Extend your cms CMS with secure user registration with email verification, admin approval, and an encrypted data structure – all without a database.
Why CMS Register?
With the CMS Register add-on, users can register themselves and are only activated after administrator approval.
The architecture is based on the same security framework as the CMS Admin Tool: AES-GCM encryption, TOTP 2FA, HMAC signatures for tokens, rate limiting, and encrypted secret management via volt-secret.php.
Ideal for protected customer areas, editorial access, or projects that require maximum security without an SQL database.
New in version 1.3.2
Complete user registration with email confirmation and release link
Automatic token signing (HMAC-SHA-256) with expiration time (TTL)
Admin access with master password and two-factor authentication (TOTP)
Standalone use without admin tool possible
New dark theme in VOLT look
SMTP integration with diagnostic tools (diag_smtp.php, diag_register.php)
Improved security through rate limiting, HTTPS checks and .htaccess blocking
Included / Features
User registration with email verification and admin approval
Compatible with VOLT CMS v5+ and VOLT Admin Tool v2+
AES-GCM encryption via volt-secret.php (ENC string)
HMAC signing for secure one-time links
No database backend – completely file-based
SMTP email sending with SSL/TLS and log files
Dark theme interface in VOLT design
Rate limit protection and secure PHP sessions
🔑 Installation
Unzip the ZIP file and upload the folders /auth, /volt-benutzer, /admin/css/register.css and volt-secret.php to the webroot.
Enter SMTP credentials in mail_config.php.
Open /auth/register.php in your browser and perform a test registration.
⚙️ Usage
User registers → System creates a pending entry.
Admin receives email with release link.
After entering the master password and 2FA, the new user is created automatically.
volt-secret.php is encrypted (AES-GCM) and set to chmod 600.
/volt-user is protected against direct access.
Tokens expire automatically after a certain time; generic error messages prevent data leaks.
✔ Web designers and agencies managing client access or member areas
✔ Projects with login areas without relying on external systems
✔ Developers seeking secure, database-free user registration
It adds a secure, database-free registration flow to VOLT CMS with email verification, admin approval, AES-GCM encryption, and HMAC-signed tokens.
Unzip, upload /auth, /volt-benutzer, /admin/css/register.css and volt-secret.php to your web root. Add SMTP settings, then open /auth/register.php.
Passwords use bcrypt, secrets are protected by AES-GCM, tokens are HMAC-signed with a TTL, and we include .htaccess
samples and session-hardening tips.
No. It works standalone, and also integrates cleanly with the VOLT Admin Tool.
Yes—adjust /admin/css/register.css
to match your brand (Dark theme by default).
Yes, for your own and client sites. Resale or re-publishing the add-on is not permitted.
Yes—regular updates and direct support via VELUNO. Diagnostics help with quick fixes.