Skip to content
Shahid Malla

Guides from client work

Guides on WHMCS, web design, SaaS and AI.

Step-by-step guides written from my own client work and checked against the official documentation. Each one says when it was last reviewed, and what I sell when it matters.

80 guides · 6 topics

Editor's pick

shahidmalla.com/blog/best-whmcs-addons-modules
Best WHMCS Addons, Modules and Developers in 2026: A Buyer's Guide
Featured in WHMCS

Best WHMCS Addons, Modules and Developers in 2026: A Buyer's Guide

No single WHMCS addon is best. This 2026 buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.

Shahid Malla · Dec 28, 2025 · 12 min
Read the full article

Latest articles

11 min

What Is a RAG Chatbot? How It Answers From Your Own Documents

A RAG chatbot looks up your own documents before it answers. I explain each step in plain words, when fine-tuning or a long prompt fits better, why RAG answers go wrong, and what to ask about data and cost.

Shahid Malla Oct 25, 2026
11 min

WHMCS MCP Server: Connect Claude or ChatGPT to WHMCS Safely

What a WHMCS MCP server does, the Marketplace modules, open-source packages and hosted service that exist today, which WHMCS API actions to expose first, and a safety model built on API roles, approvals and audit logs.

Shahid Malla Oct 25, 2026
11 min

WHMCS Tax Setup: UK and EU VAT, Australian GST and US Sales Tax

How to set up tax in WHMCS 9.1 for UK VAT, EU VAT, Australian GST and US state sales tax: tax rules, inclusive or exclusive prices, VAT number checks, paid invoice numbering and launch checks.

Shahid Malla Oct 25, 2026
11 min

Vibe Coding Tools Compared: Which One Fits Your Project?

A dated comparison of the vibe coding tools people use in October 2026: browser app builders versus coding agents, entry plan prices from each vendor's own page, what you can export, and when to bring in a developer.

Shahid Malla Oct 24, 2026
11 min

How to Update PHP on a Server and Secure It: Linux, cPanel, Plesk

How to update PHP on AlmaLinux, Rocky, Ubuntu, Debian, cPanel, Plesk, DirectAdmin, CloudLinux and Docker, checked against each vendor's docs, plus a server hardening checklist with one reason per item.

Shahid Malla Oct 23, 2026
11 min

ChatGPT SEO: How to Show Up in ChatGPT Search, Perplexity and Copilot

What OpenAI, Perplexity, Microsoft and Anthropic say a site needs to be found and cited by their AI search, which popular tactics are myths, a technical checklist and how to measure AI referral traffic.

Shahid Malla Oct 23, 2026
11 min

Vibe Coding Security Risks: What to Check Before You Launch

The security failures that show up in AI-generated apps, each mapped to the OWASP Top 10:2025 and the OWASP Top 10 for LLM Applications, with a pre-launch checklist, free tests and safer ways to keep using AI tools.

Shahid Malla Oct 23, 2026
12 min

PHP2Shell (CVE-2026-109618) Explained: How It Works and How to Patch

A step-by-step tutorial on PHP2Shell: how CVE-2026-109618 and CVE-2026-109619 work inside a PHP worker, the fixed releases, and how to patch and verify PHP on cPanel, Plesk, CloudLinux and Docker.

Shahid Malla Oct 22, 2026
11 min

Upwork Proposal Tips for Developers: How to Write One That Wins

How to write a winning Upwork proposal as a developer: the five-part structure, what to cut, screening questions, fixed or hourly bids, when to spend Connects, a before-and-after rewrite and three examples.

Shahid Malla Oct 22, 2026
11 min

Fiverr vs Upwork for Developers in 2026: Fees and Where to Start

Fiverr and Upwork compared for developers from their own help pages: freelancer and client fees, what you keep from a $100 job, when money clears, levels and badges, and a decision flow for where to start.

Shahid Malla Oct 22, 2026
11 min

How to Fix a Vibe-Coded App: Repair, Refactor or Rebuild?

A founder's guide to fixing an app built with Lovable, Bolt, v0, Replit, Cursor or Claude Code: the triage order, a one-day code assessment, repair vs refactor vs rebuild criteria and what to hand a developer.

Shahid Malla Oct 22, 2026
11 min

AI Chatbot Developer: What They Do, Skills and How to Hire One

A hiring guide to the AI chatbot developer role in 2026: the work, how it differs from prompt engineers and agent developers, skills to check, interview questions, a paid test task, red flags and rates.

Shahid Malla Oct 21, 2026

All guides by topic

Every guide on the site, grouped by what you are trying to do. Each one is checked against the official documentation and shows the date it was last reviewed.

Web design and development

What a website costs, who should build it, and how to redesign one without losing the search traffic it already has.

Service: Web designer and developer

WHMCS: choose it, set it up, keep it running

Plain guides for owners and admins: what WHMCS is, what it costs, how to configure it yourself, and how to update, move and troubleshoot it.

Service: WHMCS development

WHMCS development and integrations

For developers and technical owners: module types, hooks, the API, provisioning, themes and connecting WHMCS to other systems.

Service: WHMCS custom module development

Payments in WHMCS

Setting up and testing the gateways hosting companies use most, and what to check when a payment does not arrive.

Service: WHMCS payment gateway integration

AI, SaaS and apps

Where AI chatbots and agents help a support team, how to choose a stack for a first SaaS product, and how AI coding agents such as Claude Code change build times.

Service: AI chatbot development

Hosting, servers and security

Starting a hosting business, mail that lands in the inbox, and keeping cPanel and WHMCS servers out of trouble.

Service: Web hosting expert

Hiring a developer

What WHMCS and module work costs, how to vet a developer, and when a freelancer, an agency or a ready-made module fits.

Service: Hire a WHMCS developer

Want it built for you?

Need it built instead?

The guides cover what you can do yourself. For custom modules, integrations, websites, apps and AI chatbots, send a short brief and get a written quote within one business day.