336 comments found.
Hello, is there a way to add time expiration login per user?? This is way important to me. Thanks!
The script allows you to set an expiration date on the cookies people are given if they select ‘Remember Me’. Is that what you mean?
Does anyone know the correct procedure for this?
index.php – my login form – need to change a little styling
probably involves <link href=”../admin/css/style.css” rel=”stylesheet”> but I cannot seem to make it work. (tried temporarily commenting out bootstrap lines)
I need to change the form’s blue font, blue button, hover and blue upper form background.
I also need to change the overall page grey background.
You could use the tools of the broswer to see which code you need to change. Right click in firefox for example, and click inspect element.
You are right however, the changes need to be made in style.css.
index.php – my login form – colors
My local copy of dmin/css/style.css shows the change.
I have been using inspect and changing admin/css/style.css.locally
I have verified that file manager on cPanel shows my changes to admin/css/style.css.
However, on uploading and refresh, colors revert back to original colors?
What am I missing?
i’m running a member video site. Can this protect the video ?
It can protect the page in which the video resides. Or you can use PHP to only show the video code, if the user is logged on, or part of a group, etc. Lots of possibilities.
What i mean is If someone know the video full url, can he download it without login to member area ?
There are ways and means to get around that too with PHP etc, using the script and some other code, but the script alone can not do that.
Hello when i type the site name in arabic i get this error the (site name is not alphanumeric)
YOu can edit the code, to remove this warning. Please contact me via the COdester site messaging system and I’ll explain.
done !
Direct message sent 5 days ago please need your help
Hi there, the check is done in Configs.php. Remove lines 81 and 82 on that file. Make a backup first. Thanks
Remove these two lines…
} else if (!preg_match("#^[A-Za-z0-9-[\]_+ ]+$#u", $subsitename)) {
Form::setError($field, "Sitename not alphanumeric");Hi Thank you so much its OK now
Does anyone know how I can grab postdata from an extra textfield on my login form from within /admin/Login.php?
Thanks for your wonderful support!!. No errors currently showing in my logs.Should I not update my Xavier package and reinstall before I move on with the project?
Xavier data – User Admin => Current Sessions – Expiry Column
The expiry date is weeks or even /months from the last login date (for Admin & for Users)
Is this normal?
Yes 
A PHP session is destroyed if it times out, however if you are using the Remember setting, it can be set for weeks / months.
Am I not understanding something?
Xavier data – Settings => Session Settings
User Inactivity Timeout – set in minutes
Xavier data – User Admin => Current Sessions – Expiry Column
Expiry column – set as a date (days away from last login)
The confusion I have is minutes versus days.
<Each time I set User Inactivity Timeout in minutes, Expiry column changes to the same number of days.
(e.g. 10 minute change causes 10 day change and 30 minute change produces 30 day change and so on?)
Can you explain why one variable changes the other in this way?
Session settings > user inactivity is when someone logs on, they dont do anything for the time set in the setting, then when they refresh the page after that time, they are logged out. A default installation of PHP will often override this setting anyway, and is usually set at about 20 minutes. The column you see in the Users > Current Sessions dashboard is for when a user ticks, ‘Remember Me’ when they log on. This creates a cookie in their browser that allows them to stay logged on, even if they have 20 minutres inactivity.
But, why does numerical minutes for one produce a equal number of numerical days for the other every time?
(I’m only asking because index.php in admin is still throwing the same error at line 292)
I want to try this script but question is if is it possible to use SMTP for email sending. There is no PHP mail allowed on our domain.
Yes, it uses phpMailer which you can edit with your SMTP details.
I upload missing SMTP.php class and edit mailer.php and set all requirement for SMTP credintials.
//Enable SMTP debugging.
$mail->SMTPDebug = 3;
//Set PHPMailer to use SMTP.
