Domain Search for WHMCS

Description

Domain Search for WHMCS is a lightweight WordPress plugin that adds a polished domain search form to your site and hands the visitor off to your existing WHMCS billing portal to complete registration.

It is purpose-built for hosting providers, domain resellers, ICANN registrars, and white-label hosting brands who already use WHMCS as their billing platform.

TL;DR

  • Install, activate, paste [domain_search_for_whmcs] on any page.
  • No JavaScript on the front-end. No external requests. No tracking.
  • Create unlimited branded shortcodes pointing at different WHMCS installs.
  • Modern admin dashboard with built-in support center.
  • Translation-ready, multisite-friendly, GDPR-friendly.

Why this plugin

Most WHMCS integrations are heavy or hard-coded. This one is the opposite: a single, dependency-free shortcode that drops into any layout. It does one thing and does it cleanly.

  • No external API calls — submits directly to your own WHMCS install.
  • No JavaScript on the public site (admin-only JS for the dashboard tabs).
  • Works with classic themes, block themes, and every major page builder.
  • Visitor queries never touch a third-party server.

Key features

Drop-in shortcode[domain_search_for_whmcs] works in posts, pages, widgets, FSE template parts, page-builder shortcode blocks, or via do_shortcode() in PHP.

Unlimited custom shortcodes — create branded forms each pointing at a different WHMCS install with its own placeholder. Reference them as [domain_search_for_whmcs id="sc_xxxxx"].

Modern admin dashboard — tabbed UI, click-to-copy shortcodes, an At a Glance” overview (custom shortcode count, active host, HTTPS status), and a built-in Support tab.

Built for speed — one ~1.7 KB CSS file. No JavaScript, no jQuery, no Ajax, no remote assets, no tracking pixels.

Theme-agnostic styling — six stable, well-named CSS classes you can target from any theme or page builder.

Developer extensibility — five filter hooks let plugins and themes change behavior without forking. See Developer Filters below.

Secure by default — nonce verification, capability checks, sanitized I/O, properly escaped output.

Translation-ready — every string wrapped in the domain-search-for-whmcs text domain.

Privacy-friendly — no data collection, no cookies, no remote services. See Privacy below.

Perfect for

  • Hosting providers running WHMCS as their billing system.
  • Domain resellers with multiple storefronts (TLD niches, geographic markets, white-label brands).
  • ICANN registrars offering retail domain sales through WordPress.
  • Agencies building landing pages for hosting clients.

How it works

  1. The shortcode renders a clean HTML form on your page.
  2. When a visitor submits it, the browser navigates (in a new tab) to:
    https://your-whmcs.com/cart.php?a=add&domain=register&query=THE-DOMAIN
  3. WHMCS handles availability, pricing, TLDs, cart, and checkout — exactly as it would for any other entry point.

You do not need to expose any WHMCS API credentials in WordPress. The plugin never calls WHMCS APIs; it just hands off the visitor.

Roadmap

  • Optional Gutenberg block wrapper.
  • Optional Elementor and Bricks widgets.
  • Optional inline Ajax availability check (off by default; would call your WHMCS Domain Availability API).
  • Bulk import/export of custom shortcodes.

Quick Start

  1. Install and activate the plugin.
  2. Go to Settings Domain Search for WHMCS.
  3. On the Default Settings tab, enter your WHMCS base URL (e.g. https://billing.example.com) and a placeholder (Find your domain”).
  4. Click Save Changes.
  5. Add [domain_search_for_whmcs] to any post or page.

That’s it. Visitors who type a domain and submit will land on your WHMCS cart with the search pre-filled.

Shortcode Reference

Default shortcode (uses the Default Settings tab values):

[domain_search_for_whmcs]

Custom shortcode (uses settings from a specific custom shortcode):

[domain_search_for_whmcs id="sc_1234567890_456"]

The id value is generated when you create a custom shortcode and is shown in the table on the Custom Shortcodes tab. Click it to copy.

If a custom id is provided but doesn’t exist (e.g. it was deleted), the plugin falls back to the default settings rather than rendering nothing.

