Skip to content
Shahid Malla

Guides from client work

Guides on WHMCS, web design, SaaS and AI.

Step-by-step guides written from my own client work and checked against the official documentation. Each one says when it was last reviewed, and what I sell when it matters.

80 guides · 6 topics

Editor's pick

shahidmalla.com/blog/best-whmcs-addons-modules
Best WHMCS Addons, Modules and Developers in 2026: A Buyer's Guide
Featured in WHMCS

Best WHMCS Addons, Modules and Developers in 2026: A Buyer's Guide

No single WHMCS addon is best. This 2026 buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.

Shahid Malla · Dec 28, 2025 · 12 min
Read the full article

Latest articles

7 min

What Is WHMCS? What It Does and How It Differs From cPanel

A plain explanation of WHMCS for founders: what it automates, a WHMCS vs cPanel and WHM comparison table, who needs it and who does not, its limits, and how the monthly license works.

Shahid Malla Oct 10, 2026
6 min

How Much Does Custom WHMCS Module Development Cost?

What a custom WHMCS module costs: hours times rate, five ready-made module prices and twenty fixed-price offers read on 12 October 2026, what each module type involves, and what cheap quotes leave out.

Shahid Malla Oct 9, 2026
8 min

How to Set Up WHMCS for SaaS and Subscription Billing

How to bill a SaaS or software product with WHMCS: plans and cycles, provisioning through a custom module or the Software Licensing addon, upgrades, usage charges, cancellations, dunning and when to use something else.

Shahid Malla Oct 9, 2026
8 min

AI Chatbot vs AI Agent: Which Does Your Business Need?

A chatbot answers from your content and an agent calls tools that change things. How tool calls work per the provider docs, the workflow option between them, how each is billed, and a decision table.

Shahid Malla Oct 9, 2026
8 min

SaaS MVP Tech Stack: How to Choose for Your First Release

A founder's guide to a SaaS MVP tech stack: Laravel with Filament, Next.js with NestJS or no-code first, where to host, which billing provider fits, how to separate tenants and what to leave out of version one.

Shahid Malla Oct 9, 2026
8 min

Using AI Coding Assistants on Large WHMCS Module Projects

Where AI coding assistants help and fail on WHMCS module work, how to give them the official developer docs, what never to paste into a prompt, the review and test routine, and what still needs a developer.

Shahid Malla Jun 8, 2026
7 min

What a WHMCS-Aware AI Chatbot Needs to Do

The requirements any WHMCS AI chatbot should meet, checked against the WHMCS developer docs: identity from the session, which fields to drop, API role limits, safe actions, hand-off, and ten tests to run before launch.

Shahid Malla Jun 8, 2026
7 min

How to Check and Fix an Exposed .git Folder on a WHMCS Server

A public .git folder lets anyone rebuild your WHMCS code and any configuration.php ever committed. How to test for it, block it in Apache, LiteSpeed or Nginx, and rotate what leaked.

Shahid Malla Jun 5, 2026
11 min

WHMCS Live Chat Integration: Options Compared and Hook Setup

Every way to get live chat into WHMCS compared on the same criteria, then the upgrade-safe hook setup: passing the signed-in client with a server-side signature and turning finished chats into tickets.

Shahid Malla May 29, 2026
6 min

How to Hire a WHMCS Developer on Fiverr or Upwork: 7 Checks

A vetting checklist for hiring a WHMCS developer on Fiverr or Upwork: what Top Rated and Job Success Score measure, seven checks before you pay, and how each platform handles milestones, review windows and ownership.

Shahid Malla May 29, 2026
Hosting 7 min

Why Does CloudLinux Say Reboot to Update the Kernel?

CloudLinux's knowledge base ties the Reboot your system to update the kernel message to an LVE module that is not loaded. The checks to run, what KernelCare changes, and a safe reboot routine for cPanel.

Shahid Malla May 2, 2026
8 min

CVE-2026-41940: cPanel and WHM Auth Bypass, Fixed Builds and Checks

An advisory for CVE-2026-41940, the critical cPanel and WHM authentication bypass exploited before the 28 April 2026 patch: fixed builds, update steps, mitigations, compromise checks and recovery.

Shahid Malla Apr 30, 2026

Want it built for you?

Need it built instead?

The guides cover what you can do yourself. For custom modules, integrations, websites, apps and AI chatbots, send a short brief and get a written quote within one business day.