AraTheme — Changelog (Release Notes)

This page lists every AraTheme release, newest first. New versions install with one click from Addons → AraTheme → Licence & updates: a backup of the installed files is made first, and your settings, pages and texts stay exactly as they are.

1.3.19 — 29 October 2026

Fixed

• Store error on PHP 8: a store page with no products (for example /store or an empty product group) could stop with “Oops! Something went wrong” (count(): Argument #1 must be of type Countable|array, null given). The order form and the client-area templates now treat a missing list as empty, so these pages show normally.

1.3.17 – 1.3.18 — 26 October 2026

Added

• Focused checkout: a cart link with ahfocus=1 (for example cart.php?a=add&pid=12&ahfocus=1, the link you put on a marketplace listing or in an ad) shows only that order: logo, language and light/dark in the header, and no menus, other products, “Add more” link, offers, pop-ups, help widget or recommendations. Just the order, the checkout and a short footer with your terms. It ends by itself when the visitor leaves the cart.

1.3.16 — 26 October 2026

Added

• The theme manager speaks four languages: Addons → AraTheme has an interface-language switcher in its header (English, العربية, Norsk, Español), saved per admin. Without a choice it follows your own WHMCS admin language. In Arabic the screens run right to left; code, paths and addresses stay left to right. The Editing selector, which picks the client-area language whose content you edit, is now called Editing content for.
• A language switcher on the sign-up page.

Changed

• Client area, store and order form fully translated in Arabic, English, Norwegian and Spanish, including screen-reader labels, “Close” and “Copy” buttons, breadcrumbs, the internal error page, cPanel/WordPress fields and store labels.
• Every Arabic, Norwegian and Spanish text was reviewed line by line: standard Arabic with one term per concept, natural Norwegian bokmål and neutral Spanish for Spain and Latin America.
• More WHMCS texts that WHMCS ships in English are translated through AraTheme's language overrides.

Fixed

• Some pages showed raw WHMCS language keys (billing notes table, paid date on invoices, profile photo upload, password tips, tax label in credit/debit note PDFs).
• On phones with language switching turned off, the menu no longer shows a language button that opened an empty window.

1.3.15 — 24 October 2026

• Small internal improvements.

1.3.14 — 24 October 2026

Added

• The client home shows panels that other WHMCS modules add, for every client.

1.3.13 — 24 October 2026

Fixed

• Some security scanners flagged the credit/debit note PDF template as malware. Its field reading moved into the addon, so it no longer matches those signatures. The PDF is unchanged.

1.3.12 — 21 October 2026

Fixed

• Live status counts only problems that are still open, and only for the services they concern (a shared-hosting notice no longer marks your VPS servers).

Changed

• With Show what the problem is on (Support → Live status), customers see each open problem with its latest update, and the top bar names the affected services. Provider names and links are always removed.

1.3.11 — 20 October 2026

Added

• WHMCS 9.1 support: the theme and order form are now based on the WHMCS 9.1 templates. New 9.1 features are only used when WHMCS provides them, so WHMCS 9.0.x keeps working unchanged. Note that WHMCS 9.1 itself needs PHP 8.2 or newer and ionCube Loader 15.
• Credit and debit notes (WHMCS 9.1): a new My Credit and Debit Notes page in the same design as My invoices, with search, a filter per note type and sorting, and a note PDF that uses the same Emails & invoice settings as the invoice PDF (right-to-left aware). New texts in English, Arabic, Norwegian and Spanish.
• Part-paid invoices: My invoices shows the remaining balance under the total, and "Amount due" uses the balance.

Changed

• Credit / debit note page: uses the invoice page's layout and branding. On WHMCS 9.1 it shows the note status and a Download (PDF) button.
• Password policy: password fields follow the WHMCS 9.1 password policy (strength meter, tips and generator use your configured rules). WHMCS 9.0 keeps its previous behaviour.
• WHMCS 9.1 fixes included: card description field, store order page with an optional domain, checkout details and updated print styles.
• Privacy: note pages are kept out of search engines and highlight Billing in the menu.

1.3.10 — 19 October 2026

Added

• Arabic and Norwegian translations of untranslated WHMCS texts (hCaptcha notice, SSL validation steps, domain and PayPal errors and more). AraTheme adds them to the standard WHMCS language overrides automatically on activation and after every update, or from All texts → WHMCS texts translated by AraTheme → Install missing translations now (Full Administrator only). Only missing texts are added; your own lines are never changed, the existing file is backed up first, and every run is logged.

Changed

• Store badges per product type: hosting badges (Free SSL, daily backups, monitoring) show only on hosting products. Other products, such as software licences, show neutral badges ("Secure checkout", "Delivered to your client area") and a "Not sure which option fits?" note. New texts are editable under All texts.

Fixed

• Documentation: the language overrides step is explained with an example, and the requirements now correctly state PHP 8.1+ and the ionCube Loader.

