virtfusion-whmcs-module/CHANGELOG.md

Changelog

All notable changes to the VirtFusion Direct Provisioning Module for WHMCS.

[1.2.0] - 2026-04-17

Features

• PowerDNS reverse DNS (PTR) integration — opt-in via companion VirtFusionDns addon module:
  • Automatic PTR sync on server create, rename, and terminate
  • Client-area "Reverse DNS" panel with one editable PTR per assigned IP and per-row status badges
  • Admin services-tab widget with Reconcile (additive) and Reconcile (force reset) buttons
  • Daily cron additive reconciliation (never overwrites existing PTRs)
  • Forward-confirmed reverse DNS (FCrDNS) enforcement — PTR writes rejected if forward A/AAAA doesn't resolve to the target IP
  • IPv4 + IPv6 support with full nibble-reversal for ip6.arpa
  • RFC 2317 classless delegation support (both CIDR-prefix 0/26 and block-size 64/64 conventions)
  • Automatic NOTIFY after every successful PATCH so slaves pick up SOA bumps immediately
  • PowerDNS zone ID =2F URL-encoding for zones containing /
• Security hardening helpers on the Module base class:
  • requirePost() — 405 on non-POST mutations
  • requireSameOrigin() — CSRF Origin/Referer check against WHMCS host
  • requireServiceStatus() — filter endpoints by tblhosting.domainstatus
  • Applied to all rDNS endpoints with successful-write audit logging
• Merged Test Connection — when the DNS addon is active the admin button verifies both VirtFusion AND PowerDNS in a single check

Bug Fixes

• IpUtil::parseClasslessZone now rejects misaligned start addresses (e.g., 3/26.x.y.z — /26 ranges must begin at a multiple of 64). Prevents silent write-into-wrong-zone on misconfigured zone names.

Documentation

• Detailed design-rationale commentary added across the module for future-developer onboarding (Cache, Curl, Log, Database, ServerResource, ConfigureService) and throughout the new PowerDNS subsystem
• README updated with an extensive "Reverse DNS Addon (PowerDNS)" section covering activation, configuration, behaviour, and security posture
• CLAUDE.md updated with architecture notes and PowerDNS API compatibility details

[1.0.0] - 2026-03-19

Features

• OS template tile gallery with accordion categories, brand icons, and search
• Inline server rename with friendly name generator
• Traffic statistics canvas chart in resources panel
• Backup listing timeline in manage panel
• VNC enable/disable toggle with connection details and password copy
• Server root password reset with auto-clipboard copy
• Redis-backed API response caching with filesystem fallback
• Skeleton loading, action cooldowns, progress indicators
• Copy-to-clipboard buttons for IP addresses
• Client-side SSH Ed25519 key generator on checkout page
• VNC console support, resources panel, self-service billing
• Configurable option sliders on checkout page

Bug Fixes

• XSS escaping, null guards, and proper error handling
• All state-mutating operations use POST instead of GET
• Explicit break after all output() calls in client.php
• Server-side regex validation on rename endpoint
• Error messages sanitized (no raw API errors exposed to clients)

Removed

• Client IP removal capability (IPs managed by VirtFusion)
• IP add buttons (managed by VirtFusion during provisioning)
• Firewall panel (non-functional; managed in VirtFusion admin)

Infrastructure

• Tag-based release workflow (compatible with Gitea and GitHub)
• Codebase consolidation: resolveServiceContext(), groupOsTemplates(), vfUrl(), vfShowAlert()

[0.0.18] - 2025-10-01

Changed

• Updated GitHub Actions publish workflow
• Moved custom field SQL to modify.sql file
• Minor code tweaks

[0.0.17] - 2024-01-16

Fixed

• Fix in hooks.php (PR #2 by Prophet731)

[0.0.16] - 2023-09-11

Added

• GitHub issue templates

[0.0.15] - 2023-09-10

Fixed

• Typo fixes in module code

[0.0.14] - 2023-09-10

Fixed

• Fix hook event registration placement

[0.0.13] - 2023-09-10

Added

• Contributions from BlinkohHost
• Database-first package ID lookup with API fallback by product name
• Server build initialization on successful server creation

Changed

• Custom fields changed to not required
• Removed linter workflow (not needed for this project)
• Code cleanup

[0.0.9] - 2023-09-10

Changed

• Refactored codebase to object-oriented architecture (OOP)
• Updated README with badges and documentation

[0.0.6] - 2023-09-10

Added

• Initial release
• Core provisioning: server create, suspend, unsuspend, terminate
• WHMCS hooks for dynamic OS template and SSH key dropdowns
• Checkout validation for OS selection
• Client area overview template with server information
• Admin services tab with server ID management
• Package change (upgrade/downgrade) support
• Configurable option mapping for dynamic resource allocation
• GitHub Actions CI/CD
• Security policy (SECURITY.md)
• License (GPL v3)