Changelog
v4.0 – November 2026
[Added] - Domain registration: search across every extension, cart, suggestions and transfers with EPP code
[Added] - Domains: WHOIS privacy, custom nameservers, DNS records, auto-renew and wallet renewals
[Added] - Domains: ResellerClub integration, extension pricing, nightly registrar sync, expiry reminders (30/7/1 days)
[Added] - Web hosting: Shared, WordPress, VPS and Cloud plans with monthly/yearly billing
[Added] - Hosting: WHM/cPanel provisioning, suspend, terminate, one-click control panel login
[Added] - Hosting: disk and bandwidth usage meters, usage sync, auto-renewal and expiry reminders
[Added] - Service packages: Basic / Standard / Premium tiers with price, delivery time, revisions and features
[Added] - Service extras and express delivery at checkout
[Added] - Buyer brief: per-service requirement questions (text, number, URL, choice, file upload)
[Added] - Order delivery hand-over: customer accepts or requests a revision, with revision limits
[Added] - Order chat, deliverables and an activity log on every order
[Added] - Printable / PDF invoice for every order, with proforma for unpaid orders
[Added] - Customer reviews and star ratings with admin approval and replies
[Added] - Coupons: percentage or fixed, limits, dates, first-order only, per-product rules
[Added] - Invoices: aging, automatic and manual reminders, offline payments, refunds, voids, manual invoices
[Added] - Subscriptions: prorated upgrades, scheduled downgrades, pause, cancel at period end, stay-and-save offer
[Added] - Subscriptions: renewal coupons, wallet auto-renew, MRR, churn and plan-mix reports
[Added] - Referral program with commissions
[Added] - Multi-currency with per-currency prices and a currency switcher
[Added] - Support desk: two-pane inbox, live replies, multiple attachments, ticket rating and reopening
[Added] - Support desk: SLA deadlines per priority, saved replies, merge duplicates, link ticket to order/domain/hosting
[Added] - Support desk: auto-close resolved tickets, bulk close and assign, customer context beside the thread
[Added] - Admin dashboard analytics: revenue, orders, AOV, new customers, funnel, on-time delivery, CSV export
[Added] - Drag-and-drop header menu builder with dropdowns, mega menus and live preview
[Added] - Homepage search hero for services and domains, and a public service search page
[Added] - New customer dashboard: sidebar, KPIs, charts and Ctrl+K search
[Added] - Mobile app view with bottom tab bar, and installable client portal (PWA)
[Added] - Web installer: requirements check, purchase code, database test, admin setup
[Added] - One-click updater with file snapshots, database backup, maintenance mode and rollback
[Added] - License activation and recovery archive download
[Added] - Payment gateway credential check (Stripe, PayPal, Paystack, Mollie, Flutterwave and 5 more)
[Added] - IPN / webhook log for every payment gateway callback
[Added] - Settings workspace with search, defaults, reset and health checks
[Added] - Integration Center for plugins, mail providers, notifications and exchange rates
[Added] - Per-page SEO: meta tags, Open Graph, structured data, sitemap.xml and robots.txt
[Added] - SEO audit of every page in the admin
[Added] - Sign in as customer with an audit record and "viewing as" bar
[Added] - Custom CSS / JS revisions with restore
[Added] - Demo login button for demo sites
[Added] - Google reCAPTCHA v3 (v2 still supported, selectable in settings)
[Added] - Read-only JSON API for services and plans (/api/v1)
[Added] - 14 new notifications: domain transfer, hosting ready/suspended, plan renewed/past due/cancelled/paused, invoice issued/reminder/paid, order assigned/delivered/messages, referral commission
[Added] - 17 new payment gateways: Razorpay, Mercado Pago, Binance Pay, CoinGate, NOWPayments, BTCPay, Paymob, Instamojo and more
[Improved] - Fully redesigned admin console with regrouped menu, live counters and global search
[Improved] - Redesigned sign-in, registration and password screens for admin and customers
[Improved] - Redesigned payment gateway screen with credential vault and logos
[Improved] - Language manager: completion bars, flags, drag-to-reorder, sync, untranslated filter
[Improved] - Upgraded to Laravel 12 (requires PHP 8.2+)
[Improved] - All 25 payment gateways available out of the box (off until you add your keys)
[Improved] - Emails are sent after the page loads, so checkout is no longer slowed by the mail server
[Improved] - Assets load on any server (Apache, Nginx, LiteSpeed) with no rewrite rules
[Improved] - Fonts are self-hosted, no external font requests
[Improved] - Icon set moved to Font Awesome Free
[Improved] - Friendly "try again in…" page when a rate limit is hit
[Improved] - Unified toggle and switch design, keyboard accessible, RTL and dark mode ready
[Improved] - Customer initials shown when no profile photo is set
[Improved] - Full English and Spanish translations for the admin
[Fixed] - Manual payment proofs are now private files
[Fixed] - Subscription end dates on the 29th–31st
[Fixed] - Duplicate order numbers on busy sites
[Fixed] - Invoices could be paid twice on a double click
[Fixed] - Email subjects now fill in their placeholders
[Fixed] - Missing menus and 403 errors for upgraded sites (Invoices, Coupons, Currencies, Referrals, Reviews, Updates)
[Fixed] - Settings section failing to save with an empty optional field
[Fixed] - Deposit page crash when the exchange-rate service is down
[Fixed] - Checkout crash when a payment gateway is unreachable
[Fixed] - Dashboard chart date range and missing delivered orders
[Fixed] - Roles, staff and account screens, and Manage Role form
[Fixed] - Home link saved as "//" in Navigation
[Fixed] - RTL layout on payment gateway screens
[Fixed] - Admin header overflow at 1024px
[Fixed] - Site no longer goes down on a missing page component, blog author or deleted category
[Security] - reCAPTCHA tokens are now verified with Google
[Security] - Attachments downloadable only by their owner
[Security] - Stored XSS closed in service, blog and page-builder content
[Security] - CSRF protection on all state-changing admin actions
[Security] - SVG uploads blocked; uploads checked by extension and content
[Security] - Rate limiting on login, registration, password, two-factor and contact forms
[Security] - Rich text sanitizer replaced with Symfony HTML Sanitizer
[Security] - Dependency security updates (symfony/mime CVE-2026-45070, zero composer audit advisories)
