cms Admin + REGISTER – The complete package for user management and registration
Combine the cms Admin Tool (encrypted, file-based user and permissions management, 2FA, email password reset) with the VOLT Register add-on (secure self-registration with email verification and admin approval).
Both run without a database, are block-friendly, lightweight, and production-ready.
Warum das Bundle?
End-to-end flow: Registration → Approval → Administration – all from a single source
Hardened by default: AES-GCM, HMAC tokens, secure sessions, .htaccess examples
Seamless integration: shared folder structure, consistent secrets (volt-secret.php)
Blocs-optimized: Brics (Launcher/Reset) can be used locally, Bootstrap 4/5, Blocs 6+
Included components
VOLT Admin Tool
Users, groups/roles, 2FA (TOTP), email password reset
Lazy cron, SMTP diagnostics (diag_smtp.php, debug-smtp.php)
Encrypted master secret (volt-secret.php, ENC string)
VOLT Register Tool
Self-registration with email verification
Admin approval via one-time link (HMAC signature, TTL)
Dark theme UI, rate limiting, secure endpoints
Unzip the ZIP file, upload /admin, /auth, /user-account, /volt-user, user.ini, volt-secret.php to the webroot (e.g. public_html).
Enter SMTP (mail_config.php) and set ENC in volt-secret.php.
Open /admin/users.php → Manage users/groups.
Test /auth/register.php → Email verification + admin approval.
Security (Best Practices)
Set volt-secret.php to 600 and block via .htaccess
Force HTTPS, rate limiting, generic error messages
/volt-user not listable, block logs/JSON
✔ Agencies & Freelancers (client access)
✔ Editorial/membership areas without SQL
✔ Projects with a focus on security, speed, and portability
The bundle combines the VOLT Admin Tool (user, group & role management, 2FA, email password reset) with the VOLT Register Add-on (self-registration with email verification and admin approval) — all file-based, no database required.
Unzip and upload /admin, /auth, /benutzerkonto, /volt-benutzer, plus user.ini and volt-secret.php to the web root. Enter SMTP details, set the ENC in volt-secret.php
, then open /admin/users.php and test /auth/register.php.
Users sign up via /auth/register.php. After the admin approves them (one-time link + master password + 2FA), they appear in the Admin Panel under /admin/users.php for group assignment and management.
AES-GCM for secrets, bcrypt passwords, HMAC-signed one-time links with TTL, secure PHP sessions, .htaccess
samples, and rate-limiting. volt-secret.php
is set to 600
and blocked at the web server level.
Built for VOLT CMS v5+ (Blocs 6+, Bootstrap 4/5). Server requirements: PHP 8.2+ with OpenSSL and valid HTTPS.
Yes — via a button or iFrame. The Brics (Admin Launcher, Reset Button) are used locally in Blocs and are not uploaded to the server.
Yes, on your own and client projects. Resale or independent re-publishing is not permitted.
Yes. Ongoing updates and direct support via VELUNO. Diagnostic scripts are included for SMTP/Reset/Register.