Skip to main content

Smart Mode

Smart Mode is an alert mode that helps identify login activity from countries that are new for a specific WHMCS User and Client Account context.

It is designed for notification and confirmation. It does not block login and does not automatically trust a country just because a login occurred.

What Smart Mode evaluates​

When Smart Mode is enabled and a login country is detected, Extendy GeoShield checks whether that country is already expected for the current login context.

A country may be treated as expected when it is:

  • listed in Global Trusted Countries;
  • the current country on the resolved WHMCS Client Profile;
  • already stored as a Smart Mode known country for the exact WHMCS User and Client Account context.

If the country is already expected, the event is logged and the Smart Mode alert is suppressed.

If the country is new, Extendy GeoShield records an alert-required decision and uses the Smart Mode template:

Extendy GeoShield - Smart New Country Alert

Smart Mode context​

Smart Mode known-country checks are scoped to the login context.

Event contextSmart Mode known-country scope
Login event has a Client Account contextWHMCS User + Client Account + country
Login event has no Client Account contextWHMCS User + no-client-context + country

A known country stored with no Client Account context applies only to future events that also have no Client Account context. It is not automatically trusted for all Client Accounts linked to that WHMCS User.

Extendy GeoShield does not guess Client Account context for multi-client WHMCS Users.

Smart Mode and trusted countries​

Smart Mode works alongside the broader trusted-country model.

Before treating a country as a Smart Mode new country, the addon checks:

  1. Global Trusted Countries.
  2. The current WHMCS Client Profile country, when a Client Account context is available.
  3. Smart Mode known countries for the exact context.

This means a country can be expected because it is globally trusted, because it matches the Client Profile country, or because it was previously confirmed through Smart Mode for the same context.

For the broader concept, see Trusted Countries.

New-country alerts​

When Smart Mode detects a new country, Extendy GeoShield can send a Smart New Country alert to the primary WHMCS Client Profile email address for the safely resolved Client Account.

The alert content includes the WHMCS User email that performed the login.

If no safe Client Account context is available, Extendy GeoShield does not send an email in the MVP. The event remains logged, and the addon does not guess a recipient from linked Client Accounts or Contacts.

Eligible Smart New Country alerts can include a trust link.

The trust link lets the correct authenticated WHMCS User confirm that the country should be known for future Smart Mode checks in the same context.

Current verified trust-link behaviour:

  • the link uses WHMCS addon client-area routing;
  • the user must be authenticated before a country can be trusted;
  • opening a trust link while logged out must not trust the country by itself;
  • the token is bound to the WHMCS User that triggered the alert;
  • if the token is bound to a Client Account, the current Client Account context must match;
  • if the token has no Client Account context, it can only trust the no-client-context scope;
  • the addon does not auto-switch Client Account context;
  • a token expires after approximately 48 hours;
  • a token can be used only once;
  • invalid, expired, already-used, user-mismatch, and client-mismatch cases are rejected safely.

The trust result is shown in the WHMCS client area.

important

A trust link is not a magic login link and is not an anonymous approval action.

The trust action is completed only after WHMCS authentication and full token, user, and client-context validation.

What happens after a country is trusted​

After a valid trust action, Extendy GeoShield stores the country as a Smart Mode known country for the exact context.

Future Smart Mode checks for the same WHMCS User, same Client Account context, and same country can then suppress the Smart Mode new-country alert.

If the original token had no Client Account context, the trusted country applies only to future no-client-context events for the same WHMCS User and country.

What Smart Mode does not do​

Smart Mode does not:

  • block login;
  • bypass WHMCS authentication;
  • automatically trust a country when a login occurs;
  • trust a country merely because an email was received;
  • trust a country before the trust action is authenticated and validated;
  • trust the country for unrelated Client Accounts;
  • send email when the Client Account context is missing or ambiguous;
  • generate trust links for Unknown country or GeoIP failure alerts.

Unknown country behaviour​

If the country cannot be detected, Extendy GeoShield follows the Alert When Country Detection Fails setting.

When that setting is Yes, the addon uses the normal login alert template with Unknown country values. Smart Mode trust links are not generated because there is no verified country to trust.

When that setting is No, the event is logged and no client email is sent only because country detection failed.

For the mode comparison, see Alert Modes.