Jump to content


Popular Content

Showing content with the highest reputation since 05/28/22 in all areas

  1. 2 points
    Hi guys, I just spot a critical and dangerous vulnerability in a third-party component of WHMCS. I would like to share info but the thing is that as soon as I reveal details, all lamers will start exploiting it. I'm pretty sure that no one other than me and my clients know anything about it. Let me give you a bit of context: I underline that this is NOT caused by WHMCS but by a widely used third-party component When I say "critical" I mean that you can lose real money and cause enormous legal troubles The issue has been already reported by me a month ago to the developer in question but no fix so far Only few minutes ago I discovered how it can be exploited to cause harm I have already shared updated details with the developer in question. They are checking it The fix is pretty easy. It takes few seconds. I just finished securing a dozen of my clients I think I'll stay quiet for now so that the developer can do his job but the fix will require providers to perform an update. We all know most people ignore software updates unless there is a security issue. So what if the developer refuses to admit the issue? Should I post something here our tell the story to people like @WHMCS John @WHMCS ChrisD so that I can go back to my business? p.s. As soon as the update is available, I'll post here without mentioning the name of the module... this way you simply need to update all modules you have 🀣 Edit: I sent a DM to John to make sure WHMCS is not affected. I'm 99% sure that it is all right but I can't see encrypted files (have no time to decrypt it) so let's wait 🀞
  2. 2 points
    Often, when creating helpful articles within the knowledgebase, it can be difficult to provide a large amount of information in such a small form and still ensure it is readable. In past experience, there has been occasions when a certain article needed multiple outcomes based on a clients decision. When i have been faced with this scenario, i have added a Bootstrap accordian style element into the knowledgebase article, allowing me to add styling that hides the unneeded information untill it is called by the user. WHMCS its self uses mutiple elements from the Bootstrap library. Using the Bootstrap 4 library, it is possible to add cetain styles and elements into the knowledgebase textfield. The best way to implement this would be click the β€œEnable/disable Rich Text Editor” button. From this point you can add your HTML and call most of the Bootstap tools. In this particular scenario, i called the accordion class as seen below. <div class="accordion" id="accordionExample"> <div class="card"> <div class="card-header" id="headingOne"> <h2 class="mb-0"> <button class="btn btn-link btn-block text-left" type="button" data-toggle="collapse" data-target="#collapseOne" aria-expanded="true" aria-controls="collapseOne"> Collapsible Group Item #1 </button> </h2> </div> <div id="collapseOne" class="collapse show" aria-labelledby="headingOne" data-parent="#accordionExample"> <div class="card-body"> Some placeholder content for the first accordion panel. This panel is shown by default, thanks to the <code>.show</code> class. </div> </div> </div> <div class="card"> <div class="card-header" id="headingTwo"> <h2 class="mb-0"> <button class="btn btn-link btn-block text-left collapsed" type="button" data-toggle="collapse" data-target="#collapseTwo" aria-expanded="false" aria-controls="collapseTwo"> Collapsible Group Item #2 </button> </h2> </div> <div id="collapseTwo" class="collapse" aria-labelledby="headingTwo" data-parent="#accordionExample"> <div class="card-body"> Some placeholder content for the second accordion panel. This panel is hidden by default. </div> </div> </div> <div class="card"> <div class="card-header" id="headingThree"> <h2 class="mb-0"> <button class="btn btn-link btn-block text-left collapsed" type="button" data-toggle="collapse" data-target="#collapseThree" aria-expanded="false" aria-controls="collapseThree"> Collapsible Group Item #3 </button> </h2> </div> <div id="collapseThree" class="collapse" aria-labelledby="headingThree" data-parent="#accordionExample"> <div class="card-body"> And lastly, the placeholder content for the third and final accordion panel. This panel is hidden by default. </div> </div> </div> </div> After all of this is added to the KB article, saving would then result in the article contents being dislayed within an accordian whenever a client views the article, allowing the client to select the information that is needed.
