Notes from real client work

Field notes & tutorials.

Hard-won lessons from shipping WHMCS modules, securing servers, and automating hosting businesses - written so you can apply them today.

52 articles · 28 categories · updated weekly

All articles 52 Resources 1 WHMCS 10 Security 3 IPTV 1 Business 1 Marketing 1 Development 7 Automation 1 Performance 1 Configuration 2 Technical 5 Design 1 Analytics 2 Billing 2 Tutorials 1 Integration 3 Security Advisories 1 AI 5

WHMCS Hooks Guide: Extend Functionality Without Modifying Core Files

Stop editing WHMCS core files. After 10+ years building WHMCS systems, here is the working model for hooks — the 7 you will actually use, a real walkthrough, and the pitfalls that have cost me nights of sleep.

S Shahid Malla · Jan 4, 2026 · 14 min

Read the full article

CloudLinux "Reboot to Update Kernel" — The Field Guide

The CloudLinux Manager banner about rebooting for kernel updates explained — what it actually means, the safe reboot procedure, KernelCare setup, and what to do when the reboot fails.

S Shahid Malla May 2 · 186

Security Advisories 7 min

Anatomy of a cPanel/WHM Compromise: Attack Chain & Defense

What a real cPanel/WHM compromise looks like — recon, exploitation, persistence, monetization — and the layered defense that would have stopped it. From actual incident response work.

S Shahid Malla Apr 30 · 131

WHMCS 5 min

Building Custom WHMCS Reports: Admin Dashboard Analytics

WHMCS built-in reports cover basics. For MRR by product, cohort retention, churn, SLA tracking — you write custom reports. The easiest WHMCS module type to ship.

S Shahid Malla Feb 22 · 142

Billing 8 min

WHMCS for SaaS & Subscription Billing

Configure WHMCS to behave as a SaaS billing system — subscription plans, configurable options, trials, dunning, prorated upgrades, usage-based billing. Working examples from real client builds.

S Shahid Malla Feb 20 · 140

Security 9 min

WHMCS GDPR Compliance: The Working Checklist

GDPR compliance for WHMCS without paying a consultant — what the regulation actually requires, which features WHMCS gives you out of the box, cookie consent, DPAs, and the realistic compliance bar for a small hosting business.

S Shahid Malla Feb 18 · 194

Analytics 5 min

Heatmaps & Session Replay for WHMCS (Clarity & Hotjar)

Heatmaps tell you what GA4 can't — where customers try to click that isn't clickable, where they get stuck on forms. The practical setup for Microsoft Clarity + Hotjar on WHMCS.

S Shahid Malla Feb 15 · 126

Design 5 min

How to Add Dark Mode to WHMCS

Dark mode for WHMCS in 2026 — one CSS-variables architecture, one toggle, no flash on load. Plus how to handle the things you can't theme (Stripe Elements, PayPal buttons).

S Shahid Malla Feb 13 · 126

Tutorials 5 min

How to Install WHMCS Modules Safely

Installing a WHMCS module sounds simple. The 10% that goes wrong is preventable. The procedure I follow for every module install — vetting, staging, upload, activation, verification, rollback.

S Shahid Malla Feb 12 · 132

Performance 7 min

Redis and OPcache for WHMCS: The Performance Setup

OPcache plus Redis cuts WHMCS page generation time by 4-6x on a busy install. Both take 30 minutes to set up. Neither requires code changes. Here is the working config.

S Shahid Malla Feb 9 · 119

Development 5 min

WHMCS Hook: Automate cPanel Account Side-Effects

WHMCS already creates cPanel accounts. The hook that adds DNS auto-config, CRM push, Slack notifications, fraud screening — all the cross-cutting work the module doesn't do.

S Shahid Malla Feb 8 · 145

Security 5 min

WHMCS Firewall & Server Hardening Guide

The hardening that prevents 95% of attacks takes one afternoon. CSF firewall, admin folder rename, 2FA, file permissions, HTTPS enforcement, monitoring. The working checklist.

S Shahid Malla Feb 7 · 167

Development 9 min

WHMCS Theme Structure: The Practical Map

Every WHMCS theme tutorial shows the file tree and stops there. This one shows the decisions that determine whether your theme survives the next WHMCS update — inheritance, Smarty essentials, when to use hooks instead of templates.

S Shahid Malla Feb 7 · 215

Want it built for you?

Reading is good. Shipping is better.

If a tutorial here solves your problem, great. If it doesn't, that's why I'm here. Tell me what you need.

Start a project Contact