Description
Product Description
The Spam Controller For WHMCS adds configurable client-data validation to help prevent fake registrations, spam content, suspicious email domains, and repeated account creation from the same IP address.
When client details are submitted, the module checks the email domain against your blocklist, scans submitted text for prohibited keywords and web links, and compares the visitor’s IP address with recently created WHMCS client accounts.
Suspicious submissions are rejected with a clear validation message and recorded in the module’s activity log, giving administrators a straightforward way to strengthen registration and checkout protection without modifying WHMCS templates.
How It Works
- Configure Protection: Enable email-domain blocking, keyword filtering, and IP registration limits from the addon settings.
- Add Blocked Domains: Enter email domains that should not be accepted during client validation.
- Client Submits Details: WHMCS passes the submitted client information through the module’s validation hook.
- Rules Are Checked: The module scans the email domain, submitted text, links, and recent registrations from the visitor’s IP.
- Suspicious Activity Is Blocked: Matching submissions receive a descriptive validation error and cannot continue until corrected.
- Attempt Is Logged: The date, IP address, email address, and reason are stored for admin review.
Key Features
- Email Domain Blocking: Reject registrations and client submissions that use an email domain on your blocklist.
- Manual Domain Management: Add or remove blocked email providers from the module administration area.
- Keyword Filtering: Detect predefined spam-related terms across submitted client fields.
- Link Protection: Block submitted text containing HTTP, HTTPS, or WWW-style web links.
- IP Registration Limits: Restrict how many WHMCS client accounts can be created from one IP address.
- Configurable Time Window: Define the number of minutes used when counting recent registrations.
- Configurable Account Limit: Choose the maximum number of registrations permitted within the time window.
- Automatic Validation Errors: Explain which submitted field or security rule caused the rejection.
- Spam Activity Logging: Record blocked attempts with useful investigation details.
- Admin Bypass: Skip validation when an authenticated WHMCS administrator is managing client details.
Blocked Email Domain Control
Maintain your own list of email domains that should not be used for new client details.
- Add temporary-email, known spam, or unwanted provider domains manually.
- Validate domain formatting before saving a new entry.
- Prevent duplicate domains from being added to the list.
- Browse blocked domains alphabetically with pagination.
- Remove an existing domain when it should be accepted again.
- Enable or disable the complete email-domain check without deleting stored entries.
Keyword and Link Filtering
- Multi-Field Scanning: Check submitted scalar client fields instead of limiting protection to the email address.
- Case-Insensitive Matching: Detect prohibited terms regardless of capitalization.
- Spam Keyword Protection: Block built-in terms including spam, Viagra, casino, and free-money phrases.
- URL Pattern Detection: Reject values containing
http://,https://, orwww.. - Field-Specific Feedback: Identify the submitted field that contains prohibited content.
- Independent Keyword Toggle: Turn keyword protection on or off from the settings page.
Registration Rate Limiting
Reduce repeated account creation by counting recently registered WHMCS clients associated with the same IP address.
- Enable or disable IP-based registration protection.
- Set the maximum number of allowed client accounts per IP.
- Configure the counting period in minutes.
- Block additional registration attempts after the maximum is reached.
- Log the attempted email address and source IP for later review.
Spam Activity Logs
- Date and Time: See when each blocked submission occurred.
- IP Address: Identify the source address associated with the attempt.
- Email Address: Review the email submitted during validation.
- Block Reason: Distinguish domain, keyword, link, and IP-limit events.
- Paginated History: Browse larger activity histories in manageable pages.
- Clear Logs: Remove all stored spam activity records through a confirmed admin action.
Administrator Features
- Manage settings, blocked domains, and activity logs through separate admin tabs.
- Enable or disable domain, keyword, and IP-limit protection independently.
- Configure registration limits without editing the WHMCS core.
- Add and remove email domains using a simple management form.
- Review the reason behind every logged rejection.
- Protect configuration actions with WHMCS admin security tokens.
Business Benefits
- Maintain a Cleaner Client Base: Reduce accounts created with known unwanted email providers.
- Block Spam Content: Prevent links and common promotional spam phrases from entering client data.
- Slow Automated Signups: Limit repeated registration activity from one IP address.
- Reduce Manual Cleanup: Reject suspicious submissions before they become stored client accounts.
- Improve Visibility: Keep a searchable operational record of blocked activity.
- Use Native WHMCS Validation: Apply protection through WHMCS hooks without replacing client-area templates.
Ideal For
- Web hosting and reseller hosting companies
- SaaS and subscription-based platforms
- Digital agencies and online service providers
- Businesses affected by fake or repeated signups
- WHMCS installations receiving spam links in client fields
- Any business seeking configurable registration validation
Why Choose Spam Controller For WHMCS?
Spam Controller combines several practical validation layers in one focused addon. It lets you manage unwanted email domains, stop common spam text and links, limit rapid account creation, and review rejected attempts from a central admin area.
By applying these checks during WHMCS client-data validation, the module helps reduce fake accounts and unwanted content before they create additional administrative work.