  3. 2 points
    This has bothered me for a long time. I love it when WHMCS introduces new features, but trying to implement some of it is often a challenge. Why is there no built in support for multi-language support unless you're trying to build an "addon" module? Basically any other type of module can output code to the client area, and it makes no sense that you have to write your own code to support multi-language. I mean, the code already exists in WHMCS πŸ˜… The documentation is lacking a lot of information. Take this as an example: https://developers.whmcs.com/provisioning-modules/supported-functions/. There are some functions (like _AdminArea) that just has no information at all. How is it used? You can't echo or return anything. Is it just a typo and meant to say _AdminLink? I know how to use that function by looking at other modules, but there's still no documentation about it. Why is there no documentation for Application Links? It's a really cool feature, but it makes no sense that the feature is basically reserved for cPanel. Another nice feature that feels like it was only built for cPanel is Server Sync - mostly because of this: https://docs.whmcs.com/Servers#Sync_Report ... But some control panels do. I know that cPanel doesn't. Some other control panels (not just limited to web hosting) do keep a record of the user's full name, address, phone number etc. Importing a client into WHMCS using the Server Sync feature feels so akward. Who wants to send an email to their customer that starts with "Dear Name Placeholder"? That's very unprofessional. I know that not all control panels track the client's details, but who thought it would be a good idea to not even implement importing the details in case the control panel actually did? It would make life so much easier for WHMCS admins wanting to import clients. I hope someone can give me an explanation that isn't "Because WHMCS just doesn't care" πŸ˜…
  4. 2 points
    I don't get email notifications any more for posts and/or mentions (I disabled them last year) - so mentioning me in a thread, in the hope that I will see it, is really not worth doing. here I am... hello everyone! I hope everyone is doing well - i've literally no idea what has been posted in this place over the last year... I enjoy living my life in ignorance of this place for the most part! 😎 yes - I knew two things... one of them i've sadly now forgotten and the second i've carelessly misplaced. 😜 others will be your best bet now... my time visiting this place on a regular basis ended last year and my knowledge is fading... and as much as I could get back into the habit of coming here, I won't as there are much more enjoyable things to do. 🏝️ all that said, many months ago I did get asked to code an action hook that completely rewrites the v8 admin menu into something more sensibly organised and useful.... works on v8.3 and as there were no admin changes, I assume it works on v8.4... and seeing no specific admin changes in the changelogs (though experience tells you that might not necessarily mean that there aren't any lol), it should probably work in v8.5.... screenshot below is a little overkill as all display options are enabled (which you wouldn't really do normally), but topbar / stats bar / menus can all be individually enabled or their content changed... the damn thing has over 1k+ lines of code, but should continue to work regardless of using WHMCS. the irony is that having written it, I no longer personally have any need to run v8 as I don't use it myself and am not actively answering questions in this place anymore. πŸ™„ perhaps when v8.5 goes GA (or I suppose if things haven't changed at WHMCS, I should probably wait for the first v8.5.1 maintenance release lol) and if the inclination hits me, i'll test it again and perhaps post it on GitHub. thanks to @DennisHermannsen for posting a solution.
  5. 1 point
    The texts of your "full story" look pretty familiar to me. So I looked at the module I use myself for tracking mails and found that your texts are only wordspinned, like a bad copy 😞 By the way, you made a mistake while copying the original text: https://www.whmcsservices.com/edstatus.php >Please note that this system like any other mail tracking system - cannot detect with 100% accuracy whether an email has been opened. If the recipient blocks external content, the module will not be able to detect whether the mail has been opened. Text from Deploymentcode: https://documentation.deploymentcode.com/display/MailTrackingWHMCS >Please note that this system - like any other mail tracking system - cannot detect with 100% accuracy whether an email has been opened. If the recipient blocks external content, the module will not be able to detect wether the mail has been opened. You forgot to remove the second "-". Sorry if that sounds rude. I just think it's sad when a great module is imitated like this and you don't even bother to at least formulate the text yourself. Tagging @string so they see it as well.
  6. 1 point
    Hi all, I am wondering if this is possible to do. Can I add a promocode to a data feed so that when I display the product on an external page it displays the "sale" price and not the before sale price? For example something like this: <script language="javascript" src="/feeds/productsinfo.php?pid=1&get=price&billingcycle=annually&promocode=PROMO"> Has this been done before? Would it be a case of changing the config in feeds/productsinfo.php somewhere? Would be handy if it could be, or even if a future release can have a "Sale" price in the product pricing. Thanks Aaron
  7. 1 point
    @Bluesteam https://whmcs.community/topic/315470-from-the-blog-whmcs-version-851-released/?tab=comments#comment-1373498
  8. 1 point
    Answering myself.. a google search of the whmcs properties led me to this: https://help.whmcs.com/m/updating/l/1465032-updating-whmcs-on-the-command-line
  9. 1 point
    if you are upgrading language files from v8.49 to v8.5, I have made a note in the txt about which variables are added and which variables are removed. language_upgrade.txt
  10. 1 point
    Hi @Daltro Neto, If you're experiencing issues logging into your whmcs.com account, our sales team can help, please contact us via https://www.whmcs.com/contact
  11. 1 point
    This is a Dark Version of the Twenty-One Client Theme that is included with WHMCS. It is perfect for those websites using a darker design and want a client area that is also dark. It is 100% compatible with the latest version and works as a child theme to the twenty-one style so it is easy to keep updated. It also includes a dark version of the Standard Cart orderform. Check out the images in the Marketplace: https://marketplace.whmcs.com/product/6194-twenty-one-dark-theme
  12. 1 point
    You can force a theme by setting it on the URL but it does set the session for that user which means he will not see the new theme when browsing to other pages back and forth. You could try changing all URL and links manually on those pages to force the themes but that will not work either because some URL's in WHMCS are hardcoded and you can't edit them. I tried to do what you are asking some years back and found no simple solution. If there is one, it will be very hard to update and maintain and I don't think it will work perfectly either as it would involve forcing a new session theme on each page reload. To resume, it's not possible unless you can edit the core which is encoded and WHMCS does not give access. Or it would require a custom module that basically detects every single URL loaded and tries to force a theme (horrible solution in terms of performance)
  13. 1 point
    Hi @Ranjan, If you'd like to apply this custom sequence to unpaid and paid invoices, please enable the "Custom Invoice Numbering" option under Configuration > System Settings > Tax Configuration.
