[Free Whmcs License Key Generator
Everardo Laboy
Over the past few years, password leaks have become more and more common.
Some estimates suggest the number of passwords lost or stolen in 2018 alone was over 3 billion - that's over 8 million per day!
To make matters worse, many people still use the same password for multiple websites, and use passwords that are easy to guess such as birthdays, names or favourite sports teams.
One of the best ways to keep passwords secure is to use different passwords for each service that you use, but in a recent survey, less than 2 in 10 of the respondents said they used a random password generator.
So in WHMCS 7.8, we've introduced a Password Generator tool that is designed to encourage the use of more secure password practices for users and their hosting services.
The new Password Generator tool is available for all password fields within the WHMCS client area including initial signup/registration and the password change or reset process both for hosting accounts and the WHMCS client area itself.
Next to all password fields, customers will now have the option to generate a password.
Upon clicking the button, a strong and secure password will be randomly generated. The default length is 12 characters but users have the option to customise this should they wish.
Once happy with their password, they can click the Copy and Insert button to copy the password to their clipboard and automatically insert it into the form.
We hope you and your customers will find the new functionality helpful, and we hope that it helps prevent more users becoming part of a statistic of users that failured to secure their accounts.
If you have any questions about the new functionality, we invite you to ask them in the comments below.
To learn more about WHMCS 7.8 and the other new features and functionality, please visit the WHMCS 7.8 What's New Microsite. WHMCS 7.8 is available to download and install today.
Thanks for reading!
New functionality has been made available for all password input fields within the client area that enables clients to have a password automatically generated and filled into the field. The automatic password generation is intended to help encourage the use of secure passwords with a default length of 12 characters and containing a mix of letters, numbers and symbols.
now I don't know if you can set a specific strength for it in the admin settings (i'm not testing the beta on principle), but as Kian says in the above thread, the strength is determined by the js and can be changed with coding if required.
I am OK witch manually adding like 4 static characters to each password. I just do not know what to modify in which file. Can you please advise the file and the steps? I am not a coder, but have basic orientation in the code.
ok, that's a little awkward as by the time they got to releasing v6.3.2, both "default" and "verticalsteps" were no longer shipped with WHMCS - so my v6.3.1 dev was a clean install back in 2016 and doesn't have the default template folder (you will only have it because you upgraded from a previous version) - it shipped with only "five" and "six".... nor would it have "verticalsteps" either.
so i've used the 6.2.2 dev as that does have a default folder with vertical steps... and can I say, it was an absolute pain in the proverbial to find any sort of solution that would work with it - any recent coding technique I tried would fail, so I had to keep going further back in time to older techniques... I was slowly losing the will to live.
what i've done is added a password generator to the configureproduct page - it's not testing strength, but it's generating passwords that I suspect should probably pass the cPanel tests... I might be tempted to remove similar characters, e.g l 1 & I from the character options, but I can leave that to you if you think it's going to be an issue that could cause confusion.
i've changed the field from a password field to a text field (that's just so the user can get the generated password) and i've made the field readonly - which simplifies things as it will force them to use the generator and not enter a password manually.
as I said previously, this is the v6.2.2 version of the verticalsteps configureproduct.tpl template so I wouldn't suggest doing an overwriting upload - just compare your current version of the template to this one and manually add the 3 changes.
Thank You for your effort @brian!. I have used your code, but i had to also make an adjustment - in order for the orderform to accept the password, i had to replace "output" by "rootpw" in the password text field code and also "output" by "rootpw" in the javascript code. (if anyone interested here i describe changes i made in my templates/orderforms/verticalsteps/configureproduct.tpl based on Brian! file attached above)
RESULT: It worked only when i tried to generate password and order server. It generated and saved 12 characters long password. But when i tried to order cpanel hosting account, there was no prompt to generate or enter password and inside admin area i see the password is only 10 characters long, not 12 as set by Brian! javascript. ? Any idea how to generate more complex/longer password for cpanel products or how to show password generating field during its order? UPDATE: i see i editted inside "if $productinfo.type eq "server"" section, that is why, but do not see other password field code in the file that would be applicable to non-server products..
But when i tried to order cpanel hosting account, there was no prompt to generate or enter password and inside admin area i see the password is only 10 characters long, not 12 as set by Brian! javascript. ? Any idea how to generate more complex/longer password for cpanel products or how to show password generating field during its order? UPDATE: i see i editted inside "if $productinfo.type eq "server"" section, that is why, but do not see other password field code in the file that would be applicable to non-server products..
aren't the passwords autogenerated for cPanel products anyway - the client never gets asked to add their own ?? that's what i'm seeing looking at vertical steps... and it's still the case in v7.7.1 with standard_cart.
possibly you could generate a stronger password with a hook, but there's no chance of me writing a hook for a 4 year old - i'd have to visit archive.org for the old WHMCS documetnation for 2015 and see what the hook conditions were back then and that's not going to happen.
so in short, passwords for server kind of WHMCS products can be generated on order form, but password for WHMCS cpanel products can not? WHMCS does not looking for any user input that can be saved as a password of the ordered cpanel kind of product? Thus it will not help me to try to copy that password text field to various places of the configureproduct.tpl or any other files?
During product or service check out allow users to enter their own password. Then check password against standard security password guidelines that the administrator has select or is industry recommended.
I have a customer who doesn't know his password and because we're using a Wordpress bridge we can't reset his password... as a quick solution I wanted to replace his password with a password we know but im not sure how to generate the hashed password to place it in phpmyadmin like interface.
Meanwhile I am working on fixing the main issue with WordPress.
I have a customer who doesn't know his password and because we're using a Wordpress bridge we can't reset his password... as a quick solution I wanted to replace his password with a password we know but im not sure how to generate the hashed password to place it in phpmyadmin like interface.
Over the past few years, password leaks have become more and more secure password practices for users and their hosting services. Upon clicking the button, a strong and secure password will be randomly generated.
When a new hosting account is created, WHMCS generates just a 10-character alphanumeric password that is no longer strong enough these days. We've seen a huge increase of distributed brute force attacks this year and many cPanel accounts were hacked because of their weak passwords.
Today WHMCS generates random passwords for new services consisting only of letters and numbers.This request is about implementing a stronger random password generation routine to WHMCS that will generate passwords containing special characters such as !$%( as-well.
WHMCS Limited ("WHMCS") respects and values your privacy. That's why WHMCS has established this Privacy Policy (referred to as the "Privacy Policy" herein) - so that WHMCS can disclose what information WHMCS collects about you and how WHMCS use, store and disclose such information. WHMCS want to help you make an informed decision about whether or not to share your information with WHMCS.
WHMCS reserves the right to revise, modify, add or remove provisions to this Privacy Policy at any time. In the event that WHMCS do so, WHMCS will notify you in accordance with the notice provisions of WHMCS' Terms of Service. Take note of the 'Last Updated' date listed at the foot of this Privacy Policy. If WHMCS make changes to this Privacy Policy, WHMCS will update that date to notify you of the date of such changes. By continuing to use www.whmcs.com ("the Website") after receiving notice of the updated Privacy Policy, you acknowledge that you have read and understand the revised Privacy Policy.
WHMCS collects information from you when you send it to WHMCS directly by filling out forms on WHMCS' Website (including any application you may make for Services or the Software), corresponding with WHMCS by e-mail, writing to WHMCS by post, or speaking to WHMCS by telephone. WHMCS also collect information from you when you browse the Website and use the Software, as set out in detail below. Some of the methods WHMCS use to collect data are automated and will take effect automatically as you navigate the Website and/or use the Software.
795a8134c1