justhost

Does anyone know if the recent post "Security Status Update" is a new Security Issue or if it is the same one we applied the patch for at 5.2.8? I am wondering if we should be blocking access to our whmcs profile for now? If anyone has an idea please let me know?

THis is marked as FIXED but nothing was said... we have the same problem. If this was fixed...what was done to fix? Thank you.

I didnt install anything to fix the issue with things going missing. I submitted a support ticket and they installed something... But in terms of the user pass stuff....in my previous post I mentioned that. The username at OpenSRS has to be the first 8 characters of the domain and the password has to be the first 10 chars of the md5 hash of the domain id. I went into the domains table of the database and grabbed the id (for example in the db it will show as 00000967 where 967 is the id). I then executed a php command $hash=md5("967"); and that is what the OpenSRS password has to be. I think this process is ridiculous however Matt says they will not make any changes to the module for OPenSRS so if you want to be able to manage existing domains using the system this is the only option you have.

Yes the same thing with me. They uploaded some additional pear stuff and it works for new domains or domain I manually change the admin user/password for to match that they expect.

It is not easily possible to manage old OpenSRS domains. They have to have been registered by the WHMCS system. Unless we are willing to change ALL of the usernames and passwords for preregistered domains it is NOT possible to manage them at OpenSRS using the WHMCS system. The following is the response to a support ticket I submitted: "This will be because the username and password for those domains aren't what WHMCS expects/requires. Only domains registered through WHMCS will have the right username/pass combo and due to the odd way OpenSRS makes it so you have to know the user/pass for each individual domain the only solution is to set existing domains to what WHMCS expects if you want then to be managable through WHMCS." and "The way it is setup does work and all other hosts using it do seem happy with it. Your customer shouldn't have any need to know the user/pass or be logging in at OpenSRS directly as they should be doing their domain management from your client area once it is setup. OpenSRS is the only domain registrar that has this requirement of a username/pass per domain so implementing that is not feasable."

Is there a way to stop the automatic domain registration? I want it to only prepare the request but not send it? I do not see a setting for this? I found the setting to stop domain renewals but not the registration on initial orders. Thank you.

Hello all I am having a strange problem with Domains. We have just installed and setup the WHMCS system. We use OpenSRS and have added our megainc and KEY to the settings. When we go to one of our domains and specify OpenSRS as the registrar and click Save all of the options below domain status including the Save Changes buttons disappear. See image below: Has anyone seen this or have an idea what might cause this