What It Does

Blocks client area access until email verified. Customizable overlay. Works with or without WHMCS native verification.

Features

• Blocks client area until verified
• Customizable overlay (colors, fonts, animations, buttons)
• Cryptographically secure tokens (32 bytes)
• Database-backed rate limiting
• Token expiry (default: 60 minutes)
• Resend cooldown (default: 2 minutes)
• Max resend attempts (default: 7 per 24h)
• Re-verify on email change
• CSRF protection
• Email header injection prevention
• Daily cleanup of expired tokens
• Admin status in client profile
• 3 languages (EN, RU, NL)

Requirements

• WHMCS 8.9+
• PHP 7.4+
• MySQL 5.7+

Installation

1. Upload to /modules/addons/email_verify_pro/
2. Activate in Setup → Addon Modules
3. Enter license key
4. Configure (or use defaults)

How It Works

Registration → Token generated → Email sent → User clicks link → Token validated → Access granted

Unverified users see overlay. Verification URL: index.php?m=email_verification&verify=TOKEN

Database

Creates two tables:

• mod_email_verify_pro - Settings
• mod_email_verify_pro_rate_limit - Rate limiting

Uses existing WHMCS columns in tblusers. Does not modify core tables.

Notes

Compatible with WHMCS native verification. Can be disabled without data loss.