  14. 1 point
    If all of your third party modules/hooks are compatible with the latest version of WHMCS, you can upgrade without issues. You will need to be running PHP 7.2 or newer to use WHMCS 8 or newer.
  15. 1 point
    Hi Fary, That's what most of us do. Because of module compatibility issues we won't update the WHMCS. But that's no the right one. We can approach the module provider to give us the updated version or files. If the files or site size is heavy, then better take a complete backup & manually upload the latest WHMCS files for quick update. Thanks.
  16. 1 point
    There's just so much wrong with this official WHMCS response that I don't even know where to begin 😑
  17. 1 point
    Hey Guys, We've been using WHMCS for 12 years to run our business and I went to do an upgrade today myself, and found that 12 years later, the same bugs are STILL in this software. C'mon guys, this is honestly a bit sad and pathetic. 1. The upgrade process overwrites custom.css - what is the point of this file if it is going to be overwritten? 2. The upgrade process overwrites invoicepdf.tpl - again, what is the point of having customisation of the invoice if you have to still manually copy it each time. Guys, you keep adding more features, but surely these 12 year old bugs could easily be fixed. Hell, give me the code unencrypted and I'll fix these stupid bugs myself! What's the point of an automated upgrade if you still need to manually copy files around. What will be even sadder is if you don't publish this post. Loyal, but frustrated customer.
  18. 1 point
    Just delete the product from the customer account. It will not appear on WHMCS, but it will still be active on the server. Removing a product from WHMCS will not terminate the account on the server. That only happens if you hit the terminate function from the product itself or if its run by the automation.
  19. 1 point
    This should do the job: <?php use WHMCS\Database\Capsule; add_hook('DailyCronJob', 1, function($vars) { $today = toMySQLDate(getTodaysDate(false)); $products = Capsule::Table('tblhosting') ->select('id') ->where('status', 'Active') ->where('nextduedate', '<=', $today) ->get(); foreach($products as $product){ $command = 'ModuleTerminate'; $postData = array( 'serviceid' => $products->id, ); localAPI($command, $postData); } }); It'll work for all products, however. You should add a 'where' clause to only get specific products.
  20. 1 point
    Hi there, I trust you are well. I am using the payment gateway https://github.com/PayFast/mod-whmcs. The callback refuses to work for manual payments since latest update. The original developers at the company called PayFast have been unable to find the problem. Willing to pay for a solution to the issue.
  21. 1 point
    @SIDEGURU can you please paste in the .htaccess file here, I am having the same issue. Thanks
  22. 1 point
    Hello! I've created my hosting plans successfully in WHMCS, however, I want to add for certain hosting plans they get a free SSL certificate free. How do I add this with Digicert?
  23. 1 point
    It's working just fine for me on my own site. Sorry I can't be more helpful.
  24. 1 point
    a WHMCS client area page can usually be considered as a header (header.tpl), the main body (specific .tpl for that page's purpose) and a footer (footer.tpl) - so logos, menu etc would be in header.tpl, but it will call various sub-templates, e.g includes/navbar for the top menu (i'm thinking of the Six template layout) - but navbar.tpl is just used to output the navbar array - the array(menu) is normally modified using hooks not by manipulation of the template.... though if you're replacing the navbar with your own menu system, then that might not really matter.
  25. 1 point
    @WGS It seems you moved from copying contents to paying money trying to hurt our website with negative SEO. Nicely done πŸ‘ I've got two words for you: Stop wasting money. It doesn't work as I know how to deal with negative SEO Do you want me to post details? πŸ˜›
  26. 1 point
    For announcements you can use the hook I posted before. For other pages (index, about, clientarea, register, pwreset, supporttickets...) it's easier. Begin by creating meta descriptions in your language file like follows (use language overrides!): $_LANG['metadescription']['index'] = "We are the best hosting company"; $_LANG['metadescription']['clientarea'] = "Manage renewals, download invoices, submit tickets..."; $_LANG['metadescription']['register'] = "Register an account with us"; Use file names (index.php, clientarea.php, register.php...) as keys. Now open your templates/{YOUR_TEMPLATE}/includes/header.tpl and add the meta tag in your <head> tag. {if $LANG.metadescription[$filename]} <meta name="description" content="{$LANG.metadescription[$filename]}" /> {/if} Meta description automatically shows up if there's an available description for current page.
