Skip to content

Guide

Storage Box — Client Area

Guide 3 min read

This page describes what a customer sees and can do when they open a Storage Box service in the WHMCS Client Area. It is written for WHMCS administrators who need to explain or support the customer-facing experience.

Service overview

When a Storage Box service is active, the client area shows the box's connection details and current status alongside the available management actions below. Available actions depend on the Settings configured for the product.

Account actions

Action Description
Reset Password Reset the main Storage Box password. The new password is displayed once.
Lock / Unlock Restrict or allow access to the Storage Box (requires confirmation). Only shown if enabled in Settings.

Snapshots

  • Create Snapshot — take a filesystem snapshot with a description.
  • Delete Snapshot — delete a snapshot (requires confirmation).

Note

Customers can only manage snapshots belonging to their own Storage Box; the module verifies ownership before every snapshot action.

Sub-accounts

Where Allow Client Sub-account Management is enabled on the product (see Settings), customers can:

  • View existing sub-accounts on the Storage Box.
  • Enable / Disable Subaccount — toggle access for a specific sub-account (requires confirmation).

Sub-accounts give scoped, separate credentials for a portion of the Storage Box without exposing the main account password — useful for sharing limited access with a third party or another application.

Usage stats

Where Show Usage Stats in Client Area is enabled, the client area displays the Storage Box's current usage (space consumed against the plan's capacity), refreshed from Hetzner on page load.

Connection details

Storage Boxes support several access protocols; the client area surfaces the connection details relevant to the box so customers can mount or connect to it directly:

  • SSH / SFTP — direct shell and secure file transfer access.
  • Samba / SMB — Windows- and macOS-native network share mounting.
  • WebDAV — HTTP-based file access, usable from most operating systems and many backup tools.
  • rsync — scripted, incremental file synchronization.
  • FTPS — FTP over TLS for clients that require legacy FTP-style access.
  • Borg — repository access for Borg Backup, where supported by the box.

Tip

Point customers to their box's hostname and username shown in the client area rather than a generic Hetzner hostname — Storage Box connection details are unique per box.

Security & interaction behavior

The same protections used across the addon's client area apply to Storage Box actions:

  • POST requests — all state-changing actions (password reset, lock/unlock, sub-account toggles, snapshot create/delete) are submitted via POST.
  • Explicit confirmation — irreversible or high-impact actions (deleting a snapshot, locking the box) prompt a confirmation dialogue before proceeding.
  • Ownership verification — before acting on a resource such as a snapshot or sub-account, the module confirms it belongs to the logged-in customer's active service.

Troubleshooting

Problem Fix
Customer cannot see sub-account controls Enable Allow Client Sub-account Management on the product in Settings
Customer cannot lock/unlock the box Enable Allow Client Lock/Unlock on the product in Settings
Usage stats missing from the client area Enable Show Usage Stats in Client Area in Settings
Password reset does not take effect Confirm the connecting client is using the newly generated password, not a cached one