1.3.9 — 18 October 2026

Fixed

• App (PWA) icons: the round Android icons now load correctly, and icons fill their space edge to edge.

1.3.8 — 18 October 2026

Added

• Your site as an app (PWA): visitors and clients can install your site on their phone or computer and open it from the home screen like an app, with its own icon, name and colour, and shortcuts to My services, Invoices, Support and Order.
• "Install the app" card: shown from the second visit on devices that support it, with instructions for iPhone and iPad. Closing it hides it for 30 days.
• Offline page: without a connection, visitors see a clear "You are offline" page in their language that reloads by itself.
• Faster repeat visits: theme styles, scripts, fonts and icons are kept on the device.
• Private by design: pages, account data, the cart and the admin area are never stored on the device.
• Settings in Features → App (PWA): on / off, install card, app name per language, app icon, colour and start page. Turning it off removes the app from every device on the next visit.

Changed

• Faster homepage: form widget styles the homepage does not use no longer delay the first paint.
• Accessibility: better labels for the help, cart and logo buttons, and correct heading order in the footer.

1.3.7 — 17 October 2026

Added

• Feedback & ideas (Addons → AraTheme → Feedback & ideas): send us a feature request, a bug report or feedback and follow its status, our answer and the version it came in. New answers are marked, also in the sidebar.
• Your choice what is sent: technical info is attached only when the box is ticked, and "What is sent" shows exactly what. No data about your clients, tickets or invoices is ever sent.
• Nothing gets lost: when our server cannot be reached, the message is sent automatically later, never twice.

1.3.6 — 16 October 2026

Changed

• My invoices, new look: a header with the amount due, unpaid and overdue counts and a "Pay all" button; search, status filters and sorting; one clear row per invoice with due date, amount, status, "Pay now" and PDF download. Works on phones and in dark mode.
• Invoice page, new look: status, dates and amount due at the top, a pay box, addresses side by side, a clean item list with totals, and transactions. Print and Download are left out when printing.
• News, new look: the newest post as a large card, the others as cards with a date tile, page numbers and an RSS button. Single posts get reading time, a table of contents for longer posts and "Copy link".
• Dates: news dates use proper month names in Arabic, Norwegian and Spanish.
• Invoice language: the invoice page reads in the invoice's own language and direction.

Fixed

• "Update to …" button in Licence & updates now starts the update. Sites on an earlier version can install this update by uploading the files as described in INSTALL.txt, or ask our support.

1.3.5 — 15 October 2026

Fixed

• Built-in statistics: page views are counted again, and the cookie-consent record and script-error log work again.
• Secure details: passwords and notes with special characters are stored exactly as typed, and notes in Arabic and other scripts use the text font.

1.3.4 — 15 October 2026

Added

• Secure details on tickets: clients add passwords, logins and keys to a ticket in an encrypted box instead of the message, with ready-made types (hosting / cPanel, WordPress, SSH, FTP, e-mail, database, API key and free text).
• Strong encryption on your server: every entry is encrypted with its own key and bound to its client and ticket. Secrets never appear in the ticket message, e-mails, logs or statistics.
• Deleted automatically: the client chooses when, within a limit you set (90 days by default).
• Ask the client, or send secrets: request details with one button on the admin ticket page, or send a secret (such as a root password) that is shown once and deleted afterwards.
• Controlled staff access: opening needs a reason that the client can see, details hide again after 30 seconds, and only chosen roles and staff of the ticket's department can open them. The client sees a full access record.
• Password warning: when a client types a password or key in a message, the theme offers to move it into Secure details. Payment card numbers are never stored.
• Admin: panel on the ticket page, box on the client summary, lock icons in lists, and a Secure details page for Full Administrators.

Fixed

• Update notice: "Update to …" appears as soon as a new version is out.
• Support tab: "Save changes" works when status pages are set.
• Department hours and common requests apply in every language.

1.3.3 — 15 October 2026

Security

• Full Administrator only for settings that change what every client sees or pays: custom code and CSS, HTML blocks, the Emails & invoice tab, robots.txt, settings import, announcements, product texts, the licence key, updates and backup restore. Other roles see them read-only, and every change is logged.
• Signed updates: one-click updates only install packages with a valid AraHoster release signature.
• Your site stays on during licence server problems: the theme only switches to the WHMCS default on a definite answer (licence expired, suspended or not valid for this site) or after 7 days without any answer. A network problem never switches it, and AraTheme comes back by itself once a check succeeds.
• First check after the update: if the licence server cannot be reached right after updating and your licence was active, the theme keeps working for up to 72 hours while the check is retried.
• Server clock: if your clock is behind, the Licence page says "Your server clock is behind by N minutes". Correct the clock (NTP) and check again.
• Without an active licence visitors get the WHMCS default theme and Standard Cart, so clients can always log in, order and pay. Your AraTheme settings are kept. The PHP sodium extension is required to verify the licence.
• Safer settings import: every value is checked; custom code is only imported when you tick "Also import custom code".
• Status pages are read over HTTPS only. Change any http:// status page address to https://.
• More hardening: hidden knowledgebase categories stay out of the sitemap, client-area lists escape special characters, and update backups are kept outside the public web folder where possible.

