Guides from client work

Guides on WHMCS, web design, SaaS and AI.

Step-by-step guides written from my own client work and checked against the official documentation. Each one says when it was last reviewed, and what I sell when it matters.

124 guides · 6 topics

All articles 124 Hosting 13 Hiring 17 WHMCS 38 Security 9 Development 21 AI 26

Best WHMCS Addons, Modules and Developers: A Buyer's Guide

No single WHMCS addon is best. This buyer's guide sorts modules by job, names the vendors and module developers behind them, and gives a checklist to run before you pay.

Shahid Malla · Dec 28, 2025 · 12 min

Read the full article

SaaS MVP Tech Stack: How to Choose for Your First Release

A founder's guide to a SaaS MVP tech stack: Laravel with Filament, Next.js with NestJS or no-code first, where to host, which billing provider fits, how to separate tenants and what to leave out of version one.

Shahid Malla Oct 9, 2026

10 min

Using AI Coding Assistants on Large WHMCS Module Projects

Where AI coding assistants help and fail on WHMCS module work, how to give them the official developer docs, what never to paste into a prompt, the review and test routine, and what still needs a developer.

Shahid Malla Jun 8, 2026

8 min

What a WHMCS-Aware AI Chatbot Needs to Do

The requirements any WHMCS AI chatbot should meet, checked against the WHMCS developer docs: identity from the session, which fields to drop, API role limits, safe actions, hand-off, and ten tests to run before launch.

Shahid Malla Jun 8, 2026

9 min

How to Check and Fix an Exposed .git Folder on a WHMCS Server

A public .git folder lets anyone rebuild your WHMCS code and any configuration.php ever committed. How to test for it, block it in Apache, LiteSpeed or Nginx, and rotate what leaked.

Shahid Malla Jun 5, 2026

12 min

WHMCS Live Chat Integration: Options Compared and Hook Setup

Every way to get live chat into WHMCS compared on the same criteria, then the upgrade-safe hook setup: passing the signed-in client with a server-side signature and turning finished chats into tickets.

Shahid Malla May 29, 2026

8 min

How to Hire a WHMCS Developer on Fiverr or Upwork: 7 Checks

A vetting checklist for hiring a WHMCS developer on Fiverr or Upwork: what Top Rated and Job Success Score measure, seven checks before you pay, and how each platform handles milestones, review windows and ownership.

Shahid Malla May 29, 2026

Hosting 11 min

Why Does CloudLinux Say Reboot to Update the Kernel?

CloudLinux's knowledge base ties the Reboot your system to update the kernel message to an LVE module that is not loaded. The checks to run, what KernelCare changes, and a safe reboot routine for cPanel.

Shahid Malla May 2, 2026

10 min

CVE-2026-41940: cPanel and WHM Auth Bypass, Fixed Builds and Checks

An advisory for CVE-2026-41940, the critical cPanel and WHM authentication bypass exploited before cPanel released its patch: fixed builds, update steps, mitigations, compromise checks and recovery.

Shahid Malla Apr 30, 2026

11 min

Does WHMCS Support Redis Caching? What Speeds It Up Instead

WHMCS has no built-in Redis cache, and WHMCS tells you to disable OPcache. What its documentation recommends for a slow install: MySQL settings, logging, cron timing and two configuration switches.

Shahid Malla Feb 9, 2026

9 min

WHMCS Theme Structure: Folders, Child Themes and Order Forms

How a WHMCS theme and an order form template are laid out, how theme.yaml and child themes work, which files and variables matter, what survives an update and how to test before going live.

Shahid Malla Feb 7, 2026

11 min

WHMCS Firewall and Server Hardening Checklist

A hardening checklist for a self-hosted WHMCS server, checked against the WHMCS, cPanel and firewalld documentation: ports, the cPanel CSF fork, admin lockdown, forcing SSL, permissions and database privileges.

Shahid Malla Feb 7, 2026

10 min

WHMCS Google Tag Manager and GA4: Hook File, Purchase Event, Consent

Google Tag Manager and GA4 in WHMCS without template edits: the output hooks, a purchase event built from the order, consent mode, keeping staff and personal data out, and testing with Tag Assistant.

Shahid Malla Feb 2, 2026

Want it built for you?

Need it built instead?

The guides cover what you can do yourself. For custom modules, integrations, websites, apps and AI chatbots, send a short brief and get a written quote within one business day.

Start a project Contact