Nearly everything about how CoreInto behaves is a setting in the database, changed from the admin area. This chapter covers the three pages drawn from the settings list: Settings > General Settings (twelve tabs), Settings > Automation Settings (ten tabs) and Settings > Tax Configuration. Each table gives the setting as it is labelled on the page and what it does. Where a setting has a default, the default is named. Settings that are stored but not yet read by any part of CoreInto are marked "Not used yet": changing them does nothing in this version.
How the settings pages work
- Each page has tabs; the tab you were on is kept after saving.
- Press Save Changes at the bottom. Values are checked first (a whole number within its range, an amount such as
10.00, an email address, a web address starting with https:// or http://, one of the listed choices). Values that fail are shown with the reason and nothing on the page is saved until they are corrected. - Secrets (the SMTP password, the reCAPTCHA secret key) are stored encrypted and never shown back. The field shows "Saved, leave empty to keep" or "Not set". Leaving it empty keeps the stored value.
- Every save that changes something is written to the activity log as "General Settings changed: ..." with the names of the changed settings.
- A setting that has never been changed uses its default.
- The pages need the permissions "General settings", "Automation settings" and "Tax rules" respectively (see Staff and security).
Two more pages are listed under Settings > General but are not built yet: Storage Settings and Marketing Consent lead to a page that says "Coming in a later update".
General Settings
General tab
| Setting | What it does |
|---|
| Company name | Your company's name, shown in the client area, emails, invoice PDFs and as the issuer name in two-step sign-in apps. Default "My Company"; the installer sets it. |
| Company email address | Shown to clients and used as the sender when nothing else is set; also where contact form messages go when "Contact form messages go to" is empty. |
| Company phone | Shown in the strip at the top of the client area and on the contact page, next to the company email. Leave it empty to show nothing. |
| Company website | Your main site. The logo in the client area and emails links here; when empty the link goes to CoreInto's own address. |
| Logo address | The address of an image shown in the client area, in emails and on invoices and quotes. |
| Client area template | Classic (a top menu with an account sidebar, the default) or Horizon (an application shell with a dark side menu for signed-in clients and a light header for visitors). Both show the same pages and features; see The client area. |
| Pay-to text | Your business name and address as printed on invoices and quotes, and shown on the contact page. |
| Records per page | How many rows a list page shows before paging (clients, orders, invoices, tickets, logs and so on). 10 to 500, default 50. |
| Address style | index.php?r=/page (works everywhere) or Short addresses: /page. Short addresses need the web server to pass unknown addresses to index.php, which .htaccess does on Apache and LiteSpeed. The installer picks the one that works; see Getting started. |
| Maintenance mode | While on, the client area and public pages answer "503, being updated" with the maintenance message to everyone except staff who are signed in to the admin area in the same browser. Payment provider notifications (/gateway/...) still get through. |
| Maintenance message | The text shown in maintenance mode. Default "We are carrying out maintenance and will be back shortly." |
| Maintenance redirect address | When set, visitors are sent to this address instead of seeing the message. |
Localisation tab
| Setting | What it does |
|---|
| Default language | The language of the pages and emails for everyone who has not chosen one. The list offers English and every language installed in app/lang/ (CoreInto comes with Urdu); see Languages. |
| Clients may choose their language | On: the client area footer shows a language menu when more than one language is installed, and Account Details has a Language box. Off: every client sees the default language. Staff choose their own language on My Account either way. |
| Default country | Two-letter code, for example GB, US or PK. Preselected for new clients and used for store prices when the visitor's country is not known. Default US; the installer sets it. |
| Find a visitor's country from their address | How the store learns where a visitor connects from, so prices can be shown in the local currency before anyone signs in (see Currency by country in Catalogue). Off uses the default country. country.is (the default) and ipwho.is are free services that need no key; ipapi.co is free up to 1,000 lookups a day. Behind Cloudflare the country comes from Cloudflare and no lookup is made. Each address is looked up once and kept 30 days; private addresses are never looked up; a failed lookup is not tried again for six hours. |