Changed

• SEO – indexed languages (SEO → Indexing): choose which languages get their own address in Google. Language links (hreflang) and canonical addresses follow this choice.
• SEO – cleaner addresses: addresses with a currency, an unindexed language or broken parameters get noindex, follow and point to the clean address; relative links no longer produce wrong addresses.
• SEO – action needed: after updating, open AraTheme → SEO → robots.txt, click "Use the suggested text" and save. A robots.txt that AraTheme did not write is never changed on its own.
• SEO – sitemap: lists each page once per indexed language and leaves out empty categories, the domain checker and hidden pages. Empty lists and error pages get noindex.
• Naming: the dark premium look of e-mails, invoice PDF and cookie banner is now called Classic. Your saved choice stays the same.
• Cleanup: old Internet Explorer 8 helper scripts from outside sites were removed.

1.3.2 — 14 October 2026

Security

• User permissions respected: a user invited with limited permissions no longer sees the account's services, invoices, credit or tickets on the dashboard or in quick search. The account owner still sees everything.
• Rate limits for public search, statistics and consent endpoints, per IP and for the whole site.
• Cloudflare headers are only trusted when the request really comes from Cloudflare.
• More hardening: help search only shows public articles, CSV exports cannot carry spreadsheet formulas, and page builder HTML is cleaned more thoroughly.

1.3.1 — 14 October 2026

Added

• SEO guide: 11 practical steps for hosting businesses, built into the SEO tab.
• Your own menus: two menu builders, one for visitors and one for clients, with icons, descriptions and an optional highlight panel, per language.
• Mega menus: header menus open with an icon, title and short description per link.
• First-run setup: a short guided screen for brand, design, menus and layout on a fresh install.
• Ready-made designs: six one-click looks with Undo.
• Preview before saving: see unsaved changes on the site, visible only to you.
• More fonts: Rubik, Readex Pro or device fonts.
• Client-area sidebar layout as an alternative to the top menu.
• Quick search (Ctrl/⌘ + K) and live knowledgebase search.
• Phone bottom bar, language suggestion and an outage bar (each can be turned off).
• Page builder starters: pricing, contact, FAQ and "why us".
• E-mails: social links as round icon buttons, quick links as outlined buttons.

Changed

• Smarter help assistant: understands same-meaning hosting words in English, Arabic, Norwegian and Spanish and ranks results better.
• Page builder heroes aligned to "start" keep all content on one edge.

Fixed

• Checkout reload loop with one-step checkout is fixed, and the cookie button no longer covers the total on phones.
• Text with "&" is stored as typed and no longer grows on each save.
• "Renew services" button works on WHMCS 9.
• Smaller fixes: e-mail style restore, keyboard access to closed menus, brand logo on web invoices and quotes, translated billing periods, and one main heading per announcement page.

1.3.0 — 14 October 2026 — first public release

Added

• Complete client-area theme and order form: redesigned homepage, client dashboard, services, domains, invoices, tickets, knowledgebase, news and account pages; a modern order flow with one-step checkout, instant domain search, billing period switch and plan comparison. Right-to-left and left-to-right languages, light and dark mode.
• Theme manager (Addons → AraTheme): brand, colours, menus, homepage sections, texts per language, footer and more, without code.
• Pages: build pages such as About us or landing pages from blocks, per language.
• SEO: titles, descriptions, canonical and language links, social cards, structured data, XML sitemap and a robots.txt editor.
• Cookies & privacy: a GDPR consent banner with Google Consent Mode v2 and a record of consent.
• Tracking & statistics: popular trackers that load only after consent, plus built-in cookie-free visitor statistics.
• Emails & invoice: branded client e-mails and invoice PDF with live preview.
• News & offers, help assistant, support desk hours and live platform status.
• Licence: one key per WHMCS installation, checked once a day. If the licence server cannot be reached, a 7-day grace period applies. Without an active licence WHMCS switches back to its own theme and order form; your settings stay and AraTheme switches itself back on when the licence is active again. Client pages never wait for the licence check.
• One-click updates: verified download, backup of the installed files (last 3 kept, with Restore) and automatic roll-back on any failure. Your own files and settings are never touched.
• White label: a fresh install uses your WHMCS company name and logo; no AraHoster branding ships in the product.

Changed

• Requirements: WHMCS 9.0 or later, PHP 8.1+ and the ionCube Loader. Templates, CSS, JavaScript and language files stay open for customising.