Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

A word of advice for new providers using WHMCS

I've found some time ago a "vulnerability" in the way inexperienced providers sometimes configure WHMCS. I didn't create a thread back then, what I have been doing instead is to send a PM to people I see make the mistake in their offers, so they can correct the issue (which they all did). A couple of days ago a new "user" came to schill for an unknown French provider and I tried my "trick" on their website. Sure enough, they had misconfigured WHMCS. I wanted to message that "user", even though it pissed me off that they would pretend to be a user when they were obviously schilling for their own business... but they got banned faster than I could write them a message. So instead I'm going to write this thread so that new providers have a chance to read it and not make the mistake.

I have no idea how WHMCS works but what I have found is that when providers add options with a monthly price, there does not seem to be a yearly price set automatically for them. So if you sell a VPS for, say 5€ monthly and an option for an additional ipv4 for 2€ monthly, if I add an ipv4 to my order, the price becomes 7€, which is correct. But if you misconfigured WHMCS and i switch to yearly payment, the price of the VPS becomes 60€, but the option becomes free. That way it becomes possible to buy from you a VPS with 64 extra ipv4 for the base price, say 60€ a year. If you have an option to pay quaterly, same problem.

I hope it's clear. Let me know if it’s not. I can give an example using the unknown french provider’s website later, when I am not on the phone, if it helps.

Comments

  • VPSSLIMVPSSLIM Patron Provider, Veteran

    You can set monthly, quarterly, bi-annual and annual prices for configurable options like IPv4 or RAM, storage etc.

    Thanked by 1fredo1664
  • fredo1664fredo1664 Member
    edited May 2025

    @VPSSLIM said:
    You can set monthly, quarterly, bi-annual and annual prices for configurable options like IPv4 or RAM, storage etc.

    Yes I'm sure you can, but here's what happens when you don't (I've just done that on the provider's website, to show you). If I click continue, it will let me buy it.

    Thanked by 1techdragon
  • Just some front end bug possibly. What's the URL?

  • davidedavide Member

    Price is calculated on the backend.

  • fredo1664fredo1664 Member
    edited May 2025

    @itachikonoha said:
    Just some front end bug possibly. What's the URL?

    LET being white hat, not sure if I can give an URL.
    The first time I found the bug, i went ahead an purchased the server. I got the ipv4 for free. I messaged the provider and they let me keep the extra ipv4 for a year, which was nice. That was maybe 2 years ago.

  • @fredo1664 said:

    @itachikonoha said:
    Just some front end bug possibly. What's the URL?

    LET being white hat, not sure if I can give an URL.
    The first time I found the bug, i went ahead an purchased the server. I got the ipv4 for free. I messaged the provider and they let me keep the extra ipv4 for a year, which was nice. That was maybe 2 years ago.

    Then pm the URL

  • wadhahwadhah Member, Host Rep

    You should probably contact whmcs directly?

    https://www.whmcs.com

  • @itachikonoha said:

    @fredo1664 said:

    @itachikonoha said:
    Just some front end bug possibly. What's the URL?

    LET being white hat, not sure if I can give an URL.
    The first time I found the bug, i went ahead an purchased the server. I got the ipv4 for free. I messaged the provider and they let me keep the extra ipv4 for a year, which was nice. That was maybe 2 years ago.

    Then pm the URL

    Fair enough.

  • @wadhah said:
    You should probably contact whmcs directly?

    https://www.whmcs.com

    I should, shouldn’t I?
    It’s more a mistake from the providers rather than a bug in my view, but i guess i'll send them a message.

    Thanked by 2wadhah yoursunny
  • wadhahwadhah Member, Host Rep

    @fredo1664 said:

    @wadhah said:
    You should probably contact whmcs directly?

    https://www.whmcs.com

    I should, shouldn’t I?
    It’s more a mistake from the providers rather than a bug in my view, but i guess i'll send them a message.