Developer Filters

The plugin exposes five filters for runtime customization. All filters fire inside the shortcode renderer, so you can vary output per page, per user, or per locale.

dsfwhmcs_whmcs_url

Filter the resolved WHMCS base URL right before the form is rendered.

add_filter('dsfwhmcs_whmcs_url', function($url, $atts) {
    // Send logged-in users to the staff portal.
    return is_user_logged_in() ? 'https://members.example.com' : $url;
}, 10, 2);

Returns: string — the WHMCS base URL.

dsfwhmcs_placeholder

Filter the placeholder text dynamically.

add_filter('dsfwhmcs_placeholder', function($placeholder, $atts) {
    return get_locale() === 'fr_FR' ? 'Trouvez votre domaine' : $placeholder;
}, 10, 2);

Returns: string — the placeholder text.

dsfwhmcs_form_action

Filter the full form action URL (default: {whmcs_url}/cart.php).

add_filter('dsfwhmcs_form_action', function($action, $whmcs_url, $atts) {
    return trailingslashit($whmcs_url) . 'domainchecker.php';
}, 10, 3);

Returns: string — the action URL.

dsfwhmcs_form_method

Switch the form method. Defaults to GET; return 'POST' for legacy WHMCS configurations that prefer it.

add_filter('dsfwhmcs_form_method', function() {
    return 'POST';
});

Returns: string'GET' or 'POST'.

dsfwhmcs_shortcode_html

Filter the rendered HTML before it’s returned to WordPress. Useful for wrapping the form, injecting analytics attributes, or replacing markup wholesale.

add_filter('dsfwhmcs_shortcode_html', function($html, $atts) {
    return '<div class="my-wrapper">' . $html . '</div>';
}, 10, 2);

Returns: string — the final HTML.

Compatibility

  • WordPress: 5.0+ (tested up to 6.7.5)
  • PHP: 8.0+ required (PHP 8.1, 8.2, 8.3 fully tested)
  • WHMCS: any version supporting the standard cart.php?a=add&domain=register URL (WHMCS 6.0+)
  • Multisite: fully compatible; settings are per-site
  • Page builders: Gutenberg, Classic Editor, Elementor, Beaver Builder, Bricks, Divi, Oxygen, Breakdance
  • Caching plugins: fully compatible (the form is static HTML)
  • HTTPS: strongly recommended for both WordPress and WHMCS — the dashboard’s At a Glance” panel flags HTTP connections

Troubleshooting

The form submits but I get a 404 or blank page on WHMCS

Check the WHMCS URL in Default Settings. It should be the base URL of your WHMCS install (e.g. https://billing.example.com) — not https://billing.example.com/cart.php. The plugin appends cart.php itself.

The form looks unstyled

Make sure your theme isn’t blocking plugin stylesheets. The plugin enqueues a file named domain-search-for-whmcs.css on the front-end. If your theme has aggressive CSS overrides, target the .dsfwhmcs-* classes from the Customization tab.

Visitors land on the cart but the search box is empty

This usually means the URL was reached without the query parameter. Check that no caching plugin is stripping query strings from form submissions.

The Support tab is cut off on my phone

Update to 3.1.0+. The tab strip is now horizontally scrollable on narrow screens.

Other plugins’ notices appear inside the green dashboard header

That’s a WordPress core behavior. Update to 3.0.0+ where the plugin uses <hr class="wp-header-end"> to push third-party notices below the header.

Privacy

Domain Search for WHMCS is privacy-respecting by design.

  • No tracking. The plugin sets no cookies and loads no remote scripts.
  • No data collection. Visitor search queries pass directly from the browser to your WHMCS install — they do not touch the WordPress server, are not logged, and are not transmitted to any third party.
  • No external services. All assets (CSS, fonts, icons) are served from your own site. No CDN or remote dependency.
  • Stored data. Only configuration is stored — WHMCS URL, placeholder text, custom shortcode definitions — in the WordPress wp_options table. This is removed on plugin uninstall.

You should still ensure your WHMCS install has its own privacy policy in place, since the visitor will be entering personal data on that side of the integration.

External Services

This plugin does not connect to any external service.

The visitor’s browser submits the search form directly to your own WHMCS installation — a first-party endpoint that you control. Nothing is sent to WordPress.org, third-party domain APIs, analytics services, or the plugin author.

Source Code

This plugin contains no minified or compiled assets. All PHP, CSS, and JavaScript shipped in the plugin is human-readable source.

The plugin is hosted on WordPress.org. Issues and pull requests can be submitted via the support forum or by emailing shipon@zendforce.com.

Screenshots

  • Front-end domain search form rendered on a marketing page.
  • Admin dashboard — Default Settings tab.
  • Admin dashboard — Custom Shortcodes tab with multiple branded forms.
  • Admin dashboard — Customization reference for theme designers.

Installation

From the WordPress.org directory (recommended)

  1. In your WordPress admin, go to Plugins Add New.
  2. Search for Domain Search for WHMCS”.
  3. Click Install Now, then Activate.
  4. Configure under Settings Domain Search for WHMCS.

Manual installation

  1. Download the plugin ZIP from WordPress.org.
  2. Upload it via Plugins Add New Upload Plugin, or extract to /wp-content/plugins/domain-search-for-whmcs/ via SFTP.
  3. Activate through the Plugins menu.
  4. Configure under Settings Domain Search for WHMCS.

FAQ

How do I change the WHMCS URL?

Open Settings Domain Search for WHMCS and update the WHMCS URL on the Default Settings tab. Use the base URL of your WHMCS install (e.g. https://billing.example.com) — no trailing slash, no cart.php.

Can I customize the placeholder text?

Yes. Each shortcode has its own placeholder field. You can also change it programmatically with the dsfwhmcs_placeholder filter.

Can I have different search forms for different brands?

Yes — that is what the Custom Shortcodes tab is for. Each custom shortcode has its own WHMCS URL and placeholder. Reference it as [domain_search_for_whmcs id="sc_xxxxx"]. Click any shortcode in the table to copy.

Does this plugin store any user data?

No. The plugin saves only your configuration (WHMCS URLs, placeholders, custom shortcode definitions) in wp_options. The search form submits the visitor’s query directly to your WHMCS site — nothing is logged or transmitted by this plugin.

Will it work with my theme or page builder?

Yes. The output is small, semantic HTML. Tested with classic themes, block themes (FSE), Elementor, Beaver Builder, Bricks, Divi, Oxygen, and Breakdance. If your builder has a Shortcode” element, drop it in there.

How do I style the form?

Open the Customization tab inside the plugin to see the available CSS classes. Add overrides in Appearance Customize Additional CSS, your child theme’s stylesheet, or a CSS plugin. The classes are stable and won’t change between minor versions:

  • .dsfwhmcs-wrapper — outer container
  • .dsfwhmcs-form<form> element
  • .dsfwhmcs-search-input-group — input group container
  • .dsfwhmcs-input-with-button — flexbox wrapper for input + button
  • .dsfwhmcs-domain-search-input — the <input> field
  • .dsfwhmcs-domain-search-button — the submit button

How do I get support?

The Community Forum on WordPress.org is the primary support channel — please open a thread there for the fastest public response. You can also reach the developer directly at shipon@zendforce.com for personal assistance. Inside the plugin, the Support tab has both links plus a system info card that’s handy to copy-paste into a bug report.

Does it work with the WHMCS REST/Domain Lookup API?

Not at the moment — the plugin hands off to WHMCS’s own cart.php flow. This keeps the integration simple, fast, and dependency-free, with no need to expose WHMCS API credentials to WordPress. An optional inline-availability mode (off by default) is on the roadmap.

Will my old shortcodes still work after upgrading?

Yes. All existing default settings and custom shortcode IDs are preserved across upgrades. No data migration is required.

Why am I seeing other plugins’ admin notices on the settings page?

Standard WordPress behavior — third-party plugins (SMTP plugins, security plugins, etc.) hook into the global admin_notices action which fires on every admin screen. Domain Search for WHMCS does not display those notices itself.

Does the plugin require PHP 8?

Yes. Version 3.0.0+ requires PHP 8.0 or higher. PHP 7.x has been end-of-life since November 2022 and is no longer receiving security fixes — please update your hosting environment.

How do I uninstall and remove all data?

Deactivate, then Delete the plugin from the Plugins screen. The bundled uninstall.php removes all plugin options from the database.

Is the plugin GDPR-compliant?

Yes. The plugin does not collect, process, or transmit visitor data. The search form submits the query directly from the visitor’s browser to your own WHMCS install (a first-party data flow already covered by your existing privacy policy). The plugin sets no cookies, loads no remote assets, and logs nothing.

Is the plugin compatible with WordPress Multisite?

Yes. Activate per-site or network-activate. Settings are stored per-site, so each site in the network has its own WHMCS URL and shortcodes.

Can I contribute or submit a feature request?

Yes — open a thread on the WordPress.org plugin support forum, or email shipon@zendforce.com.

Reviews

Read all 1 review

Contributors & Developers

“Domain Search for WHMCS” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

3.1.0

Feature release: Appearance customizer with live preview.

  • New: dedicated Appearance tab in the admin dashboard — fully customize the front-end search form: input background, text color, border, focus border, placeholder color, button background, hover background, icon color, plus separate corner-radius sliders for input and button (0–50px each). Changes apply through CSS custom properties with zero front-end JavaScript.
  • New: Live Preview card at the top of the Appearance tab — see your color and radius choices applied instantly as you tweak them.
  • New: synced color picker + hex text input for every color setting (use whichever you prefer; both stay in sync).
  • New: Reset to defaults button restores the entire Appearance section in one click (with confirmation).
  • New: Appearance settings are organized via clean sub-tabs (Search Input / Search Button) inside the Color & Style card, keeping the form short and scannable.
  • New: active main tab and sub-tab are now persisted across page reloads (localStorage), so saving from the Button sub-tab returns you to the Button sub-tab.
  • Improved: front-end CSS now uses CSS custom properties (--dsfw-input-bg, --dsfw-button-bg, etc.), so theme developers can also override appearance from a stylesheet without touching the plugin’s settings.
  • Improved: Settings saved” notice now appears after saving via the Default Settings or Appearance forms (Settings API redirect was previously silent).
  • Improved: responsive admin layout — tab strip wraps to a second row on narrow screens instead of clipping; mobile-friendly header, tighter card padding on small viewports, single-column support grid, stacked footer.
  • Improved: input font-size raised to 16px on mobile to prevent iOS zoom-on-focus.
  • Improved: shortcodes table scrolls horizontally on narrow screens instead of overflowing.
  • i18n: regenerated the empty .pot template with all 112 unique strings — translators can now contribute via Poedit, Loco Translate, or the WordPress.org translation platform.
  • Internal: moved inline admin JavaScript to assets/admin.js, properly enqueued via wp_enqueue_script with wp_localize_script for translatable strings. Cleaner code and CSP-friendly (no inline <script> blocks).
  • Polish: tighter one-line plugin header description matching the readme; removed the email link from the dashboard footer (still available in the Resources sidebar and Support tab).

3.0.0

Major release: redesigned admin, brand refresh, security hardening, developer extensibility.

  • New: ZendForce-branded admin dashboard — modular cards, tabbed navigation, click-to-copy shortcodes, and an At a Glance” overview (custom shortcode count, active host, connection protocol).
  • New: built-in Support tab with WordPress.org forum link, direct email contact (shipon@zendforce.com), system info card, and a before you contact” checklist.
  • New: five developer filter hooks — dsfwhmcs_whmcs_url, dsfwhmcs_placeholder, dsfwhmcs_form_action, dsfwhmcs_form_method, dsfwhmcs_shortcode_html.
  • New: logo mark, status pill, and a polished plugin footer with quick links.
  • New: translation-ready strings across the entire admin UI.
  • Changed: minimum PHP version raised to PHP 8.0 (PHP 7.x has been EOL since November 2022).
  • Changed: Tested up to” raised to WordPress 6.7.5.
  • Fixed: uninstall.php was deleting stale option keys and left actual plugin data behind. It now correctly removes all plugin options on uninstall.
  • Fixed: removed a non-functional WordPress nonce from the front-end search form. Because the form posts to an external WHMCS URL, the nonce could never validate — it was just a leakable token on every page.
  • Changed: the search form now submits via GET (matching WHMCS cart.php convention) and opens in a new tab with rel="noopener".
  • Hardened: explicit current_user_can('manage_options') checks on the settings handler and rendering function. Safer sanitization on $_GET parameters and shortcode IDs (sanitize_key).
  • Improved: admin assets only load on the plugin’s settings page; asset versions tied to the plugin version for clean cache busting.
  • Improved: plugin headers now declare Requires at least, Tested up to, and Requires PHP so WordPress can warn users on incompatible installs.
  • Removed: stray https:/ directory accidentally bundled in earlier releases.
  • Internal: introduced DSFWHMCS_VERSION, DSFWHMCS_FILE, DSFWHMCS_DIR, and DSFWHMCS_URL constants for cleaner internals.

2.1.0

  • Redesigned admin dashboard with a modern, card-based UI and tabbed navigation.
  • Fixed: uninstall.php removes the correct option keys.
  • Fixed: removed the unused nonce from the front-end search form.
  • Changed: search form submits via GET and opens in a new tab.
  • Hardened: explicit capability checks; safer sanitization of $_GET['message'].
  • Improved: admin assets only load on the plugin’s settings page.
  • Removed: stray https:/ directory bundled in prior releases.

2.0.0

  • Added admin settings for WHMCS URL and placeholder text.
  • Improved security with nonce verification.
  • Enhanced shortcode management functionality.
  • Optimized code for better performance and compatibility.
  • Added the ability to create and delete multiple shortcodes.
  • Improved admin panel UI for better user experience.

1.5.0

  • Improved shortcode functionality.
  • Added basic security improvements.
  • Fixed minor styling issues.

1.0.0

  • Initial release.