All Activity

Yes, using a hook would be a better solution if WHMCS does not address this issue. However, I believe this should be fixed in an upcoming WHMCS release.

Nice find on the Chrome password manager, d9hosting. That also explains why some people never see it: it only hits staff who have the admin login saved in Chrome. One suggestion on ThemeMetro's fix: rather than editing viewticket.tpl in the Blend template, drop the same script into a hook. Template edits get overwritten on the next WHMCS update, while a file in includes/hooks/ survives updates and you don't have to remember to re-apply it. Something like this: <?php // includes/hooks/ticket_status_autofill_fix.php add_hook('AdminAreaFooterOutput', 1, function ($vars) { if (basename($_SERVER['SCRIPT_NAME']) !== 'supporttickets.php') { return ''; } return <<<'HTML' <script> // paste ThemeMetro's script body here, from "// Prevent Chrome Password Manager autofill" down to the setTimeout lines </script> HTML; }); Their script already returns early when the status field isn't on the page, so it's harmless on the ticket list. After adding it, hard refresh a ticket (Ctrl+Shift+R) and check the status box no longer gets the username dropped into it. Worth adding d9hosting's finding to a WHMCS ticket as well, so the status field markup gets fixed in core, since this affects anyone using Chrome's built-in password manager.

WHMCS 8 removed the ability for administrators to change a user's password from the admin area. Change User Password puts it back, safely and with every action recorded. Change a password straight from the client profile or from the Manage Users dropdown, generate a strong password with one click, and optionally email it to the user so they can log in right away. Owned License ($30.00) - https://www.hardsoftcode.com/cart/link/change-user-password-for-whmcs/owned Source Code License ($200.00) - https://www.hardsoftcode.com/cart/link/change-user-password-for-whmcs/source Why you need it Users ask support to reset their password, and WHMCS no longer lets you do it. Staff can reset passwords without ever needing the old one. Every change is logged with who did it, when and from where. Highlights Two places to change a password: the client profile tab and the Manage Users dropdown, using the native WHMCS modal. Built-in password generator: configurable length (8–64) and character types, using a cryptographically secure random source. Optional email to the user: sent with a ready-made Change User Password template. Dashboard and activity log: KPI cards, a reset trend chart, and a full audit trail with IP and browser. Role-based access: uses the built-in WHMCS Access Control list, enforced server side. Secure by design: POST-only, CSRF-protected endpoints, and no passwords in the logs. Works on WHMCS 8.x and 9.x. Admin area only, no client-area changes. What's New This release makes the module's modal endpoints POST-only with CSRF validation. Opening an endpoint URL directly in the browser now returns the standard WHMCS HTTP Method Not Allowed page, just like WHMCS core routes. CSRF checks also go through one shared, fail-closed helper, so the modal shows a clean error instead of a raw response. Access control now uses the built-in WHMCS Access Control list, and existing role lists are migrated automatically. The dashboard has been redesigned with total, monthly and daily reset counters, a quick action bar, a 7 / 30 / 90 day or all-time filter, and a new Reset Trend chart. Endpoints are now root-relative so they work from WHMCS 9 pretty admin URLs, and security was hardened across all endpoints and files. You can now choose which character types the password generator uses (letters, numbers and symbols), and passwords are generated with a cryptographically secure random source. This release also fixes the Generate button and the CSRF token on the save form, so new passwords save correctly. Features Change a password Change a password from the client profile tab Change a password from the client profile → Users tab Change a password from Clients → Manage Users One click to change a password in a native WHMCS modal Send an email notification to the user with the new password Works with WHMCS 9 pretty URLs Password generator Configurable password length (8–64) Configurable character types: letters, numbers, symbols At least one character of every selected type Cryptographically secure random generation Copy and Insert buttons Admin and audit Dashboard with total, monthly and daily reset counters Reset Trend chart with 7 / 30 / 90 day and all-time filters Activity log with actor, IP and browser user-agent Settings history that names every changed value Configurable log retention with automatic cleanup Security and access Role-based access control using the WHMCS Access Control list POST-only, CSRF-protected endpoints No passwords stored in the activity log or the email log No changes to WHMCS core files Email Ready-made Change User Password email template Changelog v2.4.1 Added: Three dashboard KPI cards: Total Resets, This Month and Today's Resets Added: Quick action bar: generate a test password, find a client, settings Added: 7 / 30 / 90 day and all-time activity filter Added: Reset Trend chart, capped at 366 days for All Time, with Chart.js 4.4.1 bundled (no CDN) Added: Password Characters setting: choose letters, numbers and symbols Added: Every selected character type is guaranteed in each generated password Added: Dashboard, Activity Log (DataTables) and admin header navigation Added: Audit log with IP and browser Added: Per-change settings history Added: AJAX settings with toast messages Updated: Modal body (a=index) is now POST-only with a CSRF token, like WHMCS core routes Updated: Opening an endpoint URL directly in the browser returns the WHMCS HTTP Method Not Allowed page Updated: Access Control now uses the built-in WHMCS role list, and the module's own role field was removed Updated: Existing role lists are migrated automatically, and an empty role list denies access, matching WHMCS Updated: Dashboard redesigned, with the activity feed sorted by date, capped at 10 rows and showing actor badges Updated: Endpoints are root-relative, so they work from WHMCS 9 pretty admin URLs Updated: Password generation is now cryptographically secure (random_int() + Fisher-Yates) instead of str_shuffle() Updated: Modern rewrite on the HSCode architecture: namespaced controllers and Smarty admin templates Fixed: Direct GET to a=store and a=password now returns the WHMCS 405 page instead of a bare JSON error Fixed: GET responses no longer mint or echo a CSRF token Fixed: Dashboard counters now count password changes only, so settings saves no longer inflate them Fixed: Generate button now works Fixed: CSRF token on the save form, so new passwords save correctly Fixed: Generator modal no longer reuses WHMCS element IDs Fixed: Length warning and pre-filled password Improved: CSRF validation is centralised in one fail-closed helper that returns a clean JSON 403 to the modal Improved: a=store and a=password use the same CSRF helper Improved: Access is enforced consistently in the UI and the endpoints Improved: Security hardening: POST-only password generation, password saves and settings saves, restricted controller dispatch, password length and NUL byte checks, direct file access blocked, .htaccess rules, and generic activation and deactivation errors