$mail->isSMTP();
//Set SMTP host name
$mail->Host = "*";
//Set this to true if SMTP host requires authentication to send email
$mail->SMTPAuth = true;
//Provide username and password
$mail->Username = "";
$mail->Password = "*";
//If SMTP requires TLS encryption then set it
$mail->SMTPSecure = "tls";
//Set TCP port to connect to
$mail->Port = 587;but when I submit registration form, I got this page
2020-08-12 10:36:14 Connection: opening to smtp.office365.com:587, timeout=300, options=array() 2020-08-12 10:36:14 Connection: opened 2020-08-12 10:36:14 SERVER -> CLIENT: 220 FRYP281CA0013.outlook.office365.com Microsoft ESMTP MAIL Service ready at Wed, 12 Aug 2020 10:36:13 +0000 ... ... ... ... so many other lines of text here! ... ... 2020-08-12 10:36:16 SERVER -> CLIENT: 221 2.0.0 Service closing transmission channel 2020-08-12 10:36:16 Connection: closed
Warning: Cannot modify header information – headers already sent by (output started at /home/www/trueperformance.eu/www/php-login/includes/SMTP.php:277) in /home/www/trueperformance.eu/www/php-login/includes/process.php on line 175
I have my own index.php main page on existing site. I installed your script to /php-login directories. When I put this requirement code on the top of my index, it completelly destroy all my GET and POST variables.
<?php include(“php-login/includes/controller.php”);
Is there a change to help me with basic installation with providing my FTP connection?
Each SMTP host will have different settings / security, so you may need to do some Googling to get PHPMailer working with Office365. However, here are some links that may help..
https://pdhewaju.com.np/2019/03/05/php-mailer-for-office-365/You could try port 25…
https://docs.microsoft.com/en-us/Exchange/mail-flow-best-practices/how-to-set-up-a-multifunction-device-or-application-to-send-email-using-microsoft-365-or-office-365?redirectSourcePath=%252farticle%252fHow-to-set-up-a-multifunction-device-or-application-to-send-email-using-Office-365-69f58e99-c550-4274-ad18-c805d654b4c4 https://social.msdn.microsoft.com/Forums/en-US/home?category=&forum=&filter=&sort=relevancedesc&brandIgnore=true&searchTerm=PHPMailerThanks
Siggles
I’d need to see the code you are using to understand the issue with GET and POST, there is no reason the script should affect those as they work independently. Unless you are submitting a form (logging in for example) with its own set of GET and POST that may be overwriting yours. Send me a message and we can go from there.
it is no problem with sending. credintials for office365 is ok, I have a problem with redirection
Warning: Cannot modify header information – headers already sent by (output started at /home/www/trueperformance.eu/www/php-login/includes/SMTP.php:277) in /home/www/trueperformance.eu/www/php-login/includes/process.php on line 175
That error is because you are writing info to the page before the redirection. It is a common PHP error when you have whitespace or are inputting something to the screen and then trying redirection.
Send me the code in a messgae if you want and I can tell you where you are going wrong.
reformatted for reading
auto install worked great. Only error thrown while testing is in admin index.php. line 292
Xavier code
286 <?php
287 $sql = “SELECT FROM_UNIXTIME(`regdate`, ‘%M, %Y’) AS `date`,
288 COUNT AS `count`
289 FROM `users` GROUP BY `date` ORDER BY `regdate`”;
290
291 $result = $db->prepare($sql);
292(ERROR THROWN) $result->execute(); 293 294 while ($row = $result->fetch()) {
295 $date[] = $row[‘date’];
296 $counter[] = $row[‘count’];
297 }
298 ?>
Error message in cPanel
Syntax error or access violation: 1055 Expression #1 of ORDER BY clause is not in GROUP BY clause and contains nonaggregated column ‘fifthpla_members.users.regdate’ which is not functionally dependent on columns in GROUP BY clause; this is incompatible with sql_mode=only_full_group_by in /home/fifthpla/public_html/admin/index.php:292
Please remove that setting…https://stackoverflow.com/questions/23921117/disable-only-full-group-by
Hey, Been looking at your example. What Hash is used for the password encryption? I’m currently using md5 for a project and I’m unable to change that. Does this support md5 password hash if not would it be possible for you to adjust it so it does for me upon purchase?
