yaykeny

Damn ! I have performed a multitude of tests on your WHMCS installation and I can not find any reason for this to be occurring. To be sure that this is not occurring due to an infected WHMCS file, our recommendation would be to delete all files on your WHMCS hosting account except for the WHMCS configuration.php file (including the files in other directories as well) in case the hackers have left any malicious files behind to be able to return later. This will allow you to begin with a "clean slate" by uploading a fresh set of WHMCS files, while using your existing database.

Haha, good shout! Seems possible. Am just going through the log files to see if I can find out whats happening.

Yea i have checked through it and that Welcome email doesn't appear to show up as being sent or saved, All the other usual reminder and paid emails are going out fine but that one isn't.

Yea the email template that was mailed out to the client had those characters and fake email address injected. I have had a reply from support, they say this : Thank you for contacting WHMCS support! I've been able to reproduce this on your installation but I see nothing obvious in the admin area that would explain why this is occurring. It is likely that this is not an error from WHMCS itself, but rather a customisation that is installed. The first thing to try is temporarily removing any customisations that may be interfering with the normal operation of WHMCS such as addons and action hooks I'll go and see what I can find but I haven't added anything lately - all very odd!

It was a real client I added. The client details are correct when I list them in the client section (let's say these are something like Mr Bill Smith). The email that was sent out to my client had the name and login detail fields on the new client email template changed to those of the screen shot I attached. Those characters and the domain used for the email address are commonly used by spam signups to whmcs

Thst is not the name or password, that is a fake name and login generated just for the email template thst was sent out. Read through my post again.

Hi, I had major issues with spam signups earlier in the year which I have halted. Tonight I manually added a new client and just checked the welcome email was sent out - this is what was sent https://prnt.sc/kzigqi A bit embarrassing ! Apologies if there is a thread RE this but I could not find it. Does anyone know how to solve the problem? Thanks

Hi Flywheel, Same issue RE the fake accounts (now resolved by using various techniques). Do you have access to phpmyadmin - if you do you, you can delete blocks of clients quite quickly. Kenny

I have added qq.com to banned email list and blocked the subnet range and so far so good ! Kenny

What a nightmare. https://prnt.sc/j8dcon Went and stopped users just being able to register but then actual orders started to appear. I enabled all the security features but nothing worked so had to go into maint mode. As soon as you turn it off, the orders flood in again so I have had to hide/retire the products for now, it's like being under attack! I then enabled and signed up for maxmind which doesn't seem to stop the clients appearing and flags the order as spam but still not what I had hoped it would do. The ability to block delete clients would be handy as currently I am having to use phpmyadmin to go in and delete the fake accounts. Hopefully a proper fix comes along soon! Kenny

No, I have enabled all the security features and nothing works. I have had to hide and retire my products for now. I have also enabled maxmind but this only stops the accounts being setup on WHM and flags them as spam, it doesn't stop the client being created which is a pain to keep having to remove.

Guys I have been reading up on this and have activated all sorts of extra security, including disabling users just registering.

Hi, I have seen for the 1st time a massive registration of fake accounts. Screen shot here https://prnt.sc/j8dcon a few hundred anyway ! I am deleting these but is there anything I should be aware of or be looking out for? Cheers Kenny

The user and pass will have been supplied by your hosts, is it with them than you have submitted a ticket? My issue was with clients not being able to login to their own client areas not the master /admin login

Sorry, I should have updated this. The issue was being caused by an upgrade to WHMCS but I did not update a template I was using from whmcsthemes. When I updated the front end, everything was sorted : )

Support guys sussed it

Hi, Clients are getting an "incorrect password" error when logging into client area. I have checked this myself and it does indeed fail. Seems to have been after the upgrade last week. I have corrected a cron job issue I had after the upgrade but wondered if anyone had come across the login issue? Have a tidket in but it is taking its time! Cheers

Hi Guys I have had no issues with WHMCS until last Friday when my admin login just started hanging http://ukprohosts.co.uk/admin/ My host went through all sorts of tests and suggestions and all drew a blank. We contacted WHMCS who took the files and DB and found the admin area working fine on their test machines - so not an WHMCS issue. Back to my host. I noticed in the error log the following [13-Apr-2017 05:41:18 UTC] PHP Fatal error: The file /home/ukprohost/public_html/index.php cannot be decoded by this version of the ionCube Loader. If you are the administrator of this site then please install the latest version of the ionCube Loader. in Unknown on line 0 I have tried PHP per 5.6 and 7 and nothing helps. Host is aware of this ionCube notice and has re-installed my entire account - still nothing. I have added $display_errors = true; $display_errors = E_ALL ^ E_NOTICE; to the config file - same result just hangs. Anyone have any ideas? Nothing special about the install and it isn't calling any external modules or anything that would need to be whitelisted through the servers firewall. The server did however have an issue last Friday and was restarted - too much of a co-incidence I am sure! Thanks in advance

