Email Verify Pro for WHMCS Print

1. What is Email Verify Pro?

Email Verify Pro is a WHMCS addon that blocks client area access until users verify their email address. Features customizable overlay, secure tokens, and database-backed rate limiting.

Key features:

• Blocks client area until email verified
• Customizable overlay (colors, fonts, animations, buttons)
• Cryptographically secure tokens (32 bytes)
• Database-backed rate limiting (cannot be bypassed)
• Automatic re-verification on email change
• Configurable token expiry and resend limits
• CSRF protection on all endpoints
• Compatible with WHMCS native email verification
• 3 languages included (English, Russian, Dutch)

2. Features

Verification

• Sends verification email on registration
• Blocks client area access until verified
• Re-verify automatically on email change
• Customizable verification overlay
• Token expiry (default: 60 minutes)

Rate Limiting

• Database-backed (cannot be bypassed)
• Resend cooldown (default: 2 minutes)
• Max attempts (default: 7 per 24h)
• Automatic cleanup of old limits

Security

• Cryptographically secure tokens (32 bytes)
• CSRF protection on all endpoints
• Admin authentication required
• Input validation and sanitization
• Email header injection prevention
• Settings whitelist

Customization

• Full overlay styling control
• Colors, fonts, animations
• Button styling
• Custom email template
• Configurable text and messages

Admin Features

• View verification status in client profile
• Configure all settings from admin panel
• Edit email template
• Customize overlay styling

Languages

• Included: English, Russian, Dutch
• Easy to add more languages

WHMCS Integration

• Works with WHMCS native verification
• Uses existing database columns
• Does not modify core tables
• Daily cleanup cron job
• Logs all verification attempts

3. Requirements

• WHMCS 8.0 or newer
• PHP 7.4+
• MySQL 5.7+
• Valid Email Verify Pro license

4. Installation

Step 1: Upload Files

Upload this folder to your WHMCS installation:

/modules
└─ addons
    └─ email_verify_pro

Important: Don't rename the folder.

Step 2: Activate the Addon

1. Go to Setup → Addon Modules
2. Find "Email Verify Pro" and click Activate
3. Click Configure
4. Enter your license key
5. Configure settings (or use defaults)
6. Click Save Changes

Step 3: Set Permissions

Choose which admin groups can access the module.

How It Works

• New registration: Verification email sent automatically
• Unverified user: Client area blocked with overlay
• Email change: Re-verification required
• Token expires: User must request new verification email
• Rate limit hit: User must wait before requesting new email

5. Configuration Options

License Key

Your ArkHost license

Token Expiry

How long verification tokens are valid (default: 60 minutes)

Resend Cooldown

Minimum time between resend requests (default: 2 minutes)

Max Resend Attempts

Maximum resend attempts per 24 hours (default: 7)

Email Template

Edit in Setup → Email Templates → "Email Verification"

Overlay Styling

Colors, fonts, animations, buttons - full control

6. Daily Use

Admin Features

• View verification status in client profile
• Configure all settings from Addons → Email Verify Pro
• Edit email template
• Customize overlay styling
• Monitor verification attempts

Customer Experience

• Receive verification email on registration
• Click verification link in email
• Access granted to client area
• Can request new verification email if needed
• Rate limiting prevents spam
• Overlay blocks access until verified

Verification Flow

1. User registers account
2. Token generated (32 bytes, cryptographically secure)
3. Verification email sent
4. User clicks link: index.php?m=email_verification&verify=TOKEN
5. Token validated
6. Access granted to client area

7. Database

Creates two tables:

• mod_email_verify_pro - Module settings
• mod_email_verify_pro_rate_limit - Resend attempt tracking

Uses existing WHMCS columns in tblusers:

• email_verified_at
• email_verification_token
• email_verification_token_expiry

Does not modify core tables. Module can be disabled without data loss.

8. Compatibility

Compatible with WHMCS native email verification. Works standalone or alongside native verification. Uses same database columns as WHMCS 8.0+.

9. Troubleshooting

Verification emails not sending

• Check WHMCS email configuration
• Verify email template exists: Setup → Email Templates → "Email Verification"
• Check WHMCS activity log for errors

Overlay not appearing

• Clear browser cache
• Check if hooks are active
• Verify module is activated

Rate limiting issues

• Check database table: mod_email_verify_pro_rate_limit
• Daily cron cleans up old entries
• Adjust settings if needed