Skip to content
Shahid Malla

Guides from client work

Guides on WHMCS, web design, SaaS and AI.

Step-by-step guides written from my own client work and checked against the official documentation. Each one says when it was last reviewed, and what I sell when it matters.

50 guides · 6 topics
Showing: Security Clear filters 4 articles matched
7 min

WHMCS GDPR Compliance Setup: Retention, Consent, Export and Deletion

Which WHMCS settings help with GDPR, from the current WHMCS docs: automatic deletion of inactive clients, marketing opt-in, terms acceptance, JSON export, client deletion, and the gaps you cover yourself.

Shahid Malla Oct 12, 2026
7 min

How to Check and Fix an Exposed .git Folder on a WHMCS Server

A public .git folder lets anyone rebuild your WHMCS code and any configuration.php ever committed. How to test for it, block it in Apache, LiteSpeed or Nginx, and rotate what leaked.

Shahid Malla Jun 5, 2026
8 min

CVE-2026-41940: cPanel and WHM Auth Bypass, Fixed Builds and Checks

An advisory for CVE-2026-41940, the critical cPanel and WHM authentication bypass exploited before the 28 April 2026 patch: fixed builds, update steps, mitigations, compromise checks and recovery.

Shahid Malla Apr 30, 2026
8 min

WHMCS Firewall and Server Hardening Checklist

A hardening checklist for a self-hosted WHMCS server, checked against the WHMCS, cPanel and firewalld documentation: ports, the cPanel CSF fork, admin lockdown, permissions and database privileges.

Shahid Malla Feb 7, 2026

Want it built for you?

Need it built instead?

The guides cover what you can do yourself. For custom modules, integrations, websites, apps and AI chatbots, send a short brief and get a written quote within one business day.