Hi can I use this script to handle login for 2 different app? both are on same server but each has it’s own subdomain one is pure php the other is laravel my I dea is if user login in either one it get log in in the other either way
I couldn’t get the users login working and the protection code line
Will need some more info. Where did you go wrong? What error message? Etc? Feel free to contact me on the contact form directly.
Direct message sent
The issue was a PHP error in your own file (incorrect path).
Fixed. Awesome support by your team.
This looks like it might be what I am after.
My question is if I give a user access to 3 groups for example, is there a way of showing them these three groups on their home page? So by way of example I have 4 protected directories. group1 has access to directory 1, group2 – directory2 etc. If a member has access to group 2 and 3 Can I list ONLY the links to these groups on their home page?
Also is there any way to make a membership expire after say 12 months? Perhaps by creating a 12months group and if they are a member of that then using this info to calculate expiry based on their account creation date?Hi easyhr. Thanks for your questions. Anything is possible if you know a bit of PHP. The script protects individual pages, not folders, but you can protect pages per group OR show them to a selection of Groups, depending on how you want to do it. There is no membership system with the script but there is no reason that you couldnt implement it if you know a bit of PHP.
Thanks I have a basic knowledge of PHP but in the absence of any documentation, what variables or would be available to do this? When a user logs in how does the web page know what groups the user belongs to? Is this checked on a page by page basis (if accessing page then check access rights) or it is stored somewhere that can be accessed from any page via a script?
I’d like to assign users to a welcome page with some logic that says if a member of group2 then show the link for group2 page. etc.
Maybe this will help – https://www.angry-frog.com/xavier-demo/documentation/
Hi, can I develop it as SaaS to run my own business
Hi there. The license details are next to the item near where the price is. But it reads:
Regular License Selected $20
Use, by you or one client, in a single end product which end users are not charged for. The total price includes the item price and a buyer fee.
Extended License $105
Use, by you or one client, in a single end product which end users can be charged for. The total price includes the item price and a buyer fee.
Yes, I know that. I am making sure that from your side , can I customize it as saas and run my paid business..
I can’t glean enough info from your short question to truely understand what it is you are trying to do. If it is the backend of your business, then yes, and you only need the regular license. If the script is integral to the software/service you are selling then you need the extended license.
Ok. Thanks
what type of security features have in this script
Can anybody tell me where the change in the code is located that redirects users after they login?
Hi, I am working on a voting php script so can I Integrate with it? For example: if someone click or visit the voting page url, it should show login/signup page then after login we should redirect to the voting page (we should not allow to visit voting page without login). Is it possible using this script?
how can I redirect the user’s homepage to http://www.website.com/ after user login
improvement request : 1/ lack of notification for every save and submit activity; 2/lack of using template
Is there a version with multilingual selection ?
I/m afraid that at the moment, there isnt.
Dear Siggles, I checked the communication between the web user interface and the script, I noted that the password is not obfuscated in any way, the browser sends the following: “username=John&password=doe123&form_submission=login”. Is there a way to avoid to send a readable password to the script? Waiting your answer, Kind regards. Oreste
HI there. There is no way to obfuscate the password with the script currently – although I am sure one oculd be added quite easily, however we would always recommend using https on any site with user logins.
Thanks for the reply
hi ive purchased this and installed it, but i have a problem… when in thee dashboard if i click anything in the top menu, like general setting or registration settings the dashboard just reloads ands the settings dont load….. if i hover over them i can see correct page url showing, but even if i type the url in it takes me to admin/index.php….. do you have any idea why? ... i have everything in a members/admin/ drirectory.
Hi. Can you private message me with a link and I’ll take a look.
hi thanks for the reply.. sadly i only just seen it.. ive used something else now so i will keep yours incase i ever need it for something else and try again then..