| Clients may change their currency | On (default): the client area shows a currency menu (a coins icon with the code) in the top bar, listing every currency under Settings > Currencies. A visitor who picks one sees the store, cart and domain prices in it, and registers in it. A signed-in client is taken to a confirmation page first (see Change currency in Client area). Off: no menu, the page refuses, and prices follow the country as before. |
| Time zone | A zone name such as Europe/London. Business dates (due dates, expiry), the daily automation run, reports and every time shown in the admin area follow this zone. Times are stored in UTC. A name that is not a known zone is refused. Default UTC. |
| Date format | How dates are shown and printed: DD/MM/YYYY (default), DD.MM.YYYY, DD-MM-YYYY, MM/DD/YYYY, YYYY-MM-DD or D Mon YYYY. Times in the admin area add HH:MM. |
| Country picker on phone numbers | Not used yet. |
Store tab
What this installation sells. A hosting provider (the default) sells hosting, servers and domains; a software or licence seller sells licences and other products and has no domain pages at all. The type sets the defaults of the other switches on this tab; each can still be set on its own, and nothing is deleted when the type changes: domains and services already in the system stay, and the admin area keeps its Domains pages under Clients.
| Setting | What it does |
|---|
| What this installation sells | Hosting provider or Software or licence seller. Default hosting provider. |
| Domain registration | As the store type says (default), On or Off. Off hides the domain search and transfer pages (/domains/search and /domains/transfer answer "not found"), the Domains menu, the Domains pages of the client area (/client/domains...), the domain tiles, lists, expiry notices and shortcuts on the dashboard, the domain search on the home and store pages, the domain price table, and the "Register a new domain" and "Transfer your domain" choices on the order form; a product that asks for a domain can still take one the client owns or a free subdomain. |
| Store menu title | The name of the store menu in the client area. Empty means "Hosting" for a hosting provider and "Products" for a software seller. The footer's store column uses the same name. |
| Store menu layout | One menu with the product groups under it (default) or Each product group as its own menu item, which suits a store with two or three groups, for example Plans and Free Trial; the last item then opens the whole store under the menu title. |
| What clients call their purchases | As the store type says (services for a hosting provider, licences for a software seller), Services, Licences, Products or Subscriptions. Used in the client area menu, headings, shortcuts and empty-list texts: "My Services" and "Order New Services", "My Licences" and "Order a Licence", and so on. |
| Home page heading | The heading of the client area home page. Empty means "Find your perfect domain name" for a hosting provider and "Licences for your servers" for a software seller. |
| Home page text | The sentence under the heading. Empty means one that fits the store type. |
| Home page button | A software seller's home page shows a main button instead of the domain search; this is its label. Empty means "See plans". A hosting provider with domain registration off shows the same button. |
| Home page button link | Where the button goes: a store path such as /store/stackregent or a full address. Empty means the store. |
Ordering tab
| Setting | What it does |
|---|
| Default order form | Only "Standard" exists. Not used yet. |
| Clients must accept the terms of service | Adds a required tick box to registration and checkout. |
| Terms of service address | The page the terms link points to, at checkout and in the client area footer. |
| After checkout | Where the client goes after placing an order: Show the order confirmation; Open the invoice (default); Go straight to payment (opens the invoice until online payment is set up). |
| Notes field at checkout | Shows a notes box at checkout; the text is kept on the order. Default on. |
| Show prices as a monthly amount | In the store, a longer term that works out cheaper per month is shown as a monthly amount. |
| Refuse domains already in the system | A domain that another client has (not cancelled, expired, fraud or transferred away) cannot be ordered again, and shows as taken in the domain search. Default on. |
| Random usernames for new services | Not used yet. Usernames are made from the domain. |
| Days to pay a new order | The due date of an order's first invoice is this many days after the order (0 to 60, default 0 = due at once). Also used by the API's order action. |