  27. 1 point
    Hi @wesley98morgan The 'Could not instantiate mail function' error means you are using the PHPMail() 'Mail Type' option. The PHP Mail function uses the servers "mail" function which is not always reliable, nor does it generate a friendly error. Could not instantiate mail function means that when attempting to send the email, the server rejected it. Refer to points 2 & 3 here for suggestions on the type of server-configuration changes which could resolve this: https://github.com/PHPMailer/PHPMailer/wiki/Troubleshooting#could-not-instantiate-mail-function Switching to SMTP under Setup > General Settings > Mail tab would allow you to have more descriptive errors when an issue does occur and is usually more reliable when sending emails. The $smtp_debug line can then be added to the configuration.php file to see the full log from the server: http://docs.whmcs.com/Email_Sending_Issues#Troubleshooting
  28. 1 point
    I have to agree here. The products in the marketplace shouldn't be necessary. This is 2017, not 2001. X Failed logins should never be allowed, and the user should automatically be banned.
  29. 1 point
    have you placed a hidden camera near me ? that's exactly what I did when I read it.. well in my experience over the the years, that hasn't been the case (perhaps consideration, but implementation is far more relevant) - but let's not extinguish your optimism on this so early in your reign. I hear what you're saying - if nobody makes requests, nothing changes... but even when they do, nothing changes... or a solution may be added in 3 years time - by which time, the ship has sailed... if an issue is time-critical (e.g you need it in <6 months), a feature request would be pointless and they'd be better getting a developer in. one of the major problems with the feature requests is searching for an existing specific/relevant request - even when you know it exists, they can be hard to find... so you end up with similar requests all getting one or two posts... pointless.... there are requests in there, with hundreds of votes and suggested many years ago, that are still "Under Consideration". do you think if there was a request with 200 votes to get the WHMCS logo removed from the admin emails, it would be completed? I don't. i'm open to being convinced about the validity of the requests system - but i'm still waiting to see the proof. we didn't say it wasn't useful to some - just that we don't need it and would be good to make it optional. now if WHMCS don't want to change it, there's no point moaning about it - you just find a workaround.
  30. 1 point
    The ccTLD registry URL for domain availability is: https://pk6.pknic.net.pk/pk5/lookup.PK?name= and available string token is "Domain not found". So whois.json should be as below: [ { "extensions": ".pk,.com.pk,.net.pk,.org.pk", "uri": "https://pk6.pknic.net.pk/pk5/lookup.PK?name=", "available": "Domain not found" } ] Alternatively, if WHOIS server on standard port 43 is desired, Paknic WHOIS server is here: whois.paknic.com Hope this help!
  31. 1 point
  32. 0 points
    ea- is cPanel PHP, alt- is CloudLinux. Try looking for a .htaccess or php.ini file in the home directory of the account. Rename it to something else and try again.
  33. 0 points
    Is there any way to change an affiliate assignment on an order once it's been assigned? I have an order that was mistakenly assigned to one affiliate but should have been assigned to a different affiliate. Any solution, include database update or 3rd party plugin, would be appreciated.
  34. -1 points
    a lot of them come out of the woodwork during a beta period - once over, they quickly return to the shadows! I don't think PM'ing them would help - as it happens, I think the "person" pretty much agrees with us on this matter... as to if WHMCS will disable or remove it, I don't know - I would hope so, but who knows! after all these years, I still haven't really found a guaranteed way to get WHMCS to do something (or even listen) - I long ago gave up on the feature request system - so, often it comes down to trying to cajole someone @ WHMCS to start "an internal discussion" in the hope that, at the end of the day, something will be done... hardly they way to run a business - but hey that's not my problem. I hadn't realised it was until you mentioned it.
  35. -1 points
    Hey guys, Thanks for your feedback. Please submit a Feature Request for the team to consider in a future request (Yes brian! I saw your eyes roll ) the more people that vote and contribute the more likely the team are to consider this request.
  36. -1 points
    I bit the bullet and purchased the WHMCS PM, and it is rather disappointing in how basic it is, and doesn't seem to have had any updates in years, I am thinking of getting a module developed to integrate with Perfex CRM. Which has a decent project manager, proposals, estimates, contracts and lead tracking and is cheap as chips at only $59
  37. -1 points
    Number one this module is not the same and this module maybe don't detect some email this why i put this to let peoples know about it. Am still tester with alot email system or software and try to making work with all πŸ™‚ But you can see the whole screenshot that nothing the same as Deploymentcode.com
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated