1) WSC Encryption Key
Create a strong encryption key

The encryption key is used to encrypt any data that end users place in the credentials form. The only way to see credentials is to provide the key to decrypt the information. Even if anyone with access to your database cannot see any encrypted information. The only place the key is used is inside the WHMCS administration area. It's stored in a hashed format. When creating an encryption key, we advise you to use a website like Strong Random Password Generator (passwordsgenerator.net). Your key needs to be at least 16 letters and numbers long. These can be higher and lowercase, but you cannot use special characters like @&*%^.

Here are a few examples of some strong strings.

Key Security

You must keep a copy of the encryption key you use. Without the key, any data in the database will become inaccessible. We advise you to keep your key on a USB stick in a locked safe. Do not store it on the server with WHMCS, and we advise you don't store it in an email account or Cloud storage account. If you do, store it in a password-protected zip file.

If you ever disable WSC you will need to enter the same encryption key again to access any credentials attached to current open support tickets. All data collected is deleted when support tickets are closed.

2) Change The Text Displayed On The Ticket Confirmation Page

When an end-user has submitted a request, WSC can automatically forward them to the credentials form. If this feature is not enabled, end users will see the default ticket submission page. The text on this page can be edited in the WHMCS language files by using an overrides file.

Step-By-Step Instructions
Create the folder ‘overrides’ within the ‘lang’ folder located at /lang. But, if you already have this folder and an overrides file just place the below code into the file and edit the text as required.



1. Create or copy the language file you want to override.
For example, to create an override for the English language, you create /lang/overrides/english.php
2. Open the file and start the file with a PHP tag ‘<?php’ indicating PHP code is to be used.
3. Add the code below, changing the text to your requirements;

$_LANG[‘supportticketsticketcreateddesc’] = “Your ticket has been successfully created. An email has been sent to your address with the ticket information. If you would like to view this ticket now, you can do so. We advise you to now add your server’s details by clicking the appropriate button below. If you do not add your servers credentials to this ticket you will see a much longer delay in us resolving your problem.”;

Upload or save the file to /lang/overrides/english.php

3) Add The Credentials Button To WHMCS Templates
WSC is configured to add two buttons via a hook from the WSC UI. In some cases, you might want to add the button to other pages like the ticket submission page. Doing so is simple and just requires the addition of a few extra lines of code on the template. If you use a control panel like cPanel you can use the file manager to edit the templates you are using. At the time of writing this article, the default WHMCS templates are located at /templates/twenty-one/. As an example we will add the credentials button to the page after ticket submission. That template is located at /templates/twenty-one/supportticketsubmit-confirm.tpl.

Step-By-Step Instructions
Open up the /templates/twenty-one/supportticketsubmit-confirm.tpl with a file manager or download it to your desktop. Locate line 6 in this file which looks like this;

Error 403 when saving the credentials form

This usually happens when your environment is running Mod_Security. Older rule sets trigger a false positive when WSC tries to save the initial tables to the database. To confirm this is the case you can visit the credentials form and you won't see any fields that can be filled out by end users. There are a couple of options to resolve this.

Disable Mod_Security (Temporarily)

In cPanel you can disable Mod_Security on a per-domain basis. Navigate to the cPanel UI and search Mod_Security. Slide the slider to off and then try to attempt to save the credentials form again. This time if the form saves and you can see the WSC form fields when visiting the credentials form you know Mod_Security was the issue.

Disable Mod_Security Rule
If you have cPanel and access to WHM you can navigate to the Mod_Security section to see which rule is being triggered. This rule can then be whitelisted and ModSec enabled again.

Update RuleSet
The latest ruleset can be installed, which should resolve this issue. The latest ruleset may not be shipped with control panels like cPanel, and updating ModSec rules is beyond the scope of our support. cPanel, Plesk, and DirectAdmin provide support for features contained in their respective control panels.

