Jump to content
zitu4life

An user with admin privileges can delete logs intentionally to hide something

Recommended Posts

Hello there

Utilities>Logs>Activity logs or Admin Logs

An user can delete those entries to hide what he done??.

Examples: sometimes we ask support on official WHMCS website (www.whmcs.com) or even other custom modules development  for some-kind trobleshooting or even an developer for something that need to have access to our WHMCS.

1 - Grant access to a staff from WHMCS sound resealable acceptable and most trusted (considering I am doing it from www.whmcs.com;
2- But when it is from other company modules developers less reputable than WHMCS sometimes I am not so comfortable in giving access full administrator especially if you never know exactly what time they will login (due different time zones).

PS: there is those options to send confidential information on special fields provided, but....

An admin user, can just manipulate WHMCS logs and do bad things and erase history, or just snoop around your stuff and erase at the end?

So what is you best practices when you need to provide confidencial information for your custom module development or a developer?

Share this post


Link to post
Share on other sites

For development purposes you may find a developer license is the best to provide access to a WHMCS installation, without the 3rd party having access to your live system.

We have details on how to get a developer license here: https://www.whmcs.com/members/index.php/knowledgebase/78/What-is-a-development-license-How-do-I-get-one.html

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Similar Content

    • By kan
      Hi
      Client charged 2nd time even if invoice is paid, Client paying using PayPal subscription. BUT In previous two months it was normal and charging only once per invoice.
      Invoice 1: https://nimb.ws/J2Apmk
      Invoice 2: https://nimb.ws/W1ci0K
      Log: https://nimb.ws/gdYsqv
      Is this setting from PayPal Subscription or anything else in Product setup?
       
      Thanks in advance
      kan
    • By HardSoftCode
      Security login adds an additional layer of security to your client area. If the user failed login attempts x times then the user remember his password and successfully login he need to enter a second passcode that will be send to his email this will make sure that the user is him and he is the one trying to login to his account and it's not another guy trying to get the user account.
      Features
      Countdown date picker Template system with 4 templates Social link for social media buttons Page content manager About us and contact us pages only for minigo template Google reCAPTCHA Subscribe form Export subscribers email addresses to CSV file Changelog
      Rewrite the code from scratch Improve the UI for admin area Improve move emails to email templates New login with verified link New disable security login if the client enable 2FA New google reCAPTCHA New setup the waiting time to request the PIN code resend New prevent email from saving in log New company logo and copyright in page For more details and screenshot visit the product page
      https://www.hardsoftcode.com/products.php?p=product&a=security-login
      ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
      Maintenance mode for WHMCS is for preventing any users other than administrators from using the site while maintenance is taking place, though it's not designed to prevent user access during version upgrades. When users attempt to access a course when your site is in maintenance mode, they obtain a message informing them that the site is in maintenance mode. If you wish, you can create a customized maintenance mode message, perhaps stating when the site will be available again or giving the reason for doing maintenance.
      Features
      Countdown date picker Template system with 4 templates Social link for social media buttons Page content manager About us and contact us pages only for minigo template Google reCAPTCHA Subscribe form Export subscribers email addresses to CSV file Changelog
      Rewrite the code from scratch Improve the UI for admin area New subscribe form New 3 new templates New google reCAPTCHA New export subscribers email addresses to CSV file New countdown date picker For more details and screenshot visit the product page
      https://www.hardsoftcode.com/products.php?p=product&a=maintenance-mode
    • By Norberto Ramirez
      Good morning, how are you all?
      This time I have a small problem from days ago as indicated by the title of the topic, my WHMCS system is not sending emails to the corresponding clients (payment notice, email verification, password change, new clients and many more).
      I have searched the community if there is a related topic and I will not get it who can give me a hand?
      Note: I have already reviewed the email platform in the cPanel and everything is fine, the main email sent and receives emails, password and configuration of the same, I think the problem occurred with the last update of the system
    • By QuintenRowland
      Hi All 
       
      Looking for a developer that can build me a couple of provisioning modules ?
       
