1146 comments found.
I’m ending my support because I don’t really need it, it works perfect, I just want to ask you something for a specific use that I have. I want to be able to register users with the same email. Could you give me an idea of where I can modify to achieve it? thanks
Because it always validates showing “User with this email is already registered.”
I need the email field to accept any text or at least accept emails already registered. I hope you can give me some clue, thank you very much
Hey,
Unfortunately that’s not possible without a lot of modifications. Even if you allow storing the same email addresses for multiple accounts, you will need to update the forgot password / password reset flow, including some other parts of the system.
Regards,
Milos
Hello,
First of all, I am aware that the support period is over. If you think you can offer a solution to my problem, I will extend the support period.
Please let me know if you can assist me with the problem I have described below. I will also extend the support period.
I integrated an online pos payment system into this membership system. Then I made online payment pos integration from the bank. Only those who have logged in can access the payment form. I post the parameters requested by the bank to the API address. After the user performs 3D secure verification, I redirect to my member’s profile page.
However, when directed to the profile page of the member after 3D verification, the system automatically logs out of his account.
The reason for this problem is written in the document given by the bank. In the document given by the bank, it says that there is a problem called “SameSite” in Chrome version 80 and above browsers. The explanation given is as follows:
When you POST the parameters to the bank, Chrome will create a Cookie for you. Regardless of whether it is Session information or Id information, if you want to access this information on the 3Ds return. When the customer presses the “Make Payment” button and is directed to the Bank Page for 3D Secure, the Domain will now change, and when the transaction is returned to you as POST, your site will query the Cookie or Session values in order to reach the required session or basket information. If the cookie is not set to “sameSite=None” and secure, Chrome will not allow these cookies to be read. It will not be able to complete the necessary update and payment registration processes or it will be directed to the error page.
If you are making payment, update and confirm transactions at the callBackUrl address with cookie or Session access, you must define the cookie as SameSite=None.
Sample code for PHP;
// Definition of Example for PHP 7.3 // Set a cross-site cookie for third-party contexts setcookie(‘cross-site-cookie’, ‘bar’, [‘samesite’ => ‘None’, ‘secure’ => true]); //For Versions Before 7.3 header(‘Set-Cookie: cross-site-cookie=bar; SameSite=None; Secure’); // setcookie(“Key”, “value”, “expire time”, “path; samesite=None”, domain, true, true);
Determining Key Value Values For the key value values related to the cookie, for example, PHP defines it as PHPSESSID as standard, if you have not used it as a standard, enter your own key value. value as $_COOKIE[‘PHPSESSID’]; you must mark SameSite=None by specifying the value.
Yes, I have a problem like this. If you can guide me on how to make these edits on the script side, I will extend my support period.
Kind regards.
Hey,
Thanks for reaching out but, unfortunately, things like this are not part of the support that I provide for this script.
Kind regards,
Milos
Hi! I’m confused by roles. Is there a code snippet I will use to protect pages from from access and this snippet uses the role to identify who is permitted? Because by creating a role in the admin area there are no options. Also when you click anywhere on the roles table cell it attempts to delete the role which is a bug I guess as there is a delete button for that. Thanks
Hey,
Always check the documentation first: https://milos.support-hub.io/articles/advanced-security-protect-your-pages
that doesn’t deal with roles as per my question
The documentation article shows you how to use roles in your code to prevent access to specific pages depending on the role of the currently authenticated user.
I don’t see that you have purchased AS at all from this account but, if you used some other account to purchase it, and if you think that there is a bug in the system or you have any further questions, please submit a ticket on https://milos.support-hub.io and I’ll get back to you as soon as possible.
Regards,
Milos
we must be seeing different things because the snippet you are showing me checks only for logged in or logged out. It does not check to see if a specific role has permission to access a page. An example is “free content for free user who is logged in” vs “paid content for paid user who is logged in”. Two different roles which have different permissions when accessing the same page, both are logged in.
