New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Just taken ours off. Better start doing it guys.
The only alternative was hostbill and they're kinda merrrr from what loveVPS was saying.
Francisco
Running ?licensedebug&forceremote on any installation takes it offline, I thought they cached licenses if the server was down for situations exactly like this?
Compressed, hidden, crippled. So, how's hostbill?
Well someone is going to have a sleepless night.
By default WHMCS' authentication software caches for like 4 - 5 days. They had a few times back in their WHMCS 3 days where they had a day+ downtime due to some equipment issues I think?
Francisco
This is really fucking worrying.
Did you guys put it in matianance mode or how did you do it?
I used Clientexec for my business. It has improved a lot in the past two years although there is still a long way to go.
@bijan588 mv the dir, chmod 000 new one, put up notice.
ClientExec misses a lot of plugin support.
Well done, your WHMCS is going to be offline until whmcs.com comes back up.
@PhilND going to be a pain from my phone.
Well said
Due to @WHMCS Being attacked, we've shut down billing for now, support can be contacted at [email protected]
Someone has done it to me, darn.
@bijan588 I compressed the directory and deleted it.
Better pay some invoices before its to late.
@Daniel I agree that Clientexec does miss a lot of plugin support, but we usually deployed accounts manually to review the order. Now we only provide consulting and web design, so only basic invoicing and support is needed.
Looks like they have access back, site shows a maintenance message.
Still loading to ugnazi here, took down our whmcs install ;-)
I found out how they were hacked.
They used social engineering at HostGator to get Matts (from WHMCS) password.
>
I bet the hosts with nulled WHMCH installed are laughing
>
Any sources to that?
@Daniel Explains it... hostgator are monkeys. I would NEVER use them for 'managed' hosting
http://www.webhostingtalk.com/showpost.php?p=8137955&postcount=63
No, I gave the source.
Ah ok.
That's bad security, we let know all our hosts that if there is ever anything needed on servers (root password resets, reinstalls, etc.) then they have to confirm it by phoning up our office.
No doubt that with this bold action, he has struck a blow for the poor, disadvantaged...er...right, another pimply-faced teenage attention whore.
Alternatives to WHMCS?
Hostbill - pay up front for a year, which turns me off
Blesta - no experience, though the name sounds like a curse my Italian father might have used
ClientExec
WHMAutoPilot
IP.Nexus - yeah, actually this is an option as it has cpanel/whm integration, etc. However, it's an add-on to IP.Board so you'd have to own or purchase that as well.
Although I haven't setup shop yet, I'll probably continue hacking on WHMCS because I find its code really nice and easy to work with.
If the hacker really wanted to be a jerk, he could publish the non-ion'd source code.
They probably have the WHMCS source now
Who's peformer of the catchy music in the background of those hackers page?