Bump version to 1.6

README.md

@@ -177,6 +177,15 @@ Override translations by creating files in:
 
 ## Changelog
 
+### Version 1.6
+- Security hardening:
+  - Decrypted reseller API credentials are no longer written to the module log
+  - Client-supplied values used in API URL paths are now validated (prevents path/parameter injection and cross-tenant access)
+  - Suspension now uses Disable/Enable, and VPS control actions are blocked while a service is not active
+  - Provisioning callback signature is verified with a constant-time comparison
+  - Output escaping added for server/OS data in the client area, settings, and error templates
+- Fixed callback IP assignment: all additional IPv4 addresses are kept and stored newline-separated
+
 ### Version 1.5
 - WHMCS v9 compatibility: Updated Smarty template syntax for Smarty v4
 - Added VNC Display Mode setting: choose between new tab or embedded in client area

modules/servers/ArkhostVPSAG/ArkhostVPSAG.php

@@ -3,7 +3,7 @@
  *	WHMCS Server Module - VPSAG
  *
  *	@package     WHMCS
- *	@version     1.5
+ *	@version     1.6
  *	@copyright   Copyright (c) ArkHost 2025
  *	@author      ArkHost <support@arkhost.com>
  *  @link        https://arkhost.com

modules/servers/ArkhostVPSAG/callback.php

@@ -1,6 +1,6 @@
 <?php
 /**
- *	VPSAG WHMCS Server Provisioning version 1.4
+ *	VPSAG WHMCS Server Provisioning version 1.6
  *
  *	@package     WHMCS
  *	@copyright   ArkHost

modules/servers/ArkhostVPSAG/hooks.php

@@ -3,7 +3,7 @@
  * WHMCS Server Module - VPSAG Hooks
  *
  * @package     WHMCS
- * @version     1.4
+ * @version     1.6
  * @copyright   Copyright (c) ArkHost 2025
  * @author      ArkHost <support@arkhost.com>
  * @link        https://arkhost.com

modules/servers/ArkhostVPSAG/template/error.tpl

@@ -1,5 +1,5 @@
 {**
- *	VPSAG WHMCS Server Provisioning version 1.4
+ *	VPSAG WHMCS Server Provisioning version 1.6
  *
  *	@package     WHMCS
  *	@copyright   ArkHost