That string ships in WHMCS's own language files (it's the FAQ text on the MarketConnect SocialBee store page), which is why grep finds it in every lang file. The value has "href=" doubled inside the quotes, so browsers treat it as a relative link and the "calls" link ends up pointing at a path on your own WHMCS domain instead of socialbee.com. Your sed fix works, but I wouldn't leave it there: lang/english.php and the other core lang files are replaced on every WHMCS update, so the broken link quietly comes back. Language overrides survive updates: 1. Create the folder lang/overrides/ if it doesn't exist, then a file lang/overrides/english.php that starts with <?php 2. Add just the corrected key: $_LANG['store']['socialbee']['faq']['a2']['i2'] = "Support through <a href='https://socialbee.com/calendar/'>calls</a>, chat, or email communication. We’re one of the few social media tools still offering on-call support."; 3. Do the same for each language you actually have enabled (lang/overrides/farsi.php, lang/overrides/arabic.php and so on). Override files only need the keys you're changing; everything else still loads from the main file. Then load the SocialBee store page with that language selected and hover the link to confirm it now goes to socialbee.com. It's also worth reporting it to WHMCS as a bug so it gets corrected in the shipped files, since every install with MarketConnect has the same broken link.

As a temporary fix, you may edit the viewticket.tpl file manually and replace the last script block with the updated code in blend template. From <script> $(document).ready(function() { if (typeof aiRating !== 'undefined') { aiRating.init(); } }); </script> To <script> $(document).ready(function() { if (typeof aiRating !== 'undefined') { aiRating.init(); } // Prevent Chrome Password Manager autofill in Status Selectize function fixStatusAutofill() { var statusSelect = document.querySelector( '#frmAddTicketReply select[name="status"].selectized' ); if (!statusSelect) { return; } var statusInput = statusSelect.nextElementSibling ? statusSelect.nextElementSibling.querySelector('input') : null; if (!statusInput) { return; } statusInput.setAttribute('autocomplete', 'off'); statusInput.setAttribute('data-lpignore', 'true'); statusInput.setAttribute('readonly', 'readonly'); function clearInvalidValue() { var currentValue = statusInput.value.trim(); var validOption = Array.from(statusSelect.options).some(function(option) { return option.text.trim().toLowerCase() === currentValue.toLowerCase(); }); if (currentValue && !validOption) { statusInput.value = ''; statusInput.dispatchEvent(new Event('input', { bubbles: true })); } } clearInvalidValue(); if (!statusInput.dataset.autofillFixed) { statusInput.addEventListener('focus', function() { clearInvalidValue(); statusInput.removeAttribute('readonly'); setTimeout(clearInvalidValue, 100); }); statusInput.dataset.autofillFixed = 'true'; } } fixStatusAutofill(); setTimeout(fixStatusAutofill, 500); setTimeout(fixStatusAutofill, 1500); }); </script>

