Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

I released a free WHMCS hourly billing module — looking for feedback

sarvhostsarvhost Member, Host Rep

Hi LET,

I wanted to shar e small project we recently built.

It is a free open-source WHMCS addon for hourly / pay-as-you-go billing.

GitHub:
https://github.com/linuxer69/hourly-billing-for-whmcs

Project page:
https://tlfhost.com/hourllyblingwhmcs.html

We originally built it because WHMCS does not have a simple native way to bill services hourly from client credit. The module allows a provider to set hourly prices for WHMCS products and charge the customer from their account balance based on usage.

It currently supports basic things like:

  • hourly billing from WHMCS credit
  • per-product hourly rates
  • auto-suspend when balance is not enough
  • auto-reactivation after the client adds credit
  • client area usage/balance page
  • admin logs and rate management

Important note: this is the first public version.

It may have bugs and it is probably not ready for production use yet. If you want to try it, please test it in a lab/staging WHMCS installation first. I do not recommend installing it directly on a live billing system until it has been tested more.

I am sharing it here mainly to get feedback from other providers and people who understand WHMCS better than me. If you find bugs, bad logic, missing checks, or have suggestions, issues and pull requests are very welcome.

Issues:
https://github.com/linuxer69/hourly-billing-for-whmcs/issues

This is not a hosting offer. It is just a free tool for the community.

We also have two other small tools we developed:

https://tools.tlfhost.com/
A small collection of online tools.

https://tmpup.site/
A simple temporary file upload service.

Any feedback is appreciated.

Thanked by 1rpqu

Comments

  • rpqurpqu Member

    hmm 69

    Thanked by 1sarvhost
  • Thanks to Claude for this implementation

  • @BilohBucks said:
    Thanks to Claude for this implementation

    And what is the problem?

    Thanked by 1sarvhost
  • @AndreiGhesi said:

    @BilohBucks said:
    Thanks to Claude for this implementation

    And what is the problem?

    I don't like when people claim that they BUILD something, when it is literally fully vibecoded. Perhaps this guy doesn't even know what AI wrote.

    • He is looking for free bug fixes, security checks... huge red flag.
  • sarvhostsarvhost Member, Host Rep

    @BilohBucks said:

    @AndreiGhesi said:

    @BilohBucks said:
    Thanks to Claude for this implementation

    And what is the problem?

    I don't like when people claim that they BUILD something, when it is literally fully vibecoded. Perhaps this guy doesn't even know what AI wrote.

    • He is looking for free bug fixes, security checks... huge red flag.

    Thanks for the feedback.

    using AI doesn't automatically mean someone doesn't understand their own code. know what the code does, and if I didn't, I wouldn't be publishing it.

    also, asking for bug reports, esting, and security feedback is pretty normal for any project, especially open source ones.

    If you spot a specific issue, feel free to point it out. Otherwise, I think we'll just have to agree to disagree 🙂

  • therawtheraw Member

    @BilohBucks said:
    Thanks to Claude for this implementation

    nah, that looks like some low quality gpt, i asked claude to review and it already found 5 bugs.

    Thanked by 1sarvhost
  • sarvhostsarvhost Member, Host Rep

    @theraw said:

    @BilohBucks said:
    Thanks to Claude for this implementation

    nah, that looks like some low quality gpt, i asked claude to review and it already found 5 bugs.

    that's actually useful then 🙂

    if there are 5 bugs, please post them and I'll be happy to fix them.

  • therawtheraw Member

    @sarvhost said:
    that's actually useful then 🙂

    if there are 5 bugs, please post them and I'll be happy to fix them.

    Thanked by 1totally_not_banned
  • sarvhostsarvhost Member, Host Rep

    Honestly, I’m kinda confused why this is turning into such a big argument.

    It’s an open-source project. That’s pretty much the whole idea, right? Someone builds something, shares it, and then other people can help make it better. Bugs get reported, code gets reviewed, people suggest changes, or even send fixes.

    No project is perfect from the start. Even Linux had plenty of issues and limitations in the beginning. It became what it is because people kept contributing and improving it over time.

