I really must thank this guy who has discovered the SQL injection in the WHMCS file..i've uploaded it and now i'm confortable