Hi So what prompted this was my AI automation. I have AI compile details on security updates several times a day - giving us prompt warning of any action we need to take to secure our servers. Part of the work it does is checking all the relevant places for updates, mitigation steps etc for our entire stack. The AI stumbled upon this blog post and set alarm bells off. We checked the link it provided and sure enough - there it was a page published about Lagom and others on the 21st. So yeah, perhaps dont pubish till its ready.

Indeed that is the case, strange that other clients do not have this issue, maybe I switched too fast to a new solution that is not working properly, yet.

Hello WHMCS Community, We’re introducing Weeby Studio — a complete WHMCS theme with a visual website builder, custom client area, and matching orderform and checkout, created by Hostk. The idea is simple: give hosting businesses a consistent brand experience and practical control over their website. Your pages, product presentation, customer workspace, and checkout share one design, with a dedicated Studio inside WHMCS to make it your own. Your hosting website. Your brand. Your Studio. Meet the Visual Studio Update your website from a focused visual workspace inside the WHMCS administration area. Edit visually: change website text, images, links, buttons, and supported styling. Build your pages: create or duplicate public pages, add content blocks, and arrange editable sections. Find every detail: navigate page structure through Pages and Layers. Manage your assets: upload images and replace editable visuals. Preview across devices: review desktop, tablet, and mobile layouts. Control shared elements: customize website navigation, headers, footers, and brand settings. Manage on-page SEO: edit browser titles, search descriptions, and image alternative text. Publish when ready: save an unpublished draft, review your changes, then publish. Keep a recovery path: export editable project backups and revisit saved published versions. Everyday content changes can be made in the visual editor, while native WHMCS forms, live prices, permissions, and transactions retain their original behavior. One design, from first visit to checkout Weeby Studio includes three connected parts of your customer experience: 1. Your public website A responsive hosting website with service landing pages, product presentations, comparison sections, and shared navigation. 2. Your client area A branded customer workspace for services, domains, invoices, support tickets, account information, and everyday account tasks. 3. Your orderform A matching product selection, configuration, cart, and checkout experience using native WHMCS ordering. The result is a consistent visual identity as customers move between your website, their account, and their next purchase. 23 starting pages. Room for your own ideas. The included public collection contains 23 pages, including 14 service landing pages, a homepage, service directory, and policy pages. Hosting & compute: Web Hosting, Cloud Hosting, Reseller Hosting, VPS Hosting, Dedicated Servers, and Game Servers. Business & security: Domains, Professional Email, SSL Certificates, and VPN. Expert services: Web Design, Backup & Recovery, Website Migration, and Managed Services. Customize the included content or create additional public pages through the Studio. 12 color palettes + your own brand colors Start with the original Weeby blue, navy, and white identity, choose one of 12 coordinated palettes, or create a custom palette. Set your brand accents, buttons, navigation, headings, text, backgrounds, surfaces, and borders. Customize your logo, typography, content width, and button corners from the shared design controls. Supported bundled visuals and the default favicon follow the selected palette. Your uploaded photos, custom logo, and custom favicon keep their original artwork. Product presentation connected to WHMCS Your real catalog stays central to the website. Connect website plan slots to specific WHMCS products or product groups. Display product names, descriptions, prices, and available billing cycles from WHMCS. Use the currencies and pricing configured in your installation. Customize supported CPU, RAM, storage, transfer, and other resource display labels. Presentation labels remain separate from the actual service specifications and allowances defined in WHMCS. A client area that feels part of your brand The custom client area brings key customer tasks into a coordinated layout: Dashboard with service overview and account updates. Sidebar navigation and account shortcuts. Product and service management screens. Domain listings and supported management actions. Invoices, billing information, and payment-related account views. Support tickets, Knowledgebase, and announcements. Login, registration, password recovery, and account details. Available actions follow the customer’s permissions and your enabled WHMCS functionality. Checkout with the details customers need The matching orderform supports product configuration, available billing cycles, domain choices, configurable options, add-ons, and guest or existing-customer checkout. Its itemized order summary presents the information supplied by WHMCS, including products, domains, selected options, billing periods, and recurring charges where available. Native discounts, taxes, credits, and totals remain authoritative. Multilingual content. RTL & LTR layouts. Translate public website content, navigation, and supported theme labels through the Studio, with a reading direction for each language. Prepare English LTR and Arabic RTL presentations, while native account and checkout fields use your installed WHMCS language packs. Language and currency controls follow your WHMCS configuration. Installation & documentation The package includes the website theme, matching orderform, Studio administration addon, and English and Arabic HTML documentation. Installation guidance covers activation, branding, products, languages, publishing, updates, and recovery. Editable project backups, saved published versions, and factory design recovery tools help you manage future changes. Weeby Studio requires an existing, licensed, self-hosted WHMCS installation. Confirm compatibility with your WHMCS release before purchasing. Hosting, WHMCS licensing, payment gateways, registrars, and provisioning services are configured separately. Explore Weeby Studio Live website demo https://hostk.com/weeby-demo/ Live Client Area demo https://hostk.com/weeby-demo/clientarea.php Email Address: test@hostk.com Password: test Special Price: $49.99 USD — reduced from $120 USD One-time purchase. Website-bound activation for one installation. Get Weeby Studio https://hostk.com/weeby/ We’d love to hear your feedback on the visual Studio, the customer workspace, and the ordering experience. Questions are welcome in this thread. Weeby Studio by Hostk Your website. Your client area. Your checkout. One connected brand.