Correct visitor IP when using CloudFlare
Cloudflare proxies traffic to your origin server. For this reason, in your logs and when WSC Protect records IP information in the WSC Protect log, it will record Cloudflare's IP and not the real visitors' IP. To correct this, you can use Mod Remote_IP to correct the information we receive from Cloudflare. As this is not a problem with WSC we are unable to assist you with installing Mod Remote_IP, but we are providing instructions below. If you use a control panel like cPanel your host or control panel provider should help you install Remote_IP if you are not sure.

cPanel
cPanel has provided detailed instructions on how to enable Mod Remote_IP. See the post located on the cPanel website. Unfortunately, this does require some technical knowledge. Make sure you can complete this or you could end up with a broken server, If in doubt, ask cPanel for assistance.

LiteSpeed
If you use LiteSpeed you can log in to the LiteSpeed administration area. Navigate to Server > General > General Settings and tick the “Use Client IP in Header” option. Remember to restart the web server for the new settings to take effect.

Other Systems
Cloudflare provides a range of instructions for other systems. These guides can be found here. (https://developers.cloudflare.com/suppor...itor-ips/(

WSC Protect - Edit the Pin Check page style and text
When 2FA is enabled, WSC will record the user's IP addresses. These are stored in a log that can be seen on the "WSC Protect" tab located on WHMCS client's profiles. It's possible to change the look of the page that end users see to enter the PIN code they receive via email. Some people like to change the colour of this page to match their website. Others may need to tweak the page so text is visible correctly. Open up the file below on your desktop or in a file manager. If you are editing the file in your file manager, make a copy first.

/modules/addons/tickets_credentials/templates/pinchecker.tpl
As of V2.1.1 you can also edit this page to change the text that is displayed to end users. We will add language strings in a future version. The default code of the file displays as;

1) How does the WHMCS Secure Credentials (WSC) Module protect my customers' data?
ANS: You enter an Encryption Key into the module. That key is stored in a hashed format in the database. When your customers complete a credentials form, the key is used to encrypt the data. The encrypted data sits in your database, and when one of your support team clicks the Credentials tab on the WHMCS support ticket, the key is used to decrypt the data and display it in plain text. The ability to use a custom key to encrypt data and display it in a tab is unique to the WHMCS Support Module. Once the support ticket has been closed, any data left by the customer is deleted from the database.

2) Can the Credentials form be modified?
ANS: Yes, but this is license-dependent. WSC users can change all of the text on the credentials form and hide sections that are not needed.

3) Can you use multiple Credential Forms?
ANS: Not yet, very soon

4) What do the ticket updaters do?
ANS: These have many use cases and are another unique feature of our WHMCS module. From asking your customers to supply additional information to apologising for a delay in answering the customer's request, to closing requests after a certain time. The sole purpose of this feature is to automate tasks that would usually require a human to perform. Saving you valuable time.

5) What languages can be used with the WHMCS Secure Credentials Module?
ANS: We've already translated the text within the module to all languages supported by WHMCS. If your customer chooses a different language in their client area. The module will use the same language. All of the language files are provided to all users respective of license tier and can be edited.

6) Can the WHMCS Secure Credentials Module be used with replication?
ANS: Yes. Our WHMCS module can be used in environments where your database is replicated to other nodes/hosts.

7) What custom themes does the module work with?
ANS: We make the module compatible with Lagom theme. The WHMCS Secure Credentials Module uses hooks to place data on templates. Due to this, it should be compatible with most WHMCS themes.

Installing WHMCS Secure Credentials is very simple. The following steps will guide you through the process:

1) Upload the entire folder to your website - if you experience problems, try uploading in binary mode. However, do not upload the “upload” folder, just the files inside it!
2) Login to admin area, go to Configuration > System Settings > ADDON MODULES
3) In the addon modules page, you will see the WHMCS Secure Credentials. Click activate, then click configure to see the options
4) Check the Full Administrator box in the Access Control, then click Save Changes
5) You can access your module at 'Addons' → ' WHMCS Secure Credentials'

