Easy Module Installer for WHMCS

Easy Module Installer is a WHMCS addon designed to significantly simplify the installation, updating, and management of WHMCS modules. It operates through an administration interface that allows uploading a .zip package and automatically analyzing its contents to determine the module type, identifier, version, author, and especially the directory where the files must be installed.

The goal of the addon is to provide an experience similar to a marketplace-style module installer, without requiring the administrator to manually extract ZIP files, search for the correct WHMCS directory, or determine the module category themselves.

Automatic Module Detection

One of Easy Module Installer’s main features is its automatic detection engine. The system analyzes the package structure as well as the PHP files inside it to identify the module category.

It can recognize:

• WHMCS Addon Modules
• Payment Gateways
• Registrar Modules
• Provisioning / Server Modules
• Notification Modules
• Dashboard Widgets
• Custom Reports
• Antifraud Modules
• Security Questions

The system uses various indicators found in the code to determine the appropriate category. When a package already contains a structure matching the WHMCS root, it can also automatically detect a complete package containing multiple components.

The addon can also handle ZIP packages from repositories or archives that include an intermediate folder before the actual module files.

Drag-and-Drop Installation

Installation is designed to be extremely simple. The administrator can drop a ZIP file directly into the WHMCS interface, and Easy Module Installer temporarily extracts its contents and performs several analyses before proposing installation.

The addon then determines the correct destination path based on the detected category. This prevents administrators from having to manually copy files into modules/addons, modules/gateways, modules/servers, modules/registrars, or other relevant directories.

The system also checks the paths used to limit directory traversal risks and prevent a ZIP package from writing outside authorized locations.

Security Analysis Before Installation

A particularly useful feature is the integrated static security scanner.

Before installation, the addon examines PHP code without executing it. It looks for potentially suspicious behaviors, including certain uses of eval(), obfuscation patterns, system command execution functions, and combinations associated with webshells or backdoors.

The scanner can also detect filenames using multiple extensions that may be used to disguise executable files.

This analysis is not an antivirus or a full security audit. It relies on heuristic rules and signatures. A clean result does not guarantee that a third‑party module is 100% safe.

When high‑risk elements are detected, installation requires explicit administrator confirmation, with server‑side verification.

Prerequisite Verification

Easy Module Installer also includes a pre‑check system for dependencies and PHP compatibility.

It looks for composer.json files inside the package, identifies declared Composer dependencies, and checks whether the package includes a vendor directory with its autoload.php file.

This helps detect a common issue: installing a source archive from GitHub that does not include required Composer dependencies.

The addon also checks the PHP version currently used by WHMCS and compares it with PHP constraints declared in Composer files when possible.

WHMCS version information is also displayed. Any WHMCS versions mentioned in the README or documentation are shown as indications, not strict blocking rules.

Update and Overwrite Management

When the addon detects that a module already exists on the server, Easy Module Installer can identify this before installation.

Depending on configuration, overwriting an existing module may be allowed or blocked. When allowed, an additional confirmation is required before replacing existing files.

This makes the addon suitable for both initial installation and updating existing modules.

Module Uninstallation

Easy Module Installer is not limited to installation. It also includes a section dedicated to uninstalling modules present on the server.

The system scans recognized WHMCS module directories and displays detected modules by category. The administrator can search for a module by name, identifier, or path, then select it for removal.

Explicit confirmation is required before deleting files.

The addon also includes protection preventing its own uninstallation from its interface, avoiding accidental removal of its required files.

Operation History

Each installation, update, or removal can be logged in a dedicated WHMCS database table.

The history records the administrator who performed the action, module type, identifier, name, version, target path, action performed, number of copied files, and IP address.

An automatic cleanup system can remove old entries after a configurable number of days. This purge can be disabled to keep the history indefinitely.

Permission Management

The addon includes two distinct WHMCS admin permissions:

• Install Modules : allows installation and updates.
• Uninstall Modules : allows module removal.

Technical Security

The addon uses CSRF protection for sensitive operations. ZIP files are placed in a temporary area and several path checks are applied.

The ZIP engine enforces limits on file count, total decompressed size, and maximum individual file size, reducing risks from oversized or malicious archives.

ZIP filenames are also checked to prevent absolute paths, directory traversal sequences, and dangerous formats.

Interface and Module Management

Easy Module Installer provides quick access to various WHMCS module management areas.

The system adapts to different WHMCS versions by detecting available admin pages and, for recent versions, using the Apps & Integrations sections.

The addon includes language files in French and English.

Conclusion

Easy Module Installer is far more than a simple ZIP extractor. It automates module identification, analysis, prerequisite verification, installation, updating, uninstallation, and logging.

Its main advantage is reducing technical steps while adding security and compatibility checks.

Its scanner remains a heuristic analysis and does not replace a full audit or antivirus.

Overall, Easy Module Installer is a WHMCS module installation manager focused on simplicity, automation, security, and traceability.