oesman

Thanks Matt, was what I wanted to know! I figured it wouldn't affect myself with the renamed directories for our installations.

You're absolutely right, it's a good thing isn't visited by thousands of people hourly including most likely those same people. I know I certainly don't check that site and others 1-2 times a day to ensure my servers are secure.

Sounds good, I'll keep it to myself next time.

I don't see it in the rules: http://forum.whmcs.com/faq.php If it's something that's been said in other posts, I'd have no idea. I don't frequent this forum. If it's a rule there should be a sticky in this section, or it should be in the FAQ. I'm not a mind reader.

Anyone seen this exploit that just poped up on [removed]? {link removed}

John, Sorry for the delay, from the log you can see that my sample order is made and passes the fraud check. At this point it should be automatically created and on the server side (whm) it does get created. However the log only shows: 25/01/2011 20:53 Order ID 328 Passed Fraud Check 25/01/2011 20:53 Email Sent to cpanel@xxxxx ([Ticket ID: 123917] New account on xxxxxxxxxxxxxx (xxxxxxxxxxxx.com)) Now I login to WHMCS admin and accept the pending order. However it tries to create the account again and fails: 25/01/2011 20:53 Running Module Create on Accept Pending Order 25/01/2011 20:53 Module Create Failed - Service ID: 320 - Error: Sorry, a group for that username already exists. So the account was auto created, but WHMCS does not realize that happened and tries to create it again. If I terminate the account (via WHMCS or via WHM) and then create it via the create button, it works fine: 25/01/2011 20:54 Module Terminate Successful - Service ID: 320 25/01/2011 20:54 Order Accepted - Order ID: 328 25/01/2011 20:54 Module Create Successful - Service ID: 320 Why does WHMCS create the order automatically (as it should) but not realize that it did that? It doesn't even log that it created the account when it was paid for.

Thanks for the help guys. For the 2nd issue I suppose I understand that, its just kind of an obtuse setting. For the first issue, the account is being created properly, there are no errors in the log. It just wont set the product status to active and send the welcome email. If I click the create button on the product page ill get an error saying the account exists.

So I'm having several issues with automatic creation of cPanel accounts. Issue #1 - Product status remains pending. A shared or reseller account is ordered. The order is paid for and the account is automatically setup on the server. I can see the new account in cPanel (shared) or WHM (for reseller). However the product (not order!) status remains 'Pending'. Even once the order is verified and set to active the product status does not change. The client never receives a welcome email with login information. Clicking the create button yields an error since the product is actually created. Issue #2 - "Fill active server until full then switch to next least used" causes WHMCS to ignore server groups. If I set my Reseller server group to "Fill active server until full then switch to next least used" any orders placed will be placed on a shared cPanel server which is NOT in the Reseller server group. Support told me to use "Add to the least full server" in my group configuration. It does indeed work with that setting, however this does not make any sense. If this option was designed to bypass server groups why would they make it configurable on a per-group level? Any help would be greatly appreciated!

So I have two server groups "Web Hosting" & "Reseller cPanel" however my reseller product still tries to provision on the server that is part of the "web hosting" group. Is there a known bug or something where whmcs ignores server groups? If i manually select the proper server on the customer's product page and manually click 'create' provisioning goes fine. I've double and triple checked that the product is configured to pick a server from the "Reseller cPanel" server group, but no matter how many times I test it's always picking a server from "Web Hosting" group instead.

scurrell, thats what i ended up doing. wish they had a manual cc option. so far i just set to paypal and told them to select CC from the drop down.

Is it possible to disable automatic rebilling of credit cards for an account? I have some high dollar customers that need to pay manually rather than have their credit cards hit for thousands of dollars before they're ready.

My bad. I figured it out. The server was configured to run Apache as 'billing' user/group on this server and the session storage directory was not set to that group: billing 13019 0.0 0.1 34608 8820 ? S 23:26 0:00 /usr/sbin/httpd billing 13020 0.0 0.1 34608 8820 ? S 23:26 0:00 /usr/sbin/httpd billing 13021 0.0 0.1 34608 8820 ? S 23:26 0:00 /usr/sbin/httpd root 13263 0.0 0.0 3920 756 pts/8 S+ 23:31 0:00 grep -i billing [root@billing php]# ll total 8 drwxrwx--- 2 root apache 4096 Dec 10 2008 session [root@billing php]# chown root.billing session/ [root@billing php]# ll total 8 drwxrwx--- 2 root billing 4096 Dec 10 2008 session [root@billing php]# ll session/ total 4 -rw------- 1 billing billing 95 Nov 2 23:32 sess_4h2ui3ck5449t0uoo1umrlmgl0 -rw------- 1 billing billing 0 Nov 2 23:32 sess_d86builjqvlhufhgtrblaha830 [root@billing php]# I guess the old system used the db to store sessions. I wonder how WHMCS worked at all then when I first installed it!

TonsOfStores, Thanks, but it is. I can receive password resets, etc.. ** Now I can't login to admin either :-/ **

Hello, I just installed WHMCS and while getting everything configured I decided to create a test client and login. I can not login with the test client at all. It just throws me back to the login page, no errors. If I click "Login as client" from the client profile while logged in as admin it says invalid login information. No messages in the error log. Does anyone know what's going on here?