Configure Auto_Reply Cron
So that the ticket updater posts updates to tickets, configure the below cronjob to run every minute or five minutes. The cron command below assumes you are using cPanel with Easy Apache and PHP 8.1. The path to the cron file is /modules/addons/tickets_credentials/autoreply_cron.php for other environments.

cPanel - PHP 8.1

Quote:/opt/cpanel/ea-php81/root/usr/bin/php -q /home/CPANEL_USER_NAME/public_html/modules/addons/tickets_credentials/autoreply_cron.php >/dev/null 2>&1

Quote:/opt/alt/php81/usr/bin/php -q /home/USERNAME/public_html/modules/addons/tickets_credentials/autoreply_cron.php >/dev/null 2>&1

Version: 2.2.1 Released (08/04/2024)
Maintenance

Fixed License System
Fixed PHP Issues

Version: 2.2.0 Released (07/16/2025)
Minor

Updated to the new company name
Updated to the new licence system
Updated Improve ionCube Loader
Updated remove Support for WHMCS V8.9.x to 8.10.x
Updated removed the Free module
Updated new WHMCSServices menu to work with WHMCS 8.13
Updated Support WHMCS 8.13.x
Fixed Import credentials issue not working in the admin.
Fixed Trigger Words JavaScript code to ensure proper keyword detection and execution
Fixed Login Authentication* mechanism feature to record all IP addresses used by customers during login
Fixed a couple of JS

Version: 2.1.1 Released (01/01/2024)
Maintenance

Added Keep database tables.
Added End-users can now enable & disable WSC Protect.
Fixed the urgent ticket feature.
Fixed to escalate the ticket feature.
Fixed to WSC Update.
Update Style changes to WSC UI

This is the top 10 WHMCS Services products of the month, for June.

1) No Payment Required
2) Email 2FA
3) Email Verification Pro
4) Ultimate Captcha Pro
5) Services Fee
6) Affiliates Plus
7) Client Notifications
8) Client Limitation
9) SMS Manager
10) Gift Card

Welcome back, everyone! We bring back our WS Server Monitoring because of a big demand by my clients for the WHMCS module. Here's your chance! WHMCS Service's popular software, WS Server Monitoring, is a unique system that allows you to run your own website monitoring service and explore a fairly untouched but lucrative space, which has the potential for many opportunities. WS Server Monitoring is ready to be deployed with uptime monitoring solutions. This product allows you to offer free and paid membership services. It monitors your members' website (s), POP3, Keyword, FTP protocols, Blacklist Check and all custom ports 24/7 and more.

For more information and Screenshots: Click Here

The next fifteen (15) people who purchase this module will get 15% off the Sales Price. To get this 15% discount, you must use the discount code WSMon when you order. If you do not use this discount code when you order, you will NOT get the 15% off. Please remember to use the discount when you order.

Sale Price:
Owned License: $49.99 USD Order Here

Click Here To View All WHMCS Addons By WHMCSServices

Do You Need Custom Development For Your Business? Click Here

Looking for help with WHMCS?
We also provide WHMCS Themes, WHMCS installation, WHMCS configuration & WHMCS integration services.

Remember to check out also the list of our other new version released since:

WS To-Do List Extended v3.1.0
WS Email 2FA v1.1.5
WS Client Notify v3.1.11
WS Support Pin v4.92
WS Client Reminders v2.0.4

Coming Soon:
WS Security Tools 1.0.0
WS Close Account 3.5.0

Our Social Media:
Twitter Here
Facebooks Here
Instagram Here
LinkedIn Here

How can I use Draw Signatures?

ANS: Draw Signatures only works with Global terms.

How do I add a login to the PDF File?

Ans: You need to upload a logo.png at /modules/addons/agreeterms/images/

This is the top 10 WHMCS Services products of the month, for May.

01) Affiliates Plus
02) Client Manager
03) SMS Manager
04) Discount Manager
05) Refer A Friend
06) Agree Terms
07) Email 2FA
08) Client Limitation
09) Client Notifications
10) Email Verification Pro