    So if you found bugs or possible security issues, that’s totally fine — point them out and let’s fix them. That’s much more useful than arguing about whether AI was used or not. I really don’t think that’s the main point here.

    At the end of the day, we’re all adults. Constructive feedback helps everyone. But just attacking a project that someone spent time building and sharing for free doesn’t really help anyone.

  • therawtheraw Member

    @sarvhost said:
    No project is perfect from the start. Even Linux had plenty of issues and limitations in the beginning. It became what it is because people kept contributing and improving it over time.

    So if you found bugs or possible security issues, that’s totally fine — point them out and let’s fix them. That’s much more useful than arguing about whether AI was used or not. I really don’t think that’s the main point here.

    At the end of the day, we’re all adults. Constructive feedback helps everyone. But just attacking a project that someone spent time building and sharing for free doesn’t really help anyone.

    linux is not a whmcs hourly billing module, is a contribution towards a big project build by people who actually understand the language they are using, even if they used AI, ai for them is a tool as is in reality, still a tool, something that can help you to deal with something faster and more efficiently, not a tool that you can use to build something in some language you don't even understand.

    i don't have anything against AI projects, is just the person who uses it and how.

  • sarvhostsarvhost Member, Host Rep
    edited June 9

    @theraw said:

    @sarvhost said:
    No project is perfect from the start. Even Linux had plenty of issues and limitations in the beginning. It became what it is because people kept contributing and improving it over time.

    So if you found bugs or possible security issues, that’s totally fine — point them out and let’s fix them. That’s much more useful than arguing about whether AI was used or not. I really don’t think that’s the main point here.

    At the end of the day, we’re all adults. Constructive feedback helps everyone. But just attacking a project that someone spent time building and sharing for free doesn’t really help anyone.

    linux is not a whmcs hourly billing module, is a contribution towards a big project build by people who actually understand the language they are using, even if they used AI, ai for them is a tool as is in reality, still a tool, something that can help you to deal with something faster and more efficiently, not a tool that you can use to build something in some language you don't even understand.

    i don't have anything against AI projects, is just the person who uses it and how.

    Fair point. In the end the code should speak for itself. If you see specific problems in the implementation, I'm happy to discuss them.

  • i think it'd be interesting if you actually have a service that rely on this module.

    real men test in production

  • @sarvhost said:

    @BilohBucks said:

    @AndreiGhesi said:

    @BilohBucks said:
    Thanks to Claude for this implementation

    And what is the problem?

    I don't like when people claim that they BUILD something, when it is literally fully vibecoded. Perhaps this guy doesn't even know what AI wrote.

    • He is looking for free bug fixes, security checks... huge red flag.

    Thanks for the feedback.

    using AI doesn't automatically mean someone doesn't understand their own code. know what the code does, and if I didn't, I wouldn't be publishing it.

    also, asking for bug reports, esting, and security feedback is pretty normal for any project, especially open source ones.

    If you spot a specific issue, feel free to point it out. Otherwise, I think we'll just have to agree to disagree 🙂

    Complete lie, and I bet you couldn’t stand a simple coding quiz.

    As an actual developer, takes me less than a minute to know you have 0 idea with this code-base and have let AI totally wild.

    Also, you can remove almost all bugs / exploits for this sort of project relying on WHCMS’s framework, and the right packages..

    Because you have no idea what that is, or which to use you’ve let AI vibe the entire thing and it’s obvious.

    Stop lying, I will happily pay for a £100 online-test in any language you prefer if you record proof of you doing the QUIZ live for LET members.

  • @sarvhost said:
    Honestly, I’m kinda confused why this is turning into such a big argument.

    It’s an open-source project. That’s pretty much the whole idea, right? Someone builds something, shares it, and then other people can help make it better. Bugs get reported, code gets reviewed, people suggest changes, or even send fixes.

    No project is perfect from the start. Even Linux had plenty of issues and limitations in the beginning. It became what it is because people kept contributing and improving it over time.