Hello WHMCS Community, We’re introducing Weeby Studio — a complete WHMCS theme with a visual website builder, custom client area, and matching orderform and checkout, created by Hostk. The idea is simple: give hosting businesses a consistent brand experience and practical control over their website. Your pages, product presentation, customer workspace, and checkout share one design, with a dedicated Studio inside WHMCS to make it your own. Your hosting website. Your brand. Your Studio. Meet the Visual Studio Update your website from a focused visual workspace inside the WHMCS administration area. Edit visually: change website text, images, links, buttons, and supported styling. Build your pages: create or duplicate public pages, add content blocks, and arrange editable sections. Find every detail: navigate page structure through Pages and Layers. Manage your assets: upload images and replace editable visuals. Preview across devices: review desktop, tablet, and mobile layouts. Control shared elements: customize website navigation, headers, footers, and brand settings. Manage on-page SEO: edit browser titles, search descriptions, and image alternative text. Publish when ready: save an unpublished draft, review your changes, then publish. Keep a recovery path: export editable project backups and revisit saved published versions. Everyday content changes can be made in the visual editor, while native WHMCS forms, live prices, permissions, and transactions retain their original behavior. One design, from first visit to checkout Weeby Studio includes three connected parts of your customer experience: 1. Your public website A responsive hosting website with service landing pages, product presentations, comparison sections, and shared navigation. 2. Your client area A branded customer workspace for services, domains, invoices, support tickets, account information, and everyday account tasks. 3. Your orderform A matching product selection, configuration, cart, and checkout experience using native WHMCS ordering. The result is a consistent visual identity as customers move between your website, their account, and their next purchase. 23 starting pages. Room for your own ideas. The included public collection contains 23 pages, including 14 service landing pages, a homepage, service directory, and policy pages. Hosting & compute: Web Hosting, Cloud Hosting, Reseller Hosting, VPS Hosting, Dedicated Servers, and Game Servers. Business & security: Domains, Professional Email, SSL Certificates, and VPN. Expert services: Web Design, Backup & Recovery, Website Migration, and Managed Services. Customize the included content or create additional public pages through the Studio. 12 color palettes + your own brand colors Start with the original Weeby blue, navy, and white identity, choose one of 12 coordinated palettes, or create a custom palette. Set your brand accents, buttons, navigation, headings, text, backgrounds, surfaces, and borders. Customize your logo, typography, content width, and button corners from the shared design controls. Supported bundled visuals and the default favicon follow the selected palette. Your uploaded photos, custom logo, and custom favicon keep their original artwork. Product presentation connected to WHMCS Your real catalog stays central to the website. Connect website plan slots to specific WHMCS products or product groups. Display product names, descriptions, prices, and available billing cycles from WHMCS. Use the currencies and pricing configured in your installation. Customize supported CPU, RAM, storage, transfer, and other resource display labels. Presentation labels remain separate from the actual service specifications and allowances defined in WHMCS. A client area that feels part of your brand The custom client area brings key customer tasks into a coordinated layout: Dashboard with service overview and account updates. Sidebar navigation and account shortcuts. Product and service management screens. Domain listings and supported management actions. Invoices, billing information, and payment-related account views. Support tickets, Knowledgebase, and announcements. Login, registration, password recovery, and account details. Available actions follow the customer’s permissions and your enabled WHMCS functionality. Checkout with the details customers need The matching orderform supports product configuration, available billing cycles, domain choices, configurable options, add-ons, and guest or existing-customer checkout. Its itemized order summary presents the information supplied by WHMCS, including products, domains, selected options, billing periods, and recurring charges where available. Native discounts, taxes, credits, and totals remain authoritative. Multilingual content. RTL & LTR layouts. Translate public website content, navigation, and supported theme labels through the Studio, with a reading direction for each language. Prepare English LTR and Arabic RTL presentations, while native account and checkout fields use your installed WHMCS language packs. Language and currency controls follow your WHMCS configuration. Installation & documentation The package includes the website theme, matching orderform, Studio administration addon, and English and Arabic HTML documentation. Installation guidance covers activation, branding, products, languages, publishing, updates, and recovery. Editable project backups, saved published versions, and factory design recovery tools help you manage future changes. Weeby Studio requires an existing, licensed, self-hosted WHMCS installation. Confirm compatibility with your WHMCS release before purchasing. Hosting, WHMCS licensing, payment gateways, registrars, and provisioning services are configured separately. Explore Weeby Studio Live website demo https://hostk.com/weeby-demo/ Live Client Area demo https://hostk.com/weeby-demo/clientarea.php Email Address: test@hostk.com Password: test Special Price: $49.99 USD — reduced from $120 USD One-time purchase. Website-bound activation for one installation. Get Weeby Studio https://hostk.com/weeby/ We’d love to hear your feedback on the visual Studio, the customer workspace, and the ordering experience. Questions are welcome in this thread. Weeby Studio by Hostk Your website. Your client area. Your checkout. One connected brand.