| Do not send the invoice email for new orders | The order confirmation is sent and lists the invoice, but the separate invoice email is not. |
| No fraud check for clients with an active order | Not used yet. |
| Automatic setup only for clients with an active order | Not used yet. |
| Show product recommendations | Shows the recommended products set up on a product in the store. |
| Clients may renew services early | Not used yet. |
| Subdomain names clients may not take | A comma list of names refused when a product offers free subdomains. Default www,mail,mx,ftp,webmail,admin,ns1,ns2,cpanel,whm,panel,billing,my. |
Domains tab
| Setting | What it does |
|---|
| Allow domain registration | Offers "Register a new domain" in the store and the domain search. Default on. |
| Allow domain transfers | Offers "Transfer a domain" in the store and the transfer page. Default on. |
| Allow clients to use their own domain | Offers "Use a domain I already own" when ordering a product. Default on. |
| Clients may order renewals early | Shows "Renew now" on the client's domain page for active, expired or grace-period domains. Default on. |
| Renew at the registrar when the renewal is paid | A paid renewal invoice line sends the renewal to the registrar at once. Off: the renewal becomes a staff task. Default on. |
| New domains renew automatically | The auto-renew flag of newly ordered and imported domains. Default on. |
| A free domain renews free only while its product is active | Not used yet. |
| Sync domains with the registrars | Lets the domain-sync task read status and expiry date from the registrars. Default on. |
| Sync also moves the next due date | When a sync reads a new expiry date, the domain's next due and next invoice dates are set from it. |
| Days before expiry for the next due date | With the setting above, the next due date is this many days before the expiry date (0 to 120). |
| Add a to-do entry for manual domain work | When a registrar step must be done by staff, an entry is added to the To-Do List as well as the staff email. Default on. |
| Allow international domain names | Accepts domain names with non-ASCII letters in the store and domain search. Default on. |
| Bulk domain search | Not used yet. |
| Check availability in domain search | Ask the registrar, or WHOIS when it cannot tell (default), or Do not check (show prices only). |
| TLDs offered in search results | A comma list of extensions suggested in the domain search, default .com,.net,.org. |
| Default nameserver 1 to 5 | Not used yet. |
| Use the client's details as the administrative contact | Not used yet. |
| Administrative contact (when not the client) | Not used yet. |
| Grace and redemption fees | Not used yet. |
| Sell premium domains | Not used yet. |
Mail tab
| Setting | What it does |
|---|
| Send email with | This server's mail program (PHP's mail(), default) or An SMTP server. |
| SMTP host, SMTP port, SMTP security, SMTP username, SMTP password | The SMTP server: host, port (default 587), security (STARTTLS, TLS from the start, or None for a local server), and the login. The password is stored encrypted. |
| Sender name | The name emails come from. Default "My Company"; the installer sets it to the company name. |
| Sender address | The address emails come from, unless a template or a department has its own. Default noreply@example.com; the installer sets it to the company email. |
| Signature | Text added to the end of every email to clients. Default "Kind regards, My Company". |
| Header of every client email (HTML) | HTML placed above the message. When empty and a logo address is set, the logo is used. |
| Footer of every client email (HTML) | HTML placed below the message. |
| Email style (CSS) | Styles for the HTML emails. |
| Send a blind copy of every email to | One or more addresses that get a blind copy of every email sent. |
| Department for the contact form | Not used yet. Contact form messages go to the address below. |
| Contact form messages go to | Where contact form messages are emailed. Empty: the company email address. |
| Show the contact form | Offers the Contact Us page and its link in the client area footer. Default on. |
| Do not send any email | For testing: emails are written to the Email Message Log as not sent, and nothing leaves the server. |
At the bottom of the Mail tab, "Send a test email to" holds your own address; change it if you like and press Send Test Email. The page saves the settings first, then sends a test email with them straight away (not through the queue, and even when "Do not send any email" is on). The answer is shown beside the button and at the top of the page: "The mail server accepted the test email" means the server took it, so check that it arrived and is not in spam; otherwise the mail server's error is shown (for example a wrong password or a port that cannot be reached), so you can correct the settings and try again.