    So if you found bugs or possible security issues, that’s totally fine — point them out and let’s fix them. That’s much more useful than arguing about whether AI was used or not. I really don’t think that’s the main point here.

    At the end of the day, we’re all adults. Constructive feedback helps everyone. But just attacking a project that someone spent time building and sharing for free doesn’t really help anyone.

    Here’s the problem. You even used AI to write this response.

    Whats difference, claude making a github account, making that project, and posting & relying on LEB.

    Or you asking claude, and pasting it here?

    Seems same to me, your acting, talking like a fucking robot we like humans.

  • sarvhostsarvhost Member, Host Rep

    @LEBUserJoe said:

    @sarvhost said:
    Honestly, I’m kinda confused why this is turning into such a big argument.

    It’s an open-source project. That’s pretty much the whole idea, right? Someone builds something, shares it, and then other people can help make it better. Bugs get reported, code gets reviewed, people suggest changes, or even send fixes.

    No project is perfect from the start. Even Linux had plenty of issues and limitations in the beginning. It became what it is because people kept contributing and improving it over time.

    So if you found bugs or possible security issues, that’s totally fine — point them out and let’s fix them. That’s much more useful than arguing about whether AI was used or not. I really don’t think that’s the main point here.

    At the end of the day, we’re all adults. Constructive feedback helps everyone. But just attacking a project that someone spent time building and sharing for free doesn’t really help anyone.

    Here’s the problem. You even used AI to write this response.

    Whats difference, claude making a github account, making that project, and posting & relying on LEB.

    Or you asking claude, and pasting it here?

    Seems same to me, your acting, talking like a fucking robot we like humans.

    Tankyou :D

  • nghialelenghialele Member

    @sarvhost said: Honestly

    Yeah, we would expect you to be honest Claude

  • sarvhostsarvhost Member, Host Rep

    @nghialele said:

    @sarvhost said: Honestly

    Yeah, we would expect you to be honest Claude

    I also say that I got help from the Claudeto guide and fix the bug.
    Is there anything wrong?

  • MrRadicMrRadic Host Rep, Veteran

    Thanks for releasing the module, too many toxic people on this forum.

    Thanked by 2mans_xd sarvhost
  • HotmarerHotmarer Member

    @sarvhost said: It may have bugs and it is probably not ready for production use yet.

    It have a lot of bugs like:

    • In lib/BillingEngine.php, the logic used to prevent double-charging within the same hour is vulnerable to race conditions, resulting in a double charge for that hour ...
    • Also in lib/BillingEngine.php there is lack of database transactions, the credit deduction and the transaction log insertion are performed as separate queries, so when server will crashing after first one you will don't know what happen.
    • I think that there are some XSSes in templates ... Always use escape.

    There is more but i don't have time for that

    Thanked by 1sarvhost
  • nghialelenghialele Member

    @sarvhost said: Is there anything wrong?

    No

  • ailiceailice Member
    edited June 9

    People tend forget about license of project (MIT) it written

    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
    

    and yes the code really barebone level i see some basic problem was not wraped under transaction, and weird scope variable, there "oopsie" moment on code everywhere.

    Also code wasn't feel human tbh, not hard feeling but you need to know people here kinda critical about code visiblity which AI not on this case.

    Thanked by 1rpqu
  • Basically another no-effort project. Writing code takes effort so just let an AI produce a bunch of mush. Proof reading said mush takes effort so lets just dump it on a bunch of random people and let them use their time on it...

    I'm not going to touch this but looking at what other people found it's kinda obvious that no time was allocated to sanity checking. Stuff like lack of transactions isn't exactly like some dreaded off-by-one. It's something that will jump in your face even during superficial skimming. Obviously pretending the person looking knows what they are doing.

    @ScreenReader said:
    i think it'd be interesting if you actually have a service that rely on this module.

    real men test in production

    100x this. Show some confidence in your code. It might even motivate people to actually look for bugs ;)

  • rpqurpqu Member

    This thread won't exist if WHMCS is complete

    Thanked by 1tentor
Sign In or Register to comment.