LeaUP

WHMCS relies on cron jobs to handle invoicing, payment reminders, automation, ticket notifications, order provisioning and suspension tasks. The cron must run properly and ionCube Loader also needs to be active for CLI PHP, otherwise cron will fail silently.

1. Core Cron Command​

The main WHMCS cron file path: crons/cron.phpBasic command template (replace your full WHMCS directory path):

php -q /home/USER/public_html/whmcs/crons/cron.php

Critical note: Use the same PHP version…

Click to expand…

Read more

WHMCS core files are ionCube encoded. Before uploading and installing WHMCS, your server must have the latest ionCube Loader matching your server PHP version, otherwise you will get blank page or fatal PHP error.

Step1: Install latest ionCube Loader​

1. Confirm your server PHP version first (run php -v via SSH or create phpinfo.php to check).
2. cPanel/WHM server method (recommended):Go to WHM → EasyApache, select your active PHP version, find ionCube extension, install and save…

Read more

The patches shared here are fully open source. You are able to view exactly how we process the code, so you can use them with confidence.

Many original commercial WHMCS modules or addons are protected by ionCube encryption. Encrypted code cannot be read or audited normally, which brings risks such as remote license heartbeat callbacks, hidden backdoors and unauthorized data collection.

For our releases:

• All patch processing steps are open for review. You can check what code is…

Read more

Follow this priority order to finish theme setup fast, before publishing live.

Pre-work reminder: Duplicate your live theme first for backup. Go to Online Store > Themes, find your new uploaded theme and click Customize.

1. Global theme settings (do this first)Open Theme settings at the left sidebar:

• Upload your logo, set logo size for header
• Set brand color palette: primary button color, text color, background color
• Configure typography: font family and font size…

Read more

This only applies to combined multi-demo theme packages (one ZIP contains Home1 / Home2 / Home3 templates). If you uploaded separate standalone ZIP for each homepage, they are independent themes and cannot switch layouts inside one theme.

Steps:

1. In Shopify Admin, go to Online Store > Themes.
2. Find your installed unpublished theme, click Customize to open the theme editor.
3. At the top of editor, locate the page dropdown (usually shows Home page). Click it.
4. All available…

Read more

Shopify themes are delivered as ZIP archives. Do not extract the ZIP locally before upload, Shopify backend only accepts complete theme ZIP files.

Installation Steps:

1. Log into your Shopify admin panel. Navigate to Online Store > Themes.
2. Scroll down to the Theme library section, click Upload theme.
3. Select your downloaded theme ZIP file and confirm upload.
4. Wait for the upload process to finish. The new theme will appear in your Theme library, marked as Unpublished.
5. Click…

Read more

This guide follows the same hardening strategy: set proper file permissions first, then apply webserver rules to block unauthorized access, prevent PHP execution inside upload folders and protect sensitive configuration files.

1. File & Folder Permissions​

Never use global 777 permissions.

• Regular folders: 755
• Static files (php, tpl, twig, css, js): 644
• Folders requiring write access (only these):/img/, /upload/, /var/cache/, /var/logs/, /var/uploads/Set these writable…

Read more

Security hardening starts with proper file permissions, then web server rules to reduce attack surfaces.

1. File Permissions (base requirement)​

Apply these permissions before webserver rules. Never use 777 globally.

• Folders: 755
• PHP, twig, html, css, js files: 644
• Writeable directories (only these folders need write permission):image/, system/storage/cache/, system/storage/logs/, system/storage/download/, system/storage/upload/Set these writable folders to 755 (or 775 if…

Read more

There is no 100% perfect way to block malicious code, but you can follow these steps to greatly reduce the risk of installing compromised extensions.

1. Inspect source code before installationPrioritize fully open, unencrypted PHP files. If files are encoded with ionCube, source code cannot be reviewed. Avoid ionCube encrypted packages whenever possible, as hidden callbacks or backdoors cannot be audited.Unzip the package locally and scan all PHP files. Look for suspicious functions…

Read more

Before installing any OpenCart extension, please pay close attention. Some original commercial extensions are packed with ionCube encryption. Certain encrypted packages may contain hidden backdoors, license heartbeat checks or remote callback scripts built into the original code.

We have detailed notes about these risky extensions in their corresponding resource threads. You should carefully evaluate the risks before deciding whether to install and keep using such modules.

What these…

Read more