Support tab
| Setting | What it does |
|---|
| Ticket number pattern | How ticket numbers are made: %A a random letter, %n a random digit, %y the year, %m the month, %d the day, %i the ticket id. Default %A%A%A-%n%n%n%n%n%n, for example KQD-493018. |
| Order of replies | Oldest first (default) or Newest first, on the staff and client ticket pages. |
| Clients may rate staff replies | Shows a rating control on staff replies in the client area and records the rating. Default on. |
| Suggest knowledgebase articles while writing a ticket | Shows the five most read public articles on the new ticket page. Default on. |
| Allowed attachment types | A comma list of file extensions clients and staff may attach. Default .jpg,.jpeg,.png,.gif,.webp,.pdf,.txt,.log,.zip. |
| Largest attachment (MB) | 1 to 100, default 10. |
| Only signed-in clients may open tickets | Off: visitors may open a ticket with their name and email and follow it through a link with an access key. Default on. |
| Clients may add copy recipients | Shows a Cc field on new tickets. Default on. |
| Most tickets by email per sender per 15 minutes | Emails from one sender beyond this number in 15 minutes are refused by the mail import (0 to 1000, default 10). |
| Network status only for signed-in clients | The public Network Status page asks visitors to sign in first. |
Invoices tab
| Setting | What it does |
|---|
| Invoice the next period even if the last one is unpaid | On (default): the daily run invoices every period that falls due. Off: an item with an unpaid invoice is not invoiced again until it is paid. |
| Attach PDF invoices to emails | The invoice created, reminder, overdue and payment received emails carry the invoice as a PDF. Default on. |
| PDF paper size | A4 (default) or Letter, for invoice and quote PDFs and the batch PDF export. |
| PDF accent colour | A colour such as #1F4FA3 for the top band, headings and the amount due on invoice and quote PDFs. Empty: the standard blue. |
| Keep the client's details as they were when the invoice was made | The client's name and address are copied onto the invoice when it is created, so later changes to the client do not change old invoices. Default on. |
| Clients may pay several invoices at once | When a client has more than one unpaid invoice, the invoice list gets tick boxes and "Pay ticked invoices together", which makes one invoice that pays the chosen ones. Default on. |
| Clients may change the payment method of an invoice | Shows a payment method choice on the client's invoice page. Default on. |
| Group identical invoice lines | Not used yet. |
| Cancel unpaid invoices of cancelled services | When a service is cancelled or terminated, its unpaid renewal invoices are cancelled. Default on. |
| Number invoices in sequence | On: invoices get a number from a counter, in the format below. Off: the printed number is the invoice id. |
| Give invoices their number | When paid (default; unpaid invoices show their id) or When created. |
| Set the invoice date to the payment date | When an invoice is paid, its issue date is changed to the day of payment. |
| Invoice number format | {NUMBER} (default) with optional {YEAR}, {MONTH} and {DAY}, for example INV-{YEAR}-{NUMBER}. |
| Next invoice number | The counter's next value, 1 or more. CoreInto raises it as numbers are given out. |
| Start numbering again | Never (default), Every month or Every year: the counter goes back to 1 at the start of each period. |
| Invoice id increment | Invoice ids go up by this step (1 to 999, default 1), for example 1, 11, 21 with 10. |
| Next invoice id at least | The next invoice id is at least this number, to carry on from a previous system. 0 = no change. |
| Late fee type | Percentage (of the invoice total, default) or Fixed amount. |
| Late fee | The percentage or the amount in the default currency; converted to the invoice's currency. 0 turns late fees off. |
| Smallest late fee | A percentage fee is raised to at least this amount. |
| Call unpaid invoices pro forma | Unpaid invoices are headed "Pro forma invoice" on the page and the PDF. |
When the late fee is added is set under Automation Settings, Billing tab ("Add the late fee this many days after").