(These are are pre purchase questions to see if your code is a better replacement for mine.) Thanks.
Just browse through the documentation, everything is already there: https://milos.support-hub.io/knowledgebase/2
I guess that the page that you are looking for is this one then: https://milos.support-hub.io/articles/authorization-in-advanced-security
Hi loshMIS.
Are you thinking about expanding the functionality of the system with two-step security authentication?
Hey,
It’s not on my roadmap at the moment for this product, but might consider adding it at some point in the future. If you need a more robust system, with 2FA built-in, consider using my other product named Vanguard, built on top of the Laravel PHP framework.
Regards,
Milos
I’ll stick with the Advanced version 
I have one more question. How can I activate the remember function when logging in (does a check box appear or does the user stay logged in automatically?) Thanks.
Regards, fzoltan
Hey,
Unfortunately, the AS script does not have such functionality out of the box, so you will have to implement it on your own.
Regards,
Milos
Hello loshMiS,
If I have a lockscreen modal or form, how can I validate the password with the saved in DB?
Hey,
Your support for this item has expired. if you have any questions, please extend the support and submit a ticket on https://milos.support-hub.io and I’ll get back to you as soon as possible.
Regards,
Milos
Hi, sorry. I already refresh the support.
I just need the form to validate the password if “X” user lock their session, like a function or similar I think..
Best Regards!
Replied to your support ticket.
hello, how to send secure curl PHP using this advance security php web?
Hey,
Sending curl requests has nothing to do with this script… You will send them in the same way you do in any other PHP based application. You can also use Guzzle if you want to for example.
ok understand.. how if we want to make secure shopping cart with this script?
You can build any application you want on top of the AS script, since you get the whole source code.
The script itself will allow you to have users with different roles and ability for those users to register, login and access to the pages that they have access to. Everything else you will have to build on your own.
Regards,
Milos
Can I protect pages created in languages other than PHP, like VueJS, Angular etc
Hey,
It really depends on how those pages are created. This is a PHP based script, so you must have PHP running, either for the whole app or just for the API for example.
Now, if you have a VueJS single page application, which communicates with the API that’s written in PHP, then you can add AS for the API level. You will still have to update the VueJs logic separately though on what happens if user does not have access to a specific page.
Is there a way to change the sorting of the users data table at users.php?
Hey, or course. As you know, you have the whole source code so you can customize the app however you want.
Btw, you support for this item has expired. If you need any help or have any further questions, please extend the support and submit a ticket on https://milos.support-hub.io
Regards,
Milos
hi can i connect login by sso microsoft azure on this system
Hey,
With a bit of configuration you can add the SSO for Azure. The script is using https://hybridauth.github.io/ package for this purpose, so if you are familiar with it you should not have any issues with the configuration.
Regards,
Milos
I followed your Documentation and I have managed to Install. After everything is ready, do we have to manually delete the install folder ? If we leave it there I think if someone wants to access the /install again….they can mess things up.
Hey,
Yes, you should remove the “install” folder if you don’t need it anymore.
Also, make sure that you change the permissions for ASEngine folder so it’s not writable by the script anymore. You can find the note about it at the bottom of https://milos.support-hub.io/articles/advanced-security-installaton#step-5-complete article and on the final step of the installation wizard.
Hi Milos, I have a pre sale question, I am really interested to this script, been checking the comments to see if there is any question about: 1. How to implement to integrate with published PHP scrip based website or 2. can I make this script as stand-alone and link to wordpress call to action signup button to redirect to this. (or any better way to do so?) 3. can we add extra feature to the user dashport to be able to see like add fun Payment record or order/service update process detail & any other like order detail/invoices. (can we add from super admin dashboard? or do I need to edit on the script which I am not really good at coding)
Do you have any youtube or video guide for implementation of this script as I mention on my question above?
Thanks so much.
Hey,
1. Please check the following documentation article: https://milos.support-hub.io/articles/advanced-security-protect-your-pages
2. Unfortunately this won’t work without some modifications as the script is not designed to be used in combination with wordpress.