HostX V3.1.2 Is Now Available! We’re pleased to announce the release of HostX V3.1.2, bringing improved WHMCS v9.1.0 compatibility, UI enhancements, responsive improvements, and several bug fixes. What's New? Compatibility & Improvements Improved compatibility with WHMCS v9.1.0. Updated language files to follow WHMCS 9.x naming conventions. Improved mobile responsiveness of the addon module. Refined the default login page styling. Enhanced Product Addon and VPS product field designs in the order form. Added Credit Notes and Debit Notes menus to the sidebar with styling that matches the HostX layout. Bug Fixes Fixed responsive issues in the Domain Search block's TLD section. Fixed Domain page heading color issues across all layouts. Fixed the checkout registration form toggle button layout across browsers. Fixed the EV description issue on the SSL Certificate MarketConnect page. Fixed banner spacing on MarketConnect pages when using a sticky header. This update focuses on making HostX more consistent, responsive, and compatible with the latest WHMCS release. Already using HostX? Update to V3.1.2 and enjoy the latest improvements! Thank you for your continued support and feedback. Buy Now: https://whmcsglobalservices.com/webhosting-template/hostx-whmcs-theme-template/

HostX V3.1.2 Is Now Available! We’re pleased to announce the release of HostX V3.1.2, bringing improved WHMCS v9.1.0 compatibility, UI enhancements, responsive improvements, and several bug fixes. What's New? Compatibility & Improvements Improved compatibility with WHMCS v9.1.0. Updated language files to follow WHMCS 9.x naming conventions. Improved mobile responsiveness of the addon module. Refined the default login page styling. Enhanced Product Addon and VPS product field designs in the order form. Added Credit Notes and Debit Notes menus to the sidebar with styling that matches the HostX layout. Bug Fixes Fixed responsive issues in the Domain Search block's TLD section. Fixed Domain page heading color issues across all layouts. Fixed the checkout registration form toggle button layout across browsers. Fixed the EV description issue on the SSL Certificate MarketConnect page. Fixed banner spacing on MarketConnect pages when using a sticky header. This update focuses on making HostX more consistent, responsive, and compatible with the latest WHMCS release. Already using HostX? Update to V3.1.2 and enjoy the latest improvements! Thank you for your continued support and feedback. Buy Now: https://whmcsglobalservices.com/webhosting-template/hostx-whmcs-theme-template/

