From 61b4c576c9c51fa8d92c0887adcb9ad4753d0b70 Mon Sep 17 00:00:00 2001 From: Yuri Karamian Date: Mon, 22 Jun 2026 01:31:44 +0200 Subject: [PATCH] Bump version to 1.6 --- README.md | 9 +++++++++ modules/servers/ArkhostVPSAG/ArkhostVPSAG.php | 2 +- modules/servers/ArkhostVPSAG/callback.php | 2 +- modules/servers/ArkhostVPSAG/hooks.php | 2 +- modules/servers/ArkhostVPSAG/template/error.tpl | 2 +- 5 files changed, 13 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 9d7e60c..01c0314 100644 --- a/README.md +++ b/README.md @@ -177,6 +177,15 @@ Override translations by creating files in: ## Changelog +### Version 1.6 +- Security hardening: + - Decrypted reseller API credentials are no longer written to the module log + - Client-supplied values used in API URL paths are now validated (prevents path/parameter injection and cross-tenant access) + - Suspension now uses Disable/Enable, and VPS control actions are blocked while a service is not active + - Provisioning callback signature is verified with a constant-time comparison + - Output escaping added for server/OS data in the client area, settings, and error templates +- Fixed callback IP assignment: all additional IPv4 addresses are kept and stored newline-separated + ### Version 1.5 - WHMCS v9 compatibility: Updated Smarty template syntax for Smarty v4 - Added VNC Display Mode setting: choose between new tab or embedded in client area diff --git a/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php b/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php index f9c2739..de526f1 100644 --- a/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php +++ b/modules/servers/ArkhostVPSAG/ArkhostVPSAG.php @@ -3,7 +3,7 @@ * WHMCS Server Module - VPSAG * * @package WHMCS - * @version 1.5 + * @version 1.6 * @copyright Copyright (c) ArkHost 2025 * @author ArkHost * @link https://arkhost.com diff --git a/modules/servers/ArkhostVPSAG/callback.php b/modules/servers/ArkhostVPSAG/callback.php index 1036d8e..0d00cc6 100644 --- a/modules/servers/ArkhostVPSAG/callback.php +++ b/modules/servers/ArkhostVPSAG/callback.php @@ -1,6 +1,6 @@ * @link https://arkhost.com diff --git a/modules/servers/ArkhostVPSAG/template/error.tpl b/modules/servers/ArkhostVPSAG/template/error.tpl index 82eb3cc..5f917c3 100644 --- a/modules/servers/ArkhostVPSAG/template/error.tpl +++ b/modules/servers/ArkhostVPSAG/template/error.tpl @@ -1,5 +1,5 @@ {** - * VPSAG WHMCS Server Provisioning version 1.4 + * VPSAG WHMCS Server Provisioning version 1.6 * * @package WHMCS * @copyright ArkHost