3. You get the whole source code of the script, so yo can customize it however you want. However, keep in mind that you must be familiar with PHP, JavaScript, HTML and CSS since the only way to add features or customize the way script works is by editing the code.
I don’t have any YouTube video guides, but I’d recommend you to check the documentation since a lot of things are explained there: https://milos.support-hub.io/knowledgebase/2
Regards, Milos
I hope there’s no framework on this one?
I bought your Vanguard years ago but I could never integrate it in my project because your Laravel is incompatible with my basic MVC system
Hey,
As you can see from the description, AS is using pure PHP, without any frameworks.
Regards,
Milos
Hi, That would be great to have extra CRUD functions that allow 2 DB action like these:
Select / Insert
Select / Update
Select / Delete
You should put https as default for callback because facebook always requires https define(‘SOCIAL_CALLBACK_URI’, “https:
Hi! What is the upgrade procedure? Your documentation only has a list of changed files, but replacing them doesn’t work (the install procedure is restarted)
Hey,
If you have changed the files then you need to update them one by one. If not, you can overwrite all the files and make sure that you don’t accidentally remove the ASEngine/ASConfig.php file while doing it.
Btw, your support for this item has expired. If you have any questions in the future, please extend support and create a ticket at https://milos.support-hub.io
Regards,
Milos
hi, the project have actualy over 878 files, but could you guide me to select the only usefull file needed to keep operational de login system, we no deed social login like facebook pay pal or mail and some other features.
will be kind of you just helpme with this, unfortunately my web space account is quiet close to get the limit.
thanks for your time and attention,,
Hey,
All files are required for the app to work properly. Most likely some of them can be deleted, especially from the “vendor” folder, but I cannot guarantee that the app will work as expected.
Btw, your support for this item has expired. If you have any questions in the future, please extend the support and create a ticket on https://milos.support-hub.io
Regards,
Milos
Hi How can i get AdminPages. To this page get Access only with UserRole Admin?
Hey,
You need to log in as admin. The default credentials after installation are:
username: admin
password: admin123
Regards,
Milos
Hi! I’m having this error, what could be causing it? Everything worked properly, until this error suddenly appeared without making any changes.
Deprecated: Return type of Pimple\Container::offsetExists($id) should either be compatible with ArrayAccess::offsetExists(mixed $offset): bool, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice in /www/webvol24/ku/4bx3hhuh5kwq23e/ime_sajta/vendor/pimple/pimple/src/Pimple/Container.phpon line 133
Hey,
Most likely you are running an older version of AS on newer version of PHP, or something like that.
Anyway, your support for this item has expired. If you have any other questions please renew the support and create a ticket on https://milos.support-hub.io
Regards, Milos
hi I have a course website, I need a login system..can I redirect the user to my website after successful login? also do you have any other script that has login and subscription?
Hey,
AS is meant to be integrated into the codebase of your own application, so If your course website is built in PHP and if you are familiar with PHP, MySQL and JavaScript, you can use AS to add the login functionality to your script.
As you can see on my profile, I also have Vanguard, which has much more features and stuff, but if you are not familiar with Laravel PHP framework, then Vanguard is probably not a good choice.
Regards,
Milos
Hi, My course website is designed in HTML & CSS only.
I have experience in PHP, so to clarify would it be possible to integrate it with my own html project?
Hey,
Assuming that you will convert your website to PHP (just by changing the extension of your files to .php) then yes, it will be possible to integrate AS with your website.
You won’t be able to leave the files as .html files since you need to include PHP code into each page that should be protected.
Regards,
Milos
hii, btw do you have plane to make custome captcha?
Hey,
Not sure that I fully understand the question. What kind of captcha you are referring to?
captcha like this : https://ibb.co/GtHXN6X
Hey,
Unfortunately no, I don’t have any plans on adding such captcha. If you need it I’d recommend you go with Google’s reCAPTCHA, or