- software:whmcs

WHMCS - client password hash generation

anonymous@undisclosed.example.com (Anonymous) — Thu, 14 Jul 2016 21:38:47 +0000

WHMCS - client password hash generation WHMCS Versions 6.3.0 and Newer In version 6.3.0 WHMCS changed the method of which they use to hash passwords. Their release notes state that they are now using BCRYPT password hashing. It would appear that WHMCS is now using the password_hash() function provided with php. The following code can be used to generate a valid password to be stored in the DB.

Forcing WHMCS to use SSL/HTTPS

anonymous@undisclosed.example.com (Anonymous) — Thu, 28 Apr 2011 17:25:25 +0000

Forcing WHMCS to use SSL/HTTPS A problem we found with WHMCS is that it allows client, staff, and admins to log into it using the standard HTTP prefix and does not force them to a SECURE HTTPS URL. Not only that but some areas of WHMCS require you to access them via

WHMCS

anonymous@undisclosed.example.com (Anonymous) — Fri, 18 Jun 2010 23:48:40 +0000

WHMCS whmcs index

Resource for WHMCS MySQL database connection

anonymous@undisclosed.example.com (Anonymous) — Fri, 19 Oct 2012 15:23:07 +0000

Resource for WHMCS MySQL database connection There may be a time when you need to know the database resource variable for the default WHMCS MySQL connection. This variable is named $whmcsmysql, below is a quick example of how to use it. global $whmcsmysql; $query = sprintf("SELECT * FROM tblclients WHERE id = %d", $_REQUEST['id']); $result = mysql_query($query, $whmcsmysql); if($result === false) die('Query Failed: ' . mysql_error()); $client = mysql_fetch_assoc($result); if(!is_array($clie…

Securing WHMCS

anonymous@undisclosed.example.com (Anonymous) — Tue, 23 Dec 2014 21:49:39 +0000

Securing WHMCS This page has additional steps that one can do to further secure their WHMCS installation. Refer to first, then use some of these techniques. Limit Read Access with SuPHP If you're running WHMCS on any server doing virtual hosting (meaning your hosting more than one site on a single server) then you should be running suPHP. SuPHP is an Apache module that changes the uid of the process executing your php scripts to the REAL us…

WHMCS - How to generate the upw session variable

anonymous@undisclosed.example.com (Anonymous) — Fri, 22 Aug 2014 20:35:47 +0000

WHMCS - How to generate the upw session variable Version 5.1.2 or newer As of version 5.1.2 WHMCS added an extra salt bit to the UPW hash and also uses sha1 for the hash. The salt is taken from the CC encryption hash. Version 5.0.3 and older Below is code showing how the upw session variable is generated on a WHMCS install