Credit tab
| Setting | What it does |
|---|
| Clients may add funds | Offers Add Funds in the client area, which makes an invoice that deposits credit when paid. |
| Smallest deposit | The least a client may deposit, default 10.00 in the default currency. |
| Largest deposit | The most in one deposit, default 100.00. |
| Largest credit balance | Deposits that would take the balance, including unpaid deposits, above this are refused. Default 300.00; 0 = no limit. |
| Only clients with an active order may add funds | Default on. |
| Use credit on new invoices automatically | New invoices from orders, renewals, billable items, quotes and debit notes take the client's credit first. Default on. |
| Give credit for downgrades | A downgrade to a cheaper product or cycle credits the unused part. Default on. |
Affiliates tab
| Setting | What it does |
|---|
| Affiliate programme | Turns the affiliate programme on: the client area gets an Affiliates page and referral links work. |
| Commission (percent) | The commission on referred services when neither the product nor the affiliate has its own rate. |
| Sign-up bonus | Credited to an affiliate's balance when they join. |
| Least balance for a withdrawal | An affiliate may request a payout once the balance reaches this amount. Default 25.00. |
| Days before a commission is released | Commissions wait this many days (0 to 365) before the affiliate-commissions task releases them; a commission is dropped if the service was cancelled or the invoice refunded meanwhile. |
| Department for withdrawal requests | The support department that receives payout requests as tickets. |
| Send affiliates a monthly report | The affiliate-reports task emails each affiliate a summary of the past month. Default on. |
| Link codes for affiliates (HTML) | Banner or link HTML offered on the affiliate page; {{affiliate_link}} is replaced by the affiliate's link. |
Security tab
| Setting | What it does |
|---|
| Least password strength (0-100) | New passwords for staff, users and clients must score at least this. The score grows with length and with the mix of upper and lower case letters, digits and symbols. Default 50. Passwords are always at least 10 characters. |
| Minutes an address is banned after failed sign-ins | 1 to 10080, default 15. |
| Failed sign-ins before a ban | 3 to 100, default 5. After this many failures from one address within 15 minutes, the address is locked out of signing in and added to Banned IPs for the minutes above. |
| Addresses never banned | One address or range per line. These addresses still wait out a lock-out but are never added to Banned IPs. |
| End a staff session when its address changes | A staff session whose visitor address differs from the one it was signed in from is ended. Default on. Turn it off for staff whose address changes while they work, for example on mobile networks. |
| Captcha | Off; For visitors who are not signed in (default); Always. |
| Forms with a captcha | Tick the forms: Registration, Checkout (new clients), Contact form, New support ticket, Password reset, Sign in. Default: all but Sign in. |
| Kind of captcha | Built-in picture code (default, nothing to set up); Google reCAPTCHA v2 (tick box); Google reCAPTCHA v2, invisible. The Google kinds fall back to the picture code until both keys below are set, and need cURL. |
| reCAPTCHA site key, reCAPTCHA secret key | From google.com/recaptcha, version 2. The secret is stored encrypted. |
| Staff may reset a forgotten password by email | Shows "Forgotten your password?" on the staff sign-in page; the link is emailed and works for 60 minutes. Default on. |
| Clients must set up two-step sign-in | Users without two-step sign-in are sent to set it up at their next sign-in and cannot use other client pages until they do. Staff signed in as a client are not asked. |
| Ask new users to confirm their email address | New users get an email with a confirmation link; the client area shows a notice until it is used. Default on. |
| Ask clients to agree to marketing email | Shows a marketing consent tick box on registration, checkout and the client's details page. Default on. |
| Marketing consent text | The text next to that tick box. |
| Log every API call | Not used yet. Every API call is written to the API Log regardless. |
Other tab
| Setting | What it does |
|---|
| Details clients may not change | Tick the profile fields (first name, last name, company, email, address lines, city, state, postcode, country, phone, tax number) that clients cannot edit themselves; staff can still change them. |
