diff --git a/README.md b/README.md index 9d7e60c..01c0314 100644 --- a/README.md +++ b/README.md @@ -177,6 +177,15 @@ Override translations by creating files in: ## Changelog +### Version 1.6 +- Security hardening: + - Decrypted reseller API credentials are no longer written to the module log + - Client-supplied values used in API URL paths are now validated (prevents path/parameter injection and cross-tenant access) + - Suspension now uses Disable/Enable, and VPS control actions are blocked while a service is not active + - Provisioning callback signature is verified with a constant-time comparison + - Output escaping added for server/OS data in the client area, settings, and error templates +- Fixed callback IP assignment: all additional IPv4 addresses are kept and stored newline-separated + ### Version 1.5 - WHMCS v9 compatibility: Updated Smarty template syntax for Smarty v4 - Added VNC Display Mode setting: choose between new tab or embedded in client area diff --git a/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php b/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php index f9c2739..de526f1 100644 --- a/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php +++ b/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php @@ -3,7 +3,7 @@ * WHMCS Server Module - VPSAG * * @package WHMCS - * @version 1.5 + * @version 1.6 * @copyright Copyright (c) ArkHost 2025 * @author ArkHost * @link https://arkhost.com diff --git a/modules/servers/ArkhostVPSAG/callback.php b/modules/servers/ArkhostVPSAG/callback.php index 1036d8e..0d00cc6 100644 --- a/modules/servers/ArkhostVPSAG/callback.php +++ b/modules/servers/ArkhostVPSAG/callback.php @@ -1,6 +1,6 @@ * @link https://arkhost.com diff --git a/modules/servers/ArkhostVPSAG/template/error.tpl b/modules/servers/ArkhostVPSAG/template/error.tpl index 82eb3cc..5f917c3 100644 --- a/modules/servers/ArkhostVPSAG/template/error.tpl +++ b/modules/servers/ArkhostVPSAG/template/error.tpl @@ -1,5 +1,5 @@ {** - * VPSAG WHMCS Server Provisioning version 1.4 + * VPSAG WHMCS Server Provisioning version 1.6 * * @package WHMCS * @copyright ArkHost