HostX V3.1.2 Is Now Available! We’re pleased to announce the release of HostX V3.1.2, bringing improved WHMCS v9.1.0 compatibility, UI enhancements, responsive improvements, and several bug fixes. What's New? Compatibility & Improvements Improved compatibility with WHMCS v9.1.0. Updated language files to follow WHMCS 9.x naming conventions. Improved mobile responsiveness of the addon module. Refined the default login page styling. Enhanced Product Addon and VPS product field designs in the order form. Added Credit Notes and Debit Notes menus to the sidebar with styling that matches the HostX layout. Bug Fixes Fixed responsive issues in the Domain Search block's TLD section. Fixed Domain page heading color issues across all layouts. Fixed the checkout registration form toggle button layout across browsers. Fixed the EV description issue on the SSL Certificate MarketConnect page. Fixed banner spacing on MarketConnect pages when using a sticky header. This update focuses on making HostX more consistent, responsive, and compatible with the latest WHMCS release. Already using HostX? Update to V3.1.2 and enjoy the latest improvements! Thank you for your continued support and feedback. Buy Now: https://whmcsglobalservices.com/webhosting-template/hostx-whmcs-theme-template/

While I'm glad to hear from @slim that with immutability off, there are no additional bugs when compared to the 8.13.x release of WHMCS, invoice immutability was a big touted feature of WHMCS 9. I think it's reasonable to say that if you haven't yet fixed one of your biggest features, then you're not ready to call it quits on your prior release. As @ffeingol described, I'm not clear on how it makes any sense to only extend the 8.13.x EOL date over a 1 month period where a significant number of people take the last two weeks off, and the rest of the month is often year-end accounting time. @WHMCS Carlos you either did not read anything that was stated above as to the reason for wanting a bit more time, or you just don't care, neither of which is good customer service. Quite the hyperbole there. None of us asked for it to be indefinite - we just asked for a reasonable amount of additional time. The longest that was requested was my request for it to be until mid-2027. That's just 8 months; not indefinite. You could have countered with half that and I would have found that acceptable. Yet your response is 1/8 of that? I realize this isn't a negotiation, but if it were, nobody in their right mind would accept that. I think pretty well every one of your customers would say 'oh woe is me' to your 'additional work' argument given the dramatic price price increases over the past decade. You said you needed to increase prices to fund development, and instead of putting those development resources towards ensuring stable long-term releases, you put them towards new Marketplace connections where you make even more money. I try to avoid piling on about that, but this kind of scenario is exactly where you're rubbing salt in the wound.

Not seen this exact one myself, but a duplicate "failed" row right after a "declined" row almost always means WHMCS is hearing about the same decline twice: once from the API response when it tries the charge, and once more from a Stripe webhook a few seconds later. The legacy module and the new one don't record those the same way, so it can show up after the switch even though nothing else changed. Things I'd check, in this order: 1. Billing > Gateway Log. Find one affected invoice and look at the timestamps on the two entries. If one came from the charge attempt and the second arrived a little later from a webhook, that's your duplicate. 2. In the Stripe dashboard under Developers > Webhooks, look at how many endpoints point to your WHMCS install. If you moved from the legacy module, the old endpoint is often still registered next to the new one, so every payment_intent.payment_failed event gets sent twice. Remove the one the new gateway doesn't use, then let a test payment fail with Stripe's decline test card to confirm only one row and one email come through. 3. If there's only one endpoint and it still happens, open a ticket with WHMCS and attach both gateway log entries for the same invoice. That's what they'll ask for first, and if it's a module bug it gets confirmed faster. While you wait on a fix, you can stop the second email with an EmailPreSend hook: when the template is "Credit Card Payment Failed", check whether the same email went out for that invoice in the last few minutes and return abortsend => true if it did. It doesn't fix the extra transaction row, but your clients stop getting two failure emails.

Good questions, both worth knowing before you do this on a live client. The client will see both. Cancelled invoices still show in the client area invoice list (there's a Cancelled status filter in the sidebar on the default themes), so the original stays visible next to the new one. Draft invoices aren't shown to the client, which is why I'd do it in that order: get the corrected copy ready as a Draft first, then publish it and cancel the original back to back, so they never see two unpaid invoices at the same time. What cuts down the tickets for us is putting a short note on the new invoice before publishing, something like "Replaces invoice #1234 (price correction)". The Notes field on the invoice is shown to the client on the invoice itself, so they get the explanation without having to ask. On numbering: the duplicate is a new invoice with its own new ID, not the same number. If your accountant cares about gaps, look at Sequential Paid Invoice Numbering under Configuration > System Settings > General Settings > Invoices. With it on, the formal invoice number is only given out when an invoice is paid, so a cancelled one never takes a number in that sequence and your paid run stays gapless. If you already reconcile on the invoice ID, just keep the old and new ID together in that note so the trail is clear. One more check before you publish: open the line items on the draft and make sure they're still tied to the client's service or domain, so paying it renews the right thing.

TwentyX V1.3.4 Released! We've released a new update for TwentyX, bringing WHMCS 9.1.0 compatibility along with a couple of fixes to improve the client experience. What's Included in This Update? Improvements Added compatibility with WHMCS v9.1.0. Bug Fixes Fixed an issue where the Disable 2FA button was not displayed. Fixed the layout issue on the View Invoice page. This update focuses on improving compatibility and resolving a few UI issues for a smoother experience. Release Date: 29 October 2026 Thank you for your continued support and feedback. We appreciate it! Here is the product link https://whmcsglobalservices.com/clientarea-template/twentyx/ Demo : https://demo.whmcsglobalservices.com/20xdemo/

ClientX V3.3.3 Released! We're pleased to announce the release of ClientX V3.3.3, bringing improved WHMCS compatibility, PHP support, and several fixes to enhance the overall user experience. What's New in V3.3.3? Compatibility & Improvements Improved compatibility with WHMCS v9.1.0. Added support for PHP 8.4 and ionCube Loader 15. Updated language files for Ukrainian, Portuguese, and Brazilian Portuguese to follow WHMCS 9.x naming conventions. Added header icons to MarketConnect product pages for SocialBee, 360 Monitoring, and Nova Cloud. Improved license verification functionality. Enhanced mobile responsiveness of the addon module. Bug Fixes Fixed Knowledgebase search text translation issues. Resolved mobile responsiveness issues on the login and product pages. Fixed homepage Domain Search section background color and AI Domain Search button spacing. Corrected spacing in the Latest Dashboard Products and Services section on mobile devices. Fixed right sidebar alignment issues on mobile devices. Resolved an issue affecting the Affiliates page. This update focuses on improving compatibility, fixing reported issues, and delivering a smoother experience across desktop and mobile devices. Release Date: 28 October 2026 Thank you to everyone who continues to use ClientX and share feedback with us! Buy now: https://whmcsglobalservices.com/clientarea-template/clientx/

ClientX V3.3.3 Released! We're pleased to announce the release of ClientX V3.3.3, bringing improved WHMCS compatibility, PHP support, and several fixes to enhance the overall user experience. What's New in V3.3.3? Compatibility & Improvements Improved compatibility with WHMCS v9.1.0. Added support for PHP 8.4 and ionCube Loader 15. Updated language files for Ukrainian, Portuguese, and Brazilian Portuguese to follow WHMCS 9.x naming conventions. Added header icons to MarketConnect product pages for SocialBee, 360 Monitoring, and Nova Cloud. Improved license verification functionality. Enhanced mobile responsiveness of the addon module. Bug Fixes Fixed Knowledgebase search text translation issues. Resolved mobile responsiveness issues on the login and product pages. Fixed homepage Domain Search section background color and AI Domain Search button spacing. Corrected spacing in the Latest Dashboard Products and Services section on mobile devices. Fixed right sidebar alignment issues on mobile devices. Resolved an issue affecting the Affiliates page. This update focuses on improving compatibility, fixing reported issues, and delivering a smoother experience across desktop and mobile devices. Release Date: 28 October 2026 Thank you to everyone who continues to use ClientX and share feedback with us! Buy now: https://whmcsglobalservices.com/clientarea-template/clientx/

CloudX Update Released v1.1.2 – 29 October 2026 We've released a new update for CloudX, focusing on WHMCS compatibility, language improvements, and a better mobile experience. What's Included? Improvements Improved compatibility with WHMCS v9.1.0. Updated language files for Ukrainian, Portuguese, and Brazilian Portuguese to follow WHMCS 9.x naming conventions. Improved the mobile responsiveness of the CloudX addon module. Bug Fix Fixed an issue where the Disable 2FA button was not displayed correctly. This release includes a few important refinements to ensure a more consistent experience for CloudX users. Release Date: 29 October 2026 Thanks for your continued support and feedback! Buy Now: https://whmcsglobalservices.com/web-hosting-themes-templates/cloudx/