I have used UPDATE tblconfiguration SET value='http://mywebsite.com' WHERE setting='SystemURL' ; to get back in once before when I set it to https before I installed the certificate. Even with the WHMCS url set to the base url everything seems to work fine (apart from the upgrade). It might have just been a one off glitch but a bit worried to try it again! When you say multiple installations, I remember there was a few issues installing it in the 1st place and I had to re do it, although I can only see 1 installation and 1 whmcs db file.

Ok, the maintenance message had noting to do with the TAB in the general settings, it was to do with the version number in the database and file set. I restored the database and site files, removed the install dir and we are back where we were. While looking at the general settings, I noticed that the WHMCS System URL was set to https://ukprohosts.co.uk and not to where the WHMCS actually is (https://ukprohosts.co.uk/admin however when I set it to the admin folder and click save, it reverts back to just the site URL. Could this be the issue? Thanks

Hi, Backed up DB and clicked on the update button to upgrade from 7.0 to 7.1 (I think). Has been on the screen with an hour glass spinning for 40 mins so am thinking something has gone wrong. The site and admin areas are showing "down for maintenance" messages. Have checked via ftp and various files all appear to have been updated when the upgrade was initiated. The install log file shows: [2016-12-22 18:10:56][WHMCS Installer] DEBUG: Updater bootstrapped [] [2016-12-22 18:10:56][WHMCS Installer] INFO: Applying Updates for 7.0.1-release.1 [] [2016-12-22 18:10:56][WHMCS Installer] INFO: Performing Update Action: removeAdminForceSSLSetting [] [2016-12-22 18:10:56][WHMCS Installer] INFO: Removing any obsolete file and directories [] [2016-12-22 18:10:56][WHMCS Installer] INFO: Applying Updates for 7.1.0-alpha.1 [] [2016-12-22 18:10:59][WHMCS Installer] INFO: Performing Update Action: addAdminPasswordResetVerificationEmailTemplate [] [2016-12-22 18:10:59][WHMCS Installer] INFO: Performing Update Action: addAdminPasswordResetConfirmationEmailTemplate [] [2016-12-22 18:10:59][WHMCS Installer] INFO: Removing any obsolete file and directories [] [2016-12-22 18:10:59][WHMCS Installer] INFO: Applying Updates for 7.1.0-beta.1 [] [2016-12-22 18:11:00][WHMCS Installer] INFO: Performing Update Action: updateCronTasksNextDue [] What to do? The browser is still showing: This may take several minutes to complete. Please do not navigate away from this page or close your browser. You will be redirected automatically once complete. If I navigate away I assume the site will still show as down for maintenance and I will have no way to get back into the admin area to uncheck that box. I guess I could run a command in the SQL tab via phpmyadmin to change the setting once I find it. Just wondering if anyone else has has had similar issue? Cheers

Sussed it, is called maintenance mode

Hi, Is there a way to turn off general access to the WHMCS front end/web site while it is being built. Other systems I have used have an "under construction" page which can be activated and a login for adim to login and develop the site without others seeing. So far I have not seen this option? Thanks

After some mucking about, the issue appears to be in the menu on the left hand side. The option to use own domain is still not showing there (under actions) but if you ignore the options in the menu and just proceed to the next page, the 3 options appear in the centre of the page. I guess this will be ok unless anyone can see why the 3rd option fails to show in the menu section.

Hey, I have seen a few posts relating this but no definitive answer. I want to give the option for customers to use their own domain and point it to our server. I have all 3 options checked Allow clients to register domains with you Allow clients to transfer a domain to you Allow clients to use their own domain Only the 1st 2 show up on the order form. I have then unchecked the box "Require Domain" on the package I am using. Standard install, no theme added yet. I have unchecked all of the options above and they vanish in the order form. I have then added them back in, 1 at a time and the 1st two re-appear on the order form but the 3rd (use own domain) doesn't appear. I had also read that it could be an issue with the order form template (which is where I think the problem lies) but I have tried all the options (boxes, cloud silver, modern etc) and they all fail to show the option for a client to use an already registered domain. Any ideas? Cheers