WHMCS Support PIN

A WHMCS addon module that lets clients generate a support PIN for quick identification during phone support calls. Admins can look up any client by entering their PIN in the admin dashboard widget or the addon module page.

Original author: Felix Brettnich Maintained by: NodeSpace Technologies, LLC License: GPL-3.0 Compatible with: WHMCS 8.x, WHMCS 9.x (PHP 8+)

---

Features

• Clients are automatically assigned a PIN on their first visit to the client area
• Dedicated client area page to view and regenerate the PIN without a page reload
• Sidebar widget in the client area displays the current PIN at a glance
• Admin dashboard widget for fast PIN lookup from any page in the admin area
• Admin addon page lists all active PINs from the last 48 hours with links to client profiles

---

Requirements

• WHMCS 8.x or 9.x
• PHP 7.4 or higher (PHP 8.x recommended)
• MySQL / MariaDB

---

Installation

1. Upload the module files

   Copy the modules/ directory from this repository into the root of your WHMCS installation, merging with the existing modules/ directory. The result should be:

   <whmcs_root>/modules/addons/supportpin/
   

2. Activate the module in WHMCS

   • Log into the WHMCS admin area
   • Go to System Settings > Addon Modules
   • Find Support PIN in the list and click Activate
   • Click Configure and grant access to any admin roles that should be able to use the module, then click Save Changes

   Activation automatically creates the required mod_supportpin database table.

3. Verify the hooks file is loading

   WHMCS loads hooks.php automatically for active addon modules. No additional configuration is needed beyond activation.

---

Usage

Client Area

• After logging in, clients will see their Support PIN in the sidebar under "Support Pin"
• Clicking the refresh icon next to the PIN generates a new PIN without reloading the page
• Clients can also navigate to index.php?m=supportpin for a full-page view with a prominent PIN display and a regenerate button

Admin Area

Dashboard widget:

• The Support PIN widget appears on the admin home dashboard
• Enter a PIN in the search box and submit to go directly to that client's profile

Addon module page:

• Go to Addons > Support PIN in the admin navigation
• The page displays a table of all clients who have an active PIN updated within the last 48 hours, including their name, PIN, and last updated time
• Click Go to Customer on any row to open that client's profile

---

Uninstallation

• Go to System Settings > Addon Modules and click Deactivate next to Support PIN
• Deactivation drops the mod_supportpin table and removes all stored PINs
• You can then delete the modules/addons/supportpin/ directory from your server

---

Changelog

2026-03-15 — NodeSpace Technologies, LLC

• Fixed critical PHP 8 incompatibility: strlen() was being called on a Laravel Collection object, causing a TypeError that broke PIN creation and collision detection
• Fixed fatal error in admin PIN search when an entered PIN does not exist in the database
• Replaced rand() with random_int() for cryptographically secure PIN generation
• Added $_GET['page'] whitelist validation to prevent unintended method dispatch
• Updated Bootstrap 3 input-group-btn markup to Bootstrap 4 input-group-append for WHMCS 8/9 admin UI compatibility
• Fixed missing </table> closing tag in the admin template

1.0 — Felix Brettnich

• Initial release