@WHMCS Carlos I'm sorry, but this is a bit insane. how were we possibly to know that we should ask for more time on 8.13.x? We did like others on this thread did and kept checking the EOL page. The sudden appearance of Dec-1 and now Dec-31 is just not really acceptable. We may be 1% of WHMCS users, but we have year end closing processes etc. and my CFO would kill us if we updated WHMCS during that. WHMCS has also not given us a clear path to stay on LTS. They way the EOL page stands now we'd have to go to 9.0 (bad idea) and then that would be EOL in either 30 days or EOL at the exact same time as 8.13 goes EOL. Contrary to WHMC's belief, updating WHMCS is not as easy as clicking a button. We have 3rd party modules, custom written reports, hooks, provisioning and payment gateways. That requires us to maintain a development system and fully regression test every patch, upgrade etc. WHMCS also has a habit of breaking API calls between release/patches and then we have to code around that (please see case SIQ-586041 as an example). As far as I know that's still broken and it's been 7 months. Please keep support for 8.13.x at least through the end of Jan-2027 so we can get through year end. Once more month is not going to kill WHMCS. Thanks

Worth adding for anyone on cPanel/WHM, because the web-vs-cron mismatch Carlos mentions is very common there: 1. PHP Info in WHMCS only shows the version serving the admin area, which on cPanel is whatever MultiPHP Manager has set for that domain. The cron uses whatever binary the cron line calls. If your line is just php -q /home/user/crons/cron.php, that's the server's system default PHP, which can easily be a different ea-php version. Check with crontab -l -u youruser, then run that exact binary with -v. The clean fix is to call the version explicitly, for example /opt/cpanel/ea-php83/root/usr/bin/php -q /home/user/crons/cron.php, matching what MultiPHP Manager shows for the WHMCS domain. 2. Check every installed version, not just the one WHMCS uses today. rpm -qa | grep -E 'ea-php8[0-9]-php-(cli|fpm)' lists the build of each EasyApache PHP on the box. Update them with dnf update 'ea-php*' (yum on older systems) once the fixed builds are available, then restart FPM with /scripts/restartsrv_apache_php_fpm. On CloudLinux, PHP Selector's alt-php versions are separate packages (rpm -qa | grep alt-php8), and on LiteSpeed check the lsphp packages too and restart with /usr/local/lsws/bin/lswsctrl restart. 3. If you need the session.upload_progress.enabled=0 stopgap, the easiest place on cPanel is WHM > MultiPHP INI Editor > Editor Mode for each PHP version, then restart PHP-FPM. Bear in mind a per-domain FPM pool override can still win, so verify instead of assuming. 4. Verify both sides afterwards: PHP Info inside WHMCS for the web side, and for the cron run the same binary your cron uses with -i | grep -E 'PHP Version|upload_progress'. Both should show the patched version and the setting you expect.

The duplicate-publish-cancel sequence makes sense, but I'm wondering about the client-side confusion bear mentioned. If you cancel the original and publish the draft copy, does the client end up with two invoice records visible in their billing history, or does marking the original cancelled hide it? For a small operation that's probably fine, but it seems like it could generate support tickets from clients seeing a cancelled invoice next to a new one. Also curious whether the duplicate keeps the same invoice number or generates a fresh one, since that affects how it reconciles with accounting records.

Hi Slim, Nobody has edited any post dates. The page you landed on is not our live blog. It is the new version we are migrating to, and it is not finished: the import has not carried the original publish dates across yet, which is why every post on that page is showing 21 October 2026. It was not meant to be publicly reachable yet either, so the flag is useful on two counts. Our live blog is blog.whmcs.com. That is the published one and the dates on it are correct. On the part that matters, whether that security alert is current: it is not. It is from 8 March 2024. It was never about the WHMCS software itself, it concerned three third-party vendors and their extensions and themes. Here it is with its real date on it: https://blog.whmcs.com/133747/security-alert The migration should be finished in the next week or so. That unfinished copy is being taken out of public reach now, because a two year old security post wearing last week's date is the last thing anyone needs to stumble across at the moment. Thanks for calling it out.

Option 2 makes sense for a recurring contact like an accountant, but I'd double-check the opt-in scopes: if the client's contacts are only opted into Invoices, a General-type SendEmail call won't copy them, so the preference has to match the customtype you pass. Option 3 is clever but I'd worry about churn — AddContact/DeleteContact on every send could clutter the client's contact history and any failure between the calls leaves a stray contact behind. Curious whether anyone has confirmed the CC line actually renders in the Email Log for the template route (option 1), or if it only shows the primary recipient.

Thank you!, if you have a bug tracker number, please send to me, I will personally take a look at it, I am very keen to get WHMCS 100% compliant for the markets that require it.