    I would say it's a bug, a billing system shouldnt make anything free unless specifically specified (for example, location when ordering)

  • fredo1664fredo1664 Member
    edited May 2025

    @wadhah said:

    @fredo1664 said:

    @wadhah said:
    You should probably contact whmcs directly?

    https://www.whmcs.com

    I should, shouldn’t I?
    It’s more a mistake from the providers rather than a bug in my view, but i guess i'll send them a message.

    I would say it's a bug, a billing system shouldnt make anything free unless specifically specified (for example, location when ordering)

    Yeah i think you are right. I have sent them a message with a link to this thread.

  • MannDudeMannDude Patron Provider, Veteran

    Configurable options should have pricing set for all available periods that the products these options exist for do, but by default every cycle is 0.00, so if you only set the monthly cost of an add-on IP (for example), it doesn't auto calculate the total for that add-on when the service it is applied to is purchased on a longer cycle.

    Been like this forever.

    WHMCS knows. They'll tell you its user error, and they're correct, but a disclaimer or notice for the admin would be nice. (Ex: Warning, a configurable option or product add-on does not meet the pricing cycle requirements for all products/services it is applied to. Click Here to learn more.)

  • fredo1664fredo1664 Member
    edited May 2025

    @MannDude said:
    Configurable options should have pricing set for all available periods that the products these options exist for do, but by default every cycle is 0.00, so if you only set the monthly cost of an add-on IP (for example), it doesn't auto calculate the total for that add-on when the service it is applied to is purchased on a longer cycle.

    Been like this forever.

    WHMCS knows. They'll tell you its user error, and they're correct, but a disclaimer or notice for the admin would be nice. (Ex: Warning, a configurable option or product add-on does not meet the pricing cycle requirements for all products/services it is applied to. Click Here to learn more.)

    Thanks!
    I have warned quite a few providers who made the mistake for offers they posted on LET, but i don’t check all of them, far from it.

    I'm not a provider and never used a billing system. Would you say that if you made the mistake yourself and someone exploited it, would you find out?

  • MannDudeMannDude Patron Provider, Veteran

    @fredo1664 said:
    Would you say that if you made the mistake yourself and someone exploited it, would you find out?

    Only via a manual audit would most providers catch this. In the IP add-on example, checking where these have been assigned and then noticing when reviewing the user accounts and the associated billing/invoices.

    Thanked by 1fredo1664
  • yoursunnyyoursunny Member, IPv6 Advocate

    We bankrupted a provider through their price override coupon that's equally dangerous.

  • MannDudeMannDude Patron Provider, Veteran

    @yoursunny said:
    We bankrupted a provider through their price override coupon that's equally dangerous.

    The coupons can be dangerous too. Same with multi-currency pricing as well, but less so.

  • olokeoloke Member, Host Rep

    @yoursunny said:
    We bankrupted a provider through their price override coupon that's equally dangerous.

    Solid $6.9/year deal.

    Thanked by 1yoursunny
  • @MannDude said:
    Configurable options should have pricing set for all available periods that the products these options exist for do, but by default every cycle is 0.00, so if you only set the monthly cost of an add-on IP (for example), it doesn't auto calculate the total for that add-on when the service it is applied to is purchased on a longer cycle.

    Been like this forever.

    WHMCS knows. They'll tell you its user error, and they're correct, but a disclaimer or notice for the admin would be nice. (Ex: Warning, a configurable option or product add-on does not meet the pricing cycle requirements for all products/services it is applied to. Click Here to learn more.)

    As you predicted, WHMCS response to my ticket below. I don't have a license, so this ends here.

    Thank you for your feedback.

    When you configure configurable options for products, you must also set the prices for the billing cycles that you configure for the parent product. There are various ways to configure pricing in the WHMCS software, depending on many factors.

    We appreciate your feedback and are always here to help our customers with configuring products if they have any issues.

    If you encounter any issues and have an Active WHMCS license, please don't hesitate to contact us back here at WHMCS Product Technical Support.

    Thanked by 2MannDude HostBilby
  • The channel to suggest product design change is https://requests.whmcs.com/

Sign In or Register to comment.