweight agent with a closed list of actions, or a control panel API token only. - Permissions per action (off / automatic / approval required), backup before every change, 6-year audit log. - EU hosted, GDPR, personal data anonymised. Pricing: the module is included with your account; the service is pay-per-reply (from $0.15), with $5 free credit on signup and no card required. After signing up, you download the module from your HostingSupport.ai panel. Website: https://hostingsupport.ai/?utm_source=whmcs_community&utm_medium=community&utm_campaign=launch Happy to answer any questions here, including technical ones about how the server agent works.

Hi there, CVE-2026-109618 and CVE-2026-109619 are vulnerabilities in the PHP interpreter itself, not in WHMCS. No WHMCS code is affected, and no WHMCS patch is required. The remediation is entirely at the PHP level, so this must be addressed by you or your hosting provider through PHP updates. Impact Any server running an affected PHP version may be vulnerable regardless of the application being hosted. Therefore, you should consider your WHMCS server affected until the underlying PHP installation has been updated. What you need to do Please update to the patched PHP version for your branch as soon as your operating system vendor, control panel provider (for example cPanel EA-PHP, CloudLinux, Plesk), or package repository makes the update available. After updating PHP, be sure to restart any relevant services, such as PHP-FPM, Apache, or Nginx, as appropriate for your environment. While no WHMCS changes or updates are required to mitigate these vulnerabilities, updating PHP is required. Please work with your server administrator or hosting provider to ensure that all affected PHP versions on your server are updated as soon as practical. Feel free to contact us if you have any questions or concerns.

13 years later..... Still want to be able to rename [Ticket ID: xxx] to become [Enquiry ID:] or even just [ID: 123]

Hello. As you may be aware, on Oct. 21st, 2 high-risk CVEs were published for PHP (CVE-2026-109618 and CVE-2026-109619). Since these CVEs are quite critical, I want to know if WHMCS will launch an update or if we just need to update PHP on our server. I was unable to find any publication or disclosure on the WHMCS blog, news posts, or channels. Just making sure we are not changing settings around or updating stuff when it's not needed.

WHMCS have just launched v9.1 which sees many new features. We have updated all of our themes & modules with full support and created guides on how to update your existing product. Learn More: https://www.zomex.com/company/announcements/whmcs-template-update-v9-1/

WHMCS have just launched v9.1 which sees many new features. We have updated all of our themes & modules with full support and created guides on how to update your existing product. Learn More: https://www.zomex.com/company/announcements/whmcs-template-update-v9-1/

WHMCS have just launched v9.1 which sees many new features. We have updated all of our themes & modules with full support and created guides on how to update your existing product. Learn More: https://www.zomex.com/company/announcements/whmcs-template-update-v9-1/

Hi @Damo, The notice dismissal and remember me are cookie-based. Check your browser settings aren't blocking the cookie from your domain. If the cookie is blocked then you'll see admin notices and login prompts once the PHP Session has expired.

No worries, they will check and force on every update, so you're still going to get this, like it or not.

Invoice immutability is disabled. We strongly recommend updating your workflows to eliminate the need to edit non-Draft invoices No matter how many times we dismiss this message, via the X it shows every time we login. Also, the admin login is not staying set. Why are admins required to login each time?

WHMCS 9.1 is here! The latest release is now available and supported for use in production environments, bringing new ways to manage billing, simplify routine maintenance, and build more flexible customer experiences. Whether you want greater control over invoice handling, an easier way to get started with MarketConnect, or less manual work keeping your installation up to date, WHMCS 9.1 has something for you. The release also introduces PHP 8.4 support and expands the possibilities for...View the full blog post

Just installed the update and it sure did try to install automatically . But thankfully it failed to setup. Note: I was forced to accept EULA before i was able to get back into the billing system.