Contact Us | About Us | Support Center | Blog

Posts Tagged ‘security’

WHMCS 4.5.2 Available for XeHost Resellers

Saturday, June 25th, 2011

WHMCS has just announced the release of Version 4.5.2. While this release does not come with tons of new features, it does patch up some serious exploits discovered in previous versions and is thus a highly recommended upgrade for all clients. However, in addition to the security updates, this upgrade does contain the following updates:

  • 2CheckOut Module: Added options to skip waiting for fraud check before applying payment, and disable recurring subscriptions offering. Also updated callback handling of foreign currency transactions.
  • Added rounded borders CSS compatability for additional browsers
  • Ajax Cart Template Updates: Added supprt back for product selection skipping, removed checkout button from sidebar, re-added previous ease-in floating div for chrome/opera compatability, + added instructional note to product domain step to advise of the need to pick a domain before item is added to the cart
  • Modern & Slider Templates: Updated live product total summary to include taxes, and modified custom fields & security questions to span multiple columns in checkout step to avoid width display issues, also fixed addons page that wasn’t displaying no addons available warning properly
  • Fixed Ban IP link on Order Details page that was giving a token error when clicked
  • Updated Batch PDF Export tool to support new custom fields, transactions, balance & invoice item grouping functionality
  • Fixed email signature which was being entity encoded and not allowing HTML
  • Fixed cron error that was causing failure from duplicate file includes
  • Fixed cPanel module reseller upgrades failing due to already being a reseller
  • Implemented workaround for mootools javascript conflict that was causing garbage characters in states dropdown menu
  • Fixed prorata invoices period end date missing for cycles other than monthly
  • Non unicode fonts fix for PDF files
  • Fixed ticket escalation email notifications missing subject
  • Fixed admin add order domain registration javascript failing with foreign translations which include apostrophies
  • Improvements to PayPal Subscription handling to not try to create subscriptions for longer time periods than PayPal’s system allows
  • Spelling & language corrections in various client area, reports and admin files
  • Fix for subdomains containing a dash being blocked + update to improve IDN handling
  • Fixed view related invoices link from domains details page not including new registration & transfer invoices
  • Fixed product cancellation automation routines not dealing with Promotional and Client Group Discount line items when cancelling an items renewal
  • Fixed product deletion not removing associated custom fields
  • Added support for TLS SSL mail connections in Ticket Flag Notification Emails
  • Fixed missing stats labels on the new Blend admin template homepage
  • Added tax settings for determining whether taxes should be applied by default to billable items and custom invoices
  • Fixed mass mail process where it was not displaying total steps or time left until completion
  • Added Irish Counties to UK State Dropdown Options
  • Fixed advanced search by notes not working for both services & domains
  • Update to cron process to allow skipping disk & bandwidth overage billing via skip_invoices flag
  • NameCheap Registrar Module: Update from NameCheap introducing Domain Sync Script and improved error handling
  • OpenSRS/ResellOne Registrar Modules: Domain Sync Scripts updated for improved performance
  • All LogicBoxes Registrar Modules (ResellerClub): Updates to DNS Record Management Handling
  • Enom & GlobalSign SSL Modules: Fixed initial certificate status bug
  • WebsitePanel: Fix to error response handling
  • API Updates: Currency fix for AddOrder command failing via local API, updated GetClientsProducts to include additional fields, update for GetProducts to allow a comma separated list of product IDs, updates to GetSupportDepartments and GetTickets to adhere to admin user department assignments by default, fix to OpenTicket function & added additional field update options to UpdateClientProduct. Also added logging option to help with debugging API calls.
  • Language FIle Updates: Updated translations for Dutch, French & Spanish client side, + a new Czech translation for the admin area (Thanks to users who contributed their translations)

All XeHost Reseller clients can access the files for WHMCS Version 4.5.2 by logging in to the client panel at http://clients.xehost.net and clicking “My Products/Services” and then on the “Details” button next to their Reseller Hosting Plan – the download will be available under the “Files” section. Alternatively, clients who installed their WHMCS via Softaculous can easily upgrade it within their Softaculous panel.

As always, if you need any assistance with this upgrade, please do not hesitate to contact our support department as we would be glad to assist you!

Tags: , , , , ,
Posted in Business, Internet | No Comments »

5 Ways to keep your Account Secure

Monday, April 5th, 2010

In today’s society, online hackers pose a huge risk to webmasters, companies, and government agencies alike. While often times server security is your hosting provider’s or IT department’s responsibility, there are several actions that you can take to help ensure that your website and other accounts are safe.

1. Create complex passwords. In most situations where a password is cracked, it is because the password is way too simple. Although you may love your dog, cat, goldfish, child, or anyone else very much, do not use their name as a password. Hackers that use password crackers will be able to gain access to your account way too easy. Instead, using a combination of letters, numbers, and symbols is ideal. For accounts that are case-sensitive, take advantage of using both upper and lowercase letters. The more complex your password is, the harder it will be for a hacker to crack. If you need help creating a good password, try use a website like http://www.goodpassword.com

2. Periodically update your passwords. This is, without a doubt, one of the easiest but often most effective lines of defense that you have. Often times hackers will gain access to somewhere, like your e-mail account, and not take any action to deface it. Instead, they will monitor it over time and can often use it to gain access to other accounts. By periodically updating your passwords, it will lock the hacker out of the account after he has gained access to it. Obviously, the more frequently that you update your account, the better. At the very minimum, we recommend that you update your passwords once every quarter (once every 3 months).

3. Use different passwords for different accounts. This is another simple yet very effective defense against hackers. Often times, hackers will crack your password for one account (ie. a forum login) and then use that password to try gain access to other accounts (ie. your webhosting account). As many people use the same password for everything, this creates an obvious problem. In short, if someone is able to get your password, they will have access to everything you do on the internet. By using different passwords for different accounts, in the event that a forum login gets cracked, your webhosting account is not in jeapordy.

4. Check the last login. Many hosting providers, e-mail applications, etc. now tell you on the main page the IP address, date, and time of the last login. Although your tendency is to completely overlook this, it is a very useful feature to verify that your account is secure. A brief look at this text (which is often located on top of the page once you first login) can tell you if someone has been in your account. Obviously, in the event that you do not recognize the IP address, date, or time, you can simply change your account password. Additionally, use can contact the hosting provider or IT department and request that the IP be blocked from the server.

5. Protect your password. A hosting provider, service provider, IT department, or anyone else will never need to know your password – they have a root login that will allow them access to your account. For this reason, you should never give your password out over the internet. A common way that hackers can gain access to accounts is by sending a phishing e-mail requesting that the user login to the website. Most of the time, you will notice that these links are not actually hosted by the company that it looks like the e-mail is from. This is because they are not – once you login the login credentials will automatically be sent to the hacker. Always make sure that you login to the company’s website, don’t login using any links that you receive via e-mail.

Tags: , , ,
Posted in Internet | 2 Comments »