“WHCMS 5.3.9 this is a security and maintenance release.”

WHMCS 5.3.9 is an all-in-one client management, billing and support solution for online businesses.

WHMCS 5.3.9 handles everything from signup to termination, with automated billing, provisioning and management.

With WHMCS 5.3.9, you’re in control with a very powerful business automation tool.

You will need a License to install and run WHMCS 5.3.9.

Changes Details

Security

• Case #2525 – Provide migration path to harden Admin & API cryptographic
• Case #4177 – Mask sensitive passwords in admin interface
• Case #4821 – Redacted
• Case #4822 – Redacted .
• Case #4824 – Redacted
• Case #4829 – Redacted
• Case #4830 – Redacted
• Case #4832 – Remove access to version information within server status script
• Case #4886 – Redacted
• Case #4923 – MoipApi Gateway Module: Remove file system log function
• Case #4987 – Add Proxy Trust IP Configuration
• Case #4988 – Redacted
• Case #4989 – Redacted
• Case #4990 – Redacted
• Case #4991 – Hide license key in license error page notifications

Modules

• Case #3144 – CentovaCast: Fix resource usage syncing logic
• Case #3178 – Nominet: Perform status sync for transferred domains
• Case #3651 – RegisterCom: Fix US contact state handling
• Case #3970 – KashFlow: Fix Currency sent on new client creation
• Case #3978 – PayFlow Pro: Always send invoice number parameter
• Case #4086 – InternetBS: Update variable names used in WHOIS update
• Case #4157 – eNom: Do not send nameserver values when Use Defaults enabled
• Case #4428 – Add e-onlinedata payment gateway module
• Case #4442 – Garantibank: Correct API end point URL
• Case #4724 – Project Management Addon: Preserve date format in tasks
• Case #4823 – Drop support for the EOL Ensim Provisioning Module
• Case #4870 – Drop support for the EOL E-Gold and PayOffline gateways
• Case #4889 – OVH Registrar: Use white label option
• Case #4969 – NameCheap: Add support for .UK domain additional fields
• Case #5002 – NetRegistry: Update API end point URL

Maintenance

• Case #2840 – Correct Group Discount calculation with Inclusive Tax type
• Case #3233 – Update Completed Transfer Sync to update expiry date pre email
• Case #3245 – Resolve Kayako Loginshare failing when Two-Factor Auth is enabled
• Case #3330 – Fix addon invoice line item type in pro-rata invoicing
• Case #3886 – Prevent duplicate invoice generation during cron run
• Case #3961 – Add additional hooks to client summary mass actions
• Case #4118 – Fix missing parameter in add funds redirect
• Case #4578 – Reset domain reminder field after due date change or renewal
• Case #4662 – Ensure transaction rate is always a positive number
• Case #4695 – Improve rounding logic with promotion codes
• Case #4731 – Prevent placing upgrade orders when one in progress
• Case #4845 – Fix license error message improperly reading error key
• Case #4848 – Fix new customer report graph labels for current year
• Case #4851 – Resolve fatal error occurring in reCAPTCHA validation routine
• Case #4852 – Fix typo in the label tag of reports
• Case #4880 – Ensure support and updates validity is enforced correctly
• Case #4888 – Add contextual help link to System Cleanup
• Case #4931 – Correct translation in French language file
• Case #4945 – Correct incorrect links in the New Customers report
• Case #4948 – Use Casual version numbering in XML API Response
• Case #4976 – Ensure charts handle special characters appropriately

[otw_is sidebar=otw-sidebar-8]

The post WHCMS 5.3.9 Update Released appeared first on Orange Internet Solutions.

“WHMCS 5.3.7 a maintenance update released.”

WHMCS 5.3.7 is an all-in-one client management, billing and support solution for online businesses. 

WHMCS 5.3.7 handles everything from signup to termination, with automated billing, provisioning and management. With WHMCS, you’re in control with a very powerful business automation tool. 

You will need a License to install and run WHMCS 5.3.7.

Changes Details

Improvements

• Case #2719 – Display an error message when Duplicate TLD requirements are not met
• Case #2996 – Update to treat credit removal like a refund
• Case #3251 – Prevent duplicate domain names from being added to the cart
• Case #3331 – Add InvoiceCreation Hook Point
• Case #3879 – WHOIS Server Definition Updates
• Case #3973 – Performance Optimisations to Annual Income Report
• Case #3973 – Performance Optimisations to Daily Performance Report
• Case #3973 – Performance Optimisations to Monthly Transactions Report
• Case #3973 – Performance Optimisations to Support Ticket Replies Report
• Case #3991 – Improve Product Assigned Downloads Logic
• Case #4134 – Make client links from admin ticket view open in a new tab
• Case #4230 – Ensure AfterModuleChangePackage Hook is called on package change
• Case #4239 – Allow ticket email import number limit to be configured
• Case #4248 – Add support for leading zeros in Sequential Paid Invoice Numbering
• Case #4297 – Add number of recipients to mass mail tool
• Case #4303 – Redesigned admin email template listing interface
• Case #4339 – Apply Global Email CSS Styling to email body
• Case #4396 – Allow pipe character to overload configurable options value
• Case #4462 – Validate CVV length on order form, admin and client pages

API

• Case #3027 – UpdateAnnouncement: Fix creating new announcements
• Case #3271 – General: Preserve pricing when using API via hook at checkout
• Case #3497 – AddClient: Validate locked email addresses
• Case #4089 – GetClientsProducts: Fix for configurable options with dropdown and radio button
• Case #4142 – GetClients: Update to only use search value when supplied
• Case #4168 – AddClient: Saves custom fields when there is an error and no validation
• Case #4206 – UpdateClient: Add support to clear stored credit card data
• Case #4227 – AddOrder: Improve validation of requests
• Case #4292 – GetActivityLog: Update to not apply HTML linking unless requested
• Case #4388 – AddOrder: Check the status of domains being renewed
• Case #4404 – GetActivityLog: Now returns activity logs for a specific user
• Case #4484 – UpdateInvoice: Fix error message when line item updates are present

Modules

• Case #2687 – [Moneybookers] Update Moneybookers name to Skrill
• Case #3031 – [Nominet] Clarification of error message when Registrant name is missing
• Case #3416 – [AsiaPay] Update AsiaPay module to latest API version
• Case #3608 – [e-path] Remove special characters from epath gateway description field
• Case #3651 – [Register.com] Correct State/Province usage
• Case #4031 – [eNom] Certificate List updated
• Case #4190 – [TransIP] Improve RSA key detection
• Case #4218 – [OnlineNic] Add support for .me registration
• Case #4248 – [EU VAT Addon] Add support for leading zeros in custom invoice number
• Case #4263 – [WHMSonic] Improve error handling for login failure
• Case #4267 – [DirectAdmin] CSF Plugin IP Blacklist Compatibility Update
• Case #4341 – [Register.com] Fix nameserver updating
• Case #4369 – [Payza] Currency conversion issue for callback and update test URL resolved
• Case #4375 – [Yubico] Two-Factor validation routine update
• Case #4384 – [eNom] Check expiration status before renewing a domain
• Case #4385 – [GlobalSign] Add support for SSL provisioning over 4 years
• Case #4392 – [PayPal] Resolve entity encoding issue in PayPal Payments Pro 3D Secure callback
• Case #4393 – [Plesk] Update for improved legacy account compatibility
• Case #4397 – [eNom] Normalize postcode handling for Canada
• Case #4405 – [eNom] RegistrantStateProvinceChoice now set correctly
• Case #4444 – [Register.com] Improve parsing of status codes
• Case #4480 – [PayPal Express] Ensure SystemURL is available to modules

Internationalization

• Case #2609 – Add translatable strings to multiple product sub-systems
• Case #2609 – Add support to translate password strength in client area
• Case #2723 – Update Danish language file
• Case #3208 – Update Dutch language translation & add partial admin translation
• Case #3352 – Update Arabic language file
• Case #3522 – Update Hungarian translation for client area and add admin translation
• Case #4162 – Enable translation of the Quotes Admin Interface
• Case #4333 – Update Norwegian Translation of Invoice

Bug Fixes

• Case #2590 – Highlight network status notices for clients servers correctly
• Case #2695 – Update on order form auto populates saved security question value
• Case #2771 – Preserve client selection before adding a predefined product to a quote
• Case #2865 – Fix pie charts not displaying correctly under some conditions
• Case #2878 – Check for failed status for ResellerClub
• Case #2881 – Improve Ajax Cart Summary updates
• Case #2976 – Add log entry when API is used to close a ticket
• Case #3021 – Fix date range spacing issue within pdf export generation
• Case #3066 – Fix currency shown for commissions in multi-currency affiliate referrals
• Case #3191 – Display error when no KB articles are found using the default theme
• Case #3231 – Send the Quote Accepted email after client accepts a quote
• Case #3450 – Enforce create invoice permission within the Project Management addon
• Case #3595 – Preserve action and new currency selection within domain registration
• Case #3658 – Fix sticky notes edit link from admin view ticket page
• Case #3920 – Allow currency conversion for configurable options with negative prices
• Case #4005 – Remove extra closing div tag in domain details template file
• Case #4087 – Hide the Transfer button when disabled in the admin are
• Case #4090 – Update billable item description field with full value
• Case #4131 – Fix reference to non-object in upgrade process
• Case #4132 – reCAPTCHA fields re-order to match Google listing
• Case #4135 – Fix syntax error occuring when trying to preview addon email
• Case #4166 – Handle EPP Codes with special characters correctly
• Case #4243 – Fix table sort in Link Tracking not persisting
• Case #4300 – Remove duplicate display of the TLD by the domain checker
• Case #4316 – Correct Domain Syncronisation Misspelling
• Case #4320 – Add state dropdown to admin area client contact management
• Case $4335 – General Settings page no longer errors on empty email address
• Case #4357 – Prevent Fatal Error when deleting security question
• Case #4360 – Resolve search error in the default theme downloads page
• Case #4376 – Display credit card deletion as successful task instead of error
• Case #4378 – Select All checkbox now affects only the proper table in Ticket System
• Case #4379 – Send welcome email for all free selected addons after order is accepted
• Case #4389 – Content Encoding setting from Mail settings now takes effect
• Case #4406 – Show line breaks on custom text field values in printable support ticket view
• Case #4413 – Update to only allow disabling Two-Factor Auth via admin client profile
• Case #4414 – Remove Duplicate WHOIS Server Entries
• Case #4427 – Add Missing Indian States
• Case #4462 – Allow 4 digit American Express CVV codes in templates
• Case #4466 – Fix email marketing list query within cron
• Case #4473 – Ticket Attachment properly filters htaccess
• Case #4509 – Resolve SQL error when changing package from admin area
• Case #4517 – EU VAT Addon Invoice Numbers now start at 1

[otw_is sidebar=otw-sidebar-8]

The post WHMCS 5.3.7 Update Released appeared first on Orange Internet Solutions.

“WHMCS 5.3.5 bugs fixed. Update recommended.”

WHMCS is an all-in-one client management, billing and support solution for online businesses.

WHMCS handles everything from signup to termination, with automated billing, provisioning and management.

With WHMCS, you’re in control with a very powerful business automation tool.

You will need a License to install and run WHMCS.

Changes Details

• Remove leading zero from phone numbers passed to domain registrars
• Add Logging of Admin Client Profile Custom Field Changes 
• Remove object reference outside of object within client area
• ResellerClub: Fix fatal error occurring in contact creation 
• Trigger error when handling unspecified Exceptions in PHP < 5.3.6 
• Fix domain registration & management problems (Enom/ResellerClub)

[otw_is sidebar=otw-sidebar-8]

The post WHMCS 5.3.5 Update Released appeared first on Orange Internet Solutions.

“WHMCS 5.3.4 maintenance release. Update recommended.”

WHMCS is an all-in-one client management, billing and support solution for online businesses.

WHMCS handles everything from signup to termination, with automated billing, provisioning and management.

With WHMCS, you’re in control with a very powerful business automation tool.

You will need a License to install and run WHMCS.

Changes Details

• Remove leading zero from phone numbers passed to domain registrars
• Add Logging of Admin Client Profile Custom Field Changes 
• Make presence of attachments known in admin ticket notifications 
• Displays the correct error message after a domain sync cURL failure 
• Support Tickets: Add option to only update last reply timestamp on change of status 
• Delete custom field entries for a product when the order is deleted 
• Assert proper token values for query retrieval 
• Prevent ‘action’ parameter from being squashed by ajax call 
• Improve Logging of Overdue Notice disabling in Admin Client Profile 
• Remove single and double quotes from hyperlinks in tickets 
• Add exception catch and logging for failed admin emails & notifications 
• Log Ticket Escalation Rule execution to ticket log 
• Admin sidebar updated to link to product types work with new param key 
• Pipe character in config options not being handled correctly in upgrades 
• Run the ServiceDelete hook when deleting services via client summary page 
• Fix Configurable Options not showing in Bundle Config 
• Tidy Twitter response prior to parsing to prevent warnings 
• EU VAT Addon: Fix sequential numbering via mass pay 
• Improve logic for determining TLDs to search when none specified 
• API: Add create as admin option flag to OpenTicket Command 
• Preserve custom field values when changing department 
• Revert PDF Font override behaviour 
• Forces UTF-8 encoding on the Twitter link feed 
• Pulls gateway variables into scope for third party gateways 
• Removes a redundant merge on an array when grabbing gateway parameters 
• Added support for Test Connection ability to modules 
• Added Test Connection ability to Plesk Module 
• Added Test Connection ability to cPanel Module 
• cPanel Module: Improve error message response when SSL is enforced 
• Fix TLD specific fields not displaying on some order forms 
• Fix Invalid Token error in Project Management Client Association 
• Fix due days calc in Project Management Addon after editing a project 
• Fix order confirmation page showing payment required for free bundles 
• Fix Message Preview in admin send message not interpreting HTML 
• Fix Usage Statistics importing from server modules 
• Fix Invalid Token error on admin homepage actions 
• Remove case-sensitivity from localAPI commands 
• Fix Admin Advanced Search by Orders redirecting to wrong page 
• Restore freesans fonts that were removed as part of TCPDF upgrade 
• Prevent matching conflicts with TLD additional fields 
• Only prefix TLD with a dot in Domain Checker if not present 
• Add Windows OS logic condition in file path validation 
• Resolve encoding issues with plain text emails 
• Fix some activity log keywords not auto converting to links 
• Fix broken include path of whois functions file when IDN 
•  Fix fatal error from bad func_get_args use 
• Fix Invalid Token error when enabling or disabling ID protection 
• Add an admin setting for Mail Encoding 
• Change default email encoding to 8bit 
• Fix pricing grid background color in IE 11 
• Add an admin setting for Hook Debugging 
• Fix incorrect variable call in Worldpay Futurepay callback 
• Fix starting price calculations for cycles greater than monthly
• Fix invalid redirect in upgrade process 
• Improve logic of starting price calculations in cart 
• Place IDNA class in PRS-0 compliant heirarchy 
• Add an Admin Setting for PDF Paper Size 
• Add Item Status filter to Client Summary Page 
• Update default fonts available for PDF Generation 
• Fix double encoding of domain registrar config values 
• iDeal via Mollie: Fix error when no custom description is set 
• Enom New TLDs Addon: Restore dynamic template vars

[otw_is sidebar=otw-sidebar-8]

The post WHMCS 5.3.4 Update Released appeared first on Orange Internet Solutions.

Whmcs 5.2.8 has released new patches for the 5.2 and 5.1 minor releases.
These updates provide targeted changes to address security concerns with the WHMCS product. You are highly encouraged to update immediately. 

WHMCS is an all-in-one client management, billing and support solution for online businesses.

WHMCS handles everything from signup to termination, with automated billing, provisioning and management. With WHMCS, you’re in control with a very powerful business automation tool.

You will need a License to install and run WHMCS

Changes Details

The resolved security issue was publicly disclosed by “localhost” on October 3rd, 2013.

The vulnerability allows an attacker, who has valid login to the installed product, to craft a SQL Injection Attack via a specific URL query parameter against any product page that updates database information.

• Add sanitization for pre-formatted AES_Encrypt in queries

More Information

• Try Online Demo:
  Whmcs (Softaculous external link)
  Whmcs Changelog (Official website, external link)

• Start Whmcs
  In order to use Whmcs you need a domain name (ex. yoursite.com) and web hosting service.
  If you don’t have a domain name Register a Domain Name.
  To install Whmcs choose one of our hosting plans. (all our packages includes Softaculous).

• Hosted Whmcs
  Contact us if you don’t need a domain or hosting service, and want to use Whmcs anyway.

[otw_is sidebar=otw-sidebar-8]

The post WHMCS Update 5.2.8 released appeared first on Orange Internet Solutions.

WHMCS has rated these updates as including critical or important security impacts.

Releases
The following full-release versions of WHMCS have been published and address all known vulnerabilities:
5.2.6

The latest public releases of WHMCS are available inside members area at WHMCS.

WHMCS has been updated to 5.2.6 in Softaculous as well. If you have Softaculous installed on your server you can upgrade to the latest version of WHMCS via Softaculous.

PLEASE NOTE: The 4.5 series reached End Of Life as of June 30th 2013. WHMCS is aware that some customers have not moved to an LTS version due to the newness of the LTS policy. The related 4.5 patch release published along with this Security Advisory is provided as a courtesy to those customers. From this point forward, there will be no more patches provided for 4.5 or any other release that has reached EOL.

There is no reason to believe that these vulnerabilities are known to the public. As such, WHMCS will only release limited information regarding the vulnerabilities at this time.

Once sufficient time has passed to allow WHMCS customers to update their installed software, WHMCS will release additional information regarding the nature of the security issue.

These Targeted Security Releases and Patches address 9 vulnerabilities in WHMCS versions 4.5, 5.0, .5.1, and 5.2..

Source : http://www.whmcs.com

The post WHMCS Security Release 4.5.6 and 5.2.6 Update appeared first on Orange Internet Solutions.