      Please pm me 
       
      Regards
      Quinten Rowland
    • By HardSoftCode
      What is Hive?
      Hive is on a mission to help teams move faster. Our productivity platform powers the fast pace at companies like Starbucks, Uber, Google, and Netflix, and we're passionate about changing how people work and communicate. They are one of the fastest growing startups in NYC and was recently named one of CNBC's 100 Startups to watch. Join our NYC team and be a part of the journey to help every team in the world move faster. Hive was born from co-founders John Furneaux and Eric Typaldos’ career-long obsessions with workplace collaboration. John spent over a decade leading global customer success, learning what teams need to be effective at multinationals and startups alike, while Eric specialized in addressing the many productivity pain points and headaches that plague government and enterprise organizations. Spotting a huge gap between a productivity tool users loved and leaders needed, they set out to found and build Hive.
      Why do you need Hive Notifications?
      The unofficial Hive notifications module for WHMCS give you the ability to receive notifications in Hive app with a setting rules that you can setup from the notifications section in WHMCS admin area. You may select multiple events within any given event category for example ticket, invoice, order, service, domain and API.
      This module only works for admin staff. It doesn't work for your clients.
      How it works?
      After installing the Hive notifications module for WHMCS you need to register at Hive website https://app.hive.com/join and get the API key by going to User Menu > API information after that enter the API key in the Hive notifications module also you can select group ID and select message background color also enter the username. From the notifications section you can create a new notification rule from there you can select a rule name and choose an event also you may select multiple events within any given event category for example ticket, invoice, order, service, domain and API. You can apply some conditions to the notification to restrict when the rule is executed.
      Features
      Setup rule based events and triggers Receive notifications by group API key integration View link in notification Select group id Select message background color Enter username For more details and screenshot visit the product page
      https://www.hardsoftcode.com/products.php?p=product&a=hive-notifications
      ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
      What is Zulip?
      Zulip is an open source chat and collaborative software created by Jessica McKellar and Tim Abbott in 2012. Zulip combines the immediacy of real-time chat with an email threading model. With Zulip, you can catch up on important conversations while ignoring irrelevant ones. In Zulip, you subscribe to streams. Streams are like channels in Slack or IRC. Zulip was originally developed by Zulip, Inc., a small startup in Cambridge, Massachusetts. Zulip, Inc. was founded by the MIT team that previously created Ksplice, software for live-patching a running Linux kernel. Zulip was inspired by the Barnowl client for the Zephyr protocol, and the incredible community that Zephyr supported at MIT. Zulip, Inc. was acquired by Dropbox in early 2014, while the product was still in private beta. Zulip’s beta users loved Zulip’s unique user experience and continued using it, despite the fact that the product was not being actively developed. After a year and a half, Dropbox generously decided to release Zulip as open source software so that Zulip’s users could continue enjoying the software.
      Why do you need Zulip Notifications?
      The unofficial Zulip notifications module for WHMCS give you the ability to receive notifications in Zulip app with a setting rules that you can setup from the notifications section in WHMCS admin area. You may select multiple events within any given event category for example ticket, invoice, order, service, domain and API.
      This module only works for admin staff. It doesn't work for your clients.
      How it works?
      After installing the Zulip notifications module for WHMCS you need to register at Zulip website https://zulipchat.com/new and create an incoming webhook by navigate to Settings > Your Bots then setup the incoming webhook until you get the incoming webhook information after that enter the incoming webhook information in the Zulip notifications module also you can select the type of message and enter the recipient email address(es) if it's a private message and enter the notification topic. Only required if the type is stream. From the notifications section you can create a new notification rule from there you can select a rule name and choose an event also you may select multiple events within any given event category for example ticket, invoice, order, service, domain and API. You can apply some conditions to the notification to restrict when the rule is executed.
      Features
      Setup rule based events and triggers Receive notifications by message type Incoming webhook integration Welcome message View link in notification Stream or private messages Recipient email address(es) Notification topic For more details and screenshot visit the product page
      https://www.hardsoftcode.com/products.php?p=product&a=zulip-notifications
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated