AssociatedVOIP

I've modified the code, so at least the api call is made... but nothing happens! PLEASE TAKE A LOOK AND TELL ME WHAT I'M DOING WRONG! <?php if (!defined("WHMCS")) die("This file cannot be accessed directly"); function string_check($vars) { $domian = $vars[0]['sld']; if (strpos($domain, 'dm-team') OR strpos($domain, 'dmteam')) { $adminuser = "AdminNameHere"; $command = "addbannedip"; $params["reason"] = "do not like these folks"; $params["days"] = "365"; $params["ip"] = "191.191.191.191"; $results = localAPI($command,$params,$adminuser); $command = "logactivity"; $value["description"] = "custom sld validation called."; $results = localAPI($command,$value,$adminuser); } } add_hook("ShoppingCartValidateDomain",1,"string_check"); ?>

These attacks are coming from HostGator accounts. I've opened a ticket and given them the details, but I'm no longer confident they will do anything, as their service has really gone down hill since ownership changed. Maybe if we flood their security department with tickets/emails they might do something about it...? In the mean time, I've tried to create a custom hook to test the sld submitted in the order process, but for some reason when I upload it to the includes/hooks/ directory, it makes my whmcs go white. Any ideas? WHMCS? And, can someone post a code that will block the "dm-team" from even being able to register an account? Because they always register prior to placing the fraud order. <pre> <?php if (!defined("WHMCS")) die("This file cannot be accessed directly"); function string_check($vars) { $domian = $vars['sld']; if ((strpos($domain, 'hacked') !== false) || (strpos($domain, 'dm-team') !== false) { $adminuser = "adminnamehere"; $command = "addbannedip"; $params["reason"] = "do not like these folks"; $params["days"] = "365"; $params["ip"] = "191.191.191.191"; // would run code to determine $results = localAPI($command,$params,$adminuser); $command = "logactivity"; $value["description"] = "custom sld validation called."; $results = localAPI($command,$value,$adminuser); } } add_hook("ShoppingCartValidateDomain",2,"string_check"); ?> </pre>

So this is why you list it as a "free" module... so you can do a bait and switch?

I've been dealing with ResellerClub (for domain registration only) for a while now and it seems to me that it's an unmanaged arm of WHMCS that, in my humble opinion, shows that WHMCS is loosing it's reputation for being a well managed company. The support there is non-existent! They even tout "live support chat" that does not exist. I guess the idea/stigma of false advertising does not exist in India... and WHMCS seems not to care. Of course, when they know nothing about what they are doing, they blame everything on WHMCS and refer you to WHMCS support... and then WHMCS support refers you back because it's supposed to be a separate company.... so problems never get resolved... what a joke!

I was having the same trouble with suspension notification emails... I had an unclosed if statement in the email.

I concur! The documentation specifically states you can use the validatelogin API call to log the client in to whmcs. The documentation needs to be updated!

I see in version 2.5.6 that there is a payment gateway module named "Pay Offline". There is nothing in the documentation about it... Anyone know anything about it?

Now that WHMCS is connected to cPanel (business wise), will the functionality of creating the subdomain in the existing domain account through cPanel occur in future releases of WHMCS?

Turns out it was my browser cookie that was causing the problem. Cleared the browser cache, logged in, and voila ~ IP logged. I have submitted a bug report, but thought the community might want to know that upgrading from 5.2.6 to 5.2.7 breaks the admin IP logging.

Thanks Chris! That was it! However... one of your support personnel put the leading and trailing slash in a couple months ago when I was having a bug issue. I removed the trailing slash then, because it wouldn't resolve. So now I have removed the leading slash and it works fine! Thanks!

The admin folder name does not have a dot or slash. Are you meaning in the config.php file?

I have a custom admin folder name... and the upgrade cannot find the language folder... so now my admin area is broken. Support ticket #FSS-014288 Thanks for testing this out before you published WHMCS! What a great team! And where is the incremental update? Perhaps people think this security patch is full of bugs because they don't realize that WHMCS, for some reason, is refusing to provide the incremental update of bug fixes. My guess is that they are too focused on the next version to support their existing versions (the ones that still have supposed support life).

I am having this same issue. Yes, it has to do with setting the domain renewal to be due earlier than the actual due date with registrar. This is yet another bug that the WHMCS team has failed to fix... or if they have fixed it, they are for some reason refusing to provide the incremental update.

I have reported to WHMCS... but thought the community might want to know... If you use a custom admin folder name... the build 4 upgrade will break your system!

We were told that updates would be available every 6 weeks... but WHMCS' word is obviously worthless. I submitted a support request inquiring about the update to fix this extremely broken 5.2.5 and was told the update was forthcoming, and that was nearly 2 weeks ago. Come on WHMCS! At least give us an update of the fixed bugs, even if it doesn't fix everything! You are causing your clients to loose money! Worse, you making us look stupid to our clients! Why don't you apologize to us like we are having to do for our clients? We have to explain to them that our software provider does not live up to their word on providing bug fix updates, and that makes us look like idiots for continuing to use WHMCS. Guess it's time to start looking for alternate software...