| Details that are optional when signing up | Tick the fields (phone, street address, city, state, postcode) that may be left empty at registration and checkout. |
| Email staff when a client changes their details | Sends the staff notice "client changed" to roles that receive order and account notices. Not sent when staff change details while signed in as the client. Default on. |
| Show clients to staff as | First and last name (default); Company (or name when there is none); Name and company. |
| Skip the home page and open the client area (or sign-in) | The site's front page sends visitors straight to the client area. |
| Visitors may create an account without ordering | Offers the Register page. Off: it redirects to the store. Default on. |
| Account owners may invite and manage other users | Offers the Users page in the client area. Default on. |
| Clients may choose which kinds of email they receive | Shows email preferences on the client's details page. Off: every kind is sent. Default on. |
| Show the cancellation request link for services | Offers "Request cancellation" on the client's service page. Default on. |
| Keep the activity log for (days) | The prune task deletes activity log lines older than this. 30 to 3650, default 365. |
Social tab
Addresses of your Facebook page, X (Twitter), Instagram, LinkedIn page, YouTube channel, TikTok, Telegram, GitHub and Discord invite, and your WhatsApp number with country code. In this version only the WhatsApp number is shown (in the client area footer); the others are stored but not used yet.
Automation Settings
These settings steer the daily automation. How the tasks run, and the full list, is in Automation.
Schedule tab
| Setting | What it does |
|---|
| Hour of the daily run | 0 to 23, in the company's time zone. Daily tasks run at this hour; monthly tasks on the first day of the month at this hour. Default 9. |
| Email the daily summary to | Addresses, separated by commas, that receive "Automation summary for <date>" after each daily run: tiles with what was done (invoices generated, late fees, card charges, reminders, domain renewal notices, cancellations processed, suspensions, terminations, fixed-term terminations, email marketer rules, email queue, domain sync, backups, exchange rates), a green line when every task completed or a red line naming the tasks that failed, and a link to Automation Status for that day. Empty: no email. |
Suspension tab
| Setting | What it does |
|---|
| Suspend overdue services | Lets the suspensions task suspend active services with an unpaid invoice. Default on. |
| Days after the due date | How long after the due date a service is suspended. 0 to 365, default 5. Services marked "no automatic suspension" (for ever or until a date) and clients in a group exempt from suspension are skipped. |
| Email the client when suspended | Sends the suspension email. Default on. |
| Unsuspend on payment | A service suspended for an overdue invoice is unsuspended when the invoice is paid. Default on. |
| Email the client when unsuspended | Sends the unsuspension email. Default on. |
| Terminate long-overdue services | Lets the terminations task terminate active or suspended services with an unpaid invoice. Off by default. |
| Days after the due date | How long after the due date a service is terminated. 0 to 3650, default 30. |
Billing tab
| Setting | What it does |
|---|
| Make invoices this many days before the due date | The create-invoices task invoices services, add-ons and domains whose next period starts within this many days. 0 to 365, default 14. |
| ... for monthly, quarterly, half-yearly, yearly, two-yearly, three-yearly services; for domains | A different number of days for each billing cycle and for domains. Blank = as above. |
| Send payment reminders | Lets the invoice-reminders task send the reminder and overdue notices. Default on. |
| Unpaid reminder, days before the due date | The "invoice reminder" email goes out this many days before the due date, once per invoice, and only when the invoice was issued before that day. 0 to 120, default 7; 0 = none. |
| First overdue notice, days after | The first overdue email, this many days after the due date. Default 1. |
| Second overdue notice, days after (0 = off) | Default 0. |
| Third overdue notice, days after (0 = off) | Default 0. When several notices fall due on the same day, only the latest one is sent. Clients marked "no overdue notices" get none. |
| Add the late fee this many days after (0 = off) | The late-fees task adds the late fee (Invoices tab) to invoices unpaid this many days after the due date, once per invoice. Clients marked exempt from late fees are skipped. Default 0. |
| Overage billing | Separate invoice at month end, or On the next invoice. Not used yet: the overage task is not built. |
| Cancel invoices unpaid for this many days (0 = never) | The invoice-auto-cancel task cancels unpaid invoices this many days past due, when no credit and no payment has been applied to them. Default 0. |
Payment capture tab
| Setting | What it does |
|---|
| Charge saved payment methods this many days before the due date | The capture-payments task charges a client's saved card for unpaid invoices from this many days before the due date. 0 to 60, default 0 (on the due date). Clients marked "never charge saved cards automatically" are skipped. |
| Try only once | After a failed charge, do not try again. |
| Try again every week for (weeks) | After a failed charge, try once a week for this many weeks. 0 to 52. |
| Day of the month for card expiry notices | The card-expiry-notices task sends "card expiring" emails for cards that expire this month, on or after this day (1 to 28, default 25). The task is scheduled monthly on the first day of the month, so with a day later than 1 it only sends when run by hand on or after that day; set it to 1 for the automatic run to send. |
Currency tab
| Setting | What it does |
|---|
| Update exchange rates automatically | The exchange-rates task fetches the rates for every currency from open.er-api.com, against the default currency, twice a day: at the daily automation hour and 12 hours later. The same switch is on Settings > Currencies. |
| Recalculate prices in other currencies | With the setting above, every price list is worked out again from the default currency at the new rates. |
Domains tab
| Setting | What it does |
|---|
| Domain renewal notices (days before; negative = after) | A comma list, default 30,7,-3. The domain-renewal-notices task emails the client on each of these days before expiry, and after expiry (negative) sends the "domain expired" email. Each notice goes once per domain. Empty turns notices off. |
| Send notices for free domains too | Off: domains with no renewal amount get no notices. Default on. |
Support tab
| Setting | What it does |
|---|
| Close tickets with no reply for this many hours (0 = never) | The close-tickets task closes tickets in a status marked "auto close" whose last message is from staff and older than this. The client gets the "ticket closed" email. 0 to 8760, default 0. |
| Delete attachments of closed tickets after (months, 0 = never) | The same task deletes attachment files of tickets closed for longer than this. 0 to 120. |
Other tab
| Setting | What it does |
|---|
| Carry out end-of-period cancellations | The cancellation-requests task terminates services with a cancellation request when it is immediate or the next due date has arrived. Default on. |
| Read disk and bandwidth use from servers | The usage-update task reads usage for active and suspended services with a server module. Default on. |
| Client status follows their products | Not used yet: the client-status task is not built. |
Data retention tab
| Setting | What it does |
|---|
| Delete closed clients after (months, 0 = never) | Not used yet. |
| Keep the module log for (days) | The prune task deletes module log entries older than this. 1 to 3650, default 30. |
| Keep database backups for (days) | The backup task deletes backups older than this; the newest is always kept. 1 to 365, default 14. |
The activity log retention is on General Settings, Other tab ("Keep the activity log for"). Task run history and licence checks are kept 90 days; these periods are fixed.
Updates tab
| Setting | What it does |
|---|
| Offer beta releases | Off by default. Updates come from the licence server for this site's licence key and are installed only when signed with CoreInto's release key; when this is on, beta releases are offered as well as stable ones. See Backups and updates. |
Storage Settings
Where uploaded files are kept: client files, ticket attachments, downloads and database backups. They live outside the web root and are handed out only through CoreInto's own pages. Permission settings.storage.
| Setting | What it does |
|---|
| Storage folder | The folder for client files and ticket attachments. Empty: the storage/ folder of this copy. The page shows each kind's folder, size and file count, and PHP's own upload limits. |
| Largest upload (MB) | The size limit for client files and ticket attachments; it cannot exceed PHP's upload_max_filesize and post_max_size, which the page shows. |
| Allowed attachment types | The same list as the Support tab of General Settings (not a second copy). |
| Bucket | An S3-compatible bucket (endpoint, bucket, region, access key, secret key, path prefix) with "Test connection", and the switch "Keep new files in the bucket". With it on, new client files and ticket attachments go to the bucket and are streamed back through CoreInto when downloaded; files already on the server stay where they are and keep working. Turning the switch off only changes where new files go. Downloads and backups always stay in this copy's storage folder. |
Fraud Protection
Checks on orders placed in the client area (orders made by staff or through the API are not checked). Permission settings.fraud. Each check has a switch and, where needed, a threshold:
| Check | What happens |
|---|
| Refuse orders from banned countries | Two-letter country codes; the billing country and the country of the connecting address are both checked. A matching order is marked Fraud (its items and invoice cancelled) and the client is told the order could not be accepted. Listed under Orders > Fraud Orders. |
| Hold when the connecting address is in another country than the billing address | Uses the visitor country lookup from General Settings, Localisation. |
| Hold when the same address placed many orders in 24 hours | With the number allowed. |
| Hold when the email domain is a throw-away mailbox | A built-in list of disposable providers plus Settings > Banned Email Domains. |
| Hold orders above an amount | The largest order placed without review, in the default currency. |
| Hold the first order of a client with a free email address when it contains a server | Optionally only until the client has confirmed their email address. |
"Hold" means the order stays Pending with a note saying why (on the order page and on this page under "Held for review"), and automatic setup waits until staff accept the order, which lifts the hold.
Notifications
Rules that send a message to staff when something happens. Permission settings.notifications. A rule has an event (new order, order accepted, order held or marked as fraud, new client, invoice paid, invoice overdue, new ticket, ticket reply from a client, ticket escalated, service suspended, service terminated, domain expiring, cancellation request, module action failed, daily run failed, new dispute), a channel and a target:
| Channel | Target |
|---|
| Email to staff | Chosen staff members or roles. |
| Webhook (JSON) | An address that receives a POST with the event's data, the X-CoreInto-Event header and an X-CoreInto-Signature (HMAC SHA-256 of the body with the rule's secret). |
| Chat webhook | An address that receives {"text": ...}, as Slack, Discord and similar services accept. |
Rules are added and edited in a pop-up, turned on and off, and tested with "Send a test". Every send is written to the log shown at the bottom of the page (the last 200).
Tax Configuration
Settings > Tax Configuration has one tab and a "Tax Rules" button that opens the list of tax rules (rate, name, country and state, level 1 or 2). Tax rules are covered in Billing.
| Setting | What it does |
|---|
| Charge tax | Turns tax on. Off: no tax is added, whatever the rules say. Clients marked tax exempt pay no tax either way. |
| Prices include tax | Prices are treated as including tax; the tax is shown as a part of the price instead of being added on top. |
| Level 2 tax is charged on top of level 1 | Compound tax: the level 2 rate is applied to the amount including level 1 tax. |
| Work out tax per line (otherwise on the total) | Tax is rounded per invoice line (default) or once on the taxed total. |
| Tax domains | Domain registration, transfer and renewal lines are taxed. Default on. |
| Tax late fees | Late fee lines are taxed. Default on. |
| Tax billable items | Billable item lines are taxed. Default on. |
| Tax lines added by hand | Lines staff add to an invoice are taxed by default (the box is ticked when adding a line). Default on. |
| Name of the client's tax number | The label of the tax number field on client forms and invoices, default "Tax ID". |
| Ask clients for their tax number | Shows the tax number field at registration, checkout and on the details page. Default on. |
| Your own tax or VAT number | Printed on invoices and quotes. |
For each level, the rule that matches the client's country and state most closely applies: a rule for the state beats a rule for the whole country, which beats a rule for all countries.
