WHMCS Expense Tracking Module

[everythingweb]

Hi all,

 

We have just released our WHMCS Expense Tracking Module.

 

Features

 

* Track your monthly expenses

* Assign an Expense Category to each Expense (re-usable)

* Assign a Vendor to each Expense (re-usable)

* Capture recurring expenses.

* View date-range reports on expenses.

* Ability to assign an Expense to a client and send an Invoice for the expense.

 

For full details and screenshots see - https://www.everythingweb.co.za/knowledgebase/22/WHMCS-Expense-Tracking-Module.html

 

Price is R187.50 (ZAR) -- which is, today, $26.24 USD

 

7 day trial is also available (if you don't see it, it will be there shortly)

[EasyWHMCS]

Can the expenses be exported to a excel doc ?

 

Cheers

[everythingweb]

Not in this initial release but I personally will be needing this functionality so it is defnitely in the pipe line. Just finishing off another module for portfolio then will be looking at enhancements.

[oempire]

awesome. im going to check this out!

[oempire]

hey is this encrypted?

[everythingweb]

Yes, IonCube encoded.

[BobC]

May I ask, why are you assessing a VAT for US orders?

[everythingweb]

May I ask, why are you assessing a VAT for US orders?

 

VAT is included for South African customers _only_

 

Once you sign up and set your country to something other than South Africa and continue to your checkout page / update cart you will see the VAT is removed.

 

If you have any issues please let me know and I'll see what the issue is.

[GGWH-James]

I'm just installing the 7-day trial. I would suggest to place all of the config settings into a database table, along with the localkey. The WHMCS password should also be encrypted within the database and decrypted as needed by your software.

[everythingweb]

Thanks for the suggestions Jamroar, we are releasing an updated version within the next 2 weeks with a bunch of fixes for this module.

 

We aim to rather use the DB directly from the module instead of using the API in future. We have found some shortcomings in the API as well.

[GGWH-James]

I haven't done much with it as of yet, obviously, but it looks good though. If it works as well as it looks in the screen shots, I'll be purchasing at trials end. I would like to see the the configuration settings (namely, the WHMCS user/pass) moved to the database for security though.

[everythingweb]

Few issues with the number formatting and calculating the VAT back from a VAT inclusive amount we are busy with.

 

I wouldnt be too concerned about security with regards to setting the login details in the config file, if they can access your files on your server they can access the DB config file anyway and get to your DB.

[GGWH-James]

Few issues with the number formatting and calculating the VAT back from a VAT inclusive amount we are busy with.

 

I wouldnt be too concerned about security with regards to setting the login details in the config file, if they can access your files on your server they can access the DB config file anyway and get to your DB.

It's not a deal-breaker, I'm going to buy anyhow as long as it works as-advertised. However, with that said, the database can provide better security for several reasons and is something that I would like to see in a future release though.

[everythingweb]

Ok no worries We will look into it.

 

Thanks

[GGWH-James]

I added a category, a vendor, and an expense. I was advised that all were saved, but only the category and vendor are listed. The expense list is still empty. However, if I check the database, there is a row in the mod_expenses table with the amount that I had input.

 

 

__EDIT__

I try to view a report and your module displays the following message?

 

Error in query : DELETE FROM tblbannedips WHERE expires

 

Why is your module trying to delete anyhting from that table, or even accessing it?

Edited October 7, 2010 by GGWH-James

[everythingweb]

Hi Jamroar,

 

Please submit a support ticket with screenshots and we will sort it out. We are using it daily and have not run into this, it may be something small.

 

Thanks

[GGWH-James]

Hi Jamroar,

 

Please submit a support ticket with screenshots and we will sort it out. We are using it daily and have not run into this, it may be something small.

 

Thanks

I can think of no legitimate reason for such a module to access that table, for any reason. It should not be trying to delete bans, for any reason. Based on that fact alone, I'm not sure if it's something that we will continue using.

 

For now, at least, I'm going to have to remove it and roll back our database to it's state just prior to installation. I see this as a possible security risk, I don't know what else this module is trying and/or succeeding to do that it perhaps shouldn't be.

Edited October 7, 2010 by GGWH-James

[everythingweb]

Jamroar - that is not our module doing anything with banned IPs. I can assure you, as you say, there is no reason for this at all.

 

EDIT - My response was to your expense not being captured, not to your EDIT that you got an error about the bannedips table.

[GGWH-James]

Jamroar - that is not our module doing anything with banned IPs. I can assure you, as you say, there is no reason for this at all.

 

EDIT - My response was to your expense not being captured, not to your EDIT that you got an error about the bannedips table.

I can assure you, the error was displayed within the report area of your module. As such, I have removed it from our system and rolled everything back to it's state just prior to it's installation.

Edited October 7, 2010 by GGWH-James

[everythingweb]

You can assure me all you like, there is no code in the module that refers to the banned IP table.

 

You do understand that Addon modules are simply included in the code of the WHMCS framework?

 

EDIT: I have submitted a support request to WHMCS and will post their response here, to see if they can shed some light on this.

[GGWH-James]

You can assure me all you like, there is no code in the module that refers to the banned IP table.

 

You do understand that Addon modules are simply included in the code of the WHMCS framework?

You do understand that when your module give me an error relating to somewhere which it has no business accessing and that error disappears when your module is removed, common sense dictates that it's your module?

 

You can assure me all you like that your encoded files don't contain this code or that, but the fact remains; your module threw that error at me while attempting to view an expense report. It's a possible security risk that I'm simply not willing to take. Regardless of the reason, for now I have to remove it. There are security concerns with this and as-it-is, we can't use it with such an error having came from your module.

 

if this were to be cleared up in the future, we may consider it again. You have to understand my position here though with this. I can't take that chance with what happened at the moment.

Edited October 7, 2010 by GGWH-James

[everythingweb]

Im not concerned at all whether you decide to use the module or not. It is your slandering of the module that is a concern to me.

 

I have submitted a ticket to WHMCS and as stated I will post their response as soon as they have given me one.

[everythingweb]

Response from WHMCS:

 

WHMCS

 

Hi,

 

Every page in WHMCS checks the tblbannedips and removes any that have expired,

 

Regards,

Andrew

 

----------------------------------------------

Ticket ID: #486367

 

Subject: tblbannedip's sql error

Status: Answered

 

Please, feel free to submit your own support ticket request and refer to this exact ticket number if you think this is frabricated.

[GGWH-James]

Response from WHMCS:

 

 

 

Please, feel free to submit your own support ticket request and refer to this exact ticket number if you think this is frabricated.

I already knew that. However, what I don't know is what the issue is with your script that's causing the error. I don't mean to imply that you are doing anything wrong with your code, just that the possibility is there. If the error is resolved and is found to not be a threat, we would consider your software again. Perhaps I'm not stating myself clearly here though.

 

I'm not meaning to imply anything, just that we had an error displayed only while your module was installed and that disappeared when we removed it. As such, we can't use it as-it-is at the moment. We have our own security policies that have to be followed and they dictate that we can't use this software right now. Not without a very clear explanation of exactly what caused that error with your module.

[everythingweb]

I can only assume you do not have any experience in development, but if you perhaps ask one of your developers or even WHMCS staff you will understand that I cannot control what the code outside of my modules code does, if I am not doing anything remotely related to tblbannedip's it is out of my control to give any explanation. If we cannot replicate or have access to/proof of the problem then our hands are tied.

 

We have a number of users using this module and this has never come up, if it does again, we will be sure to investigate but unfortuantely that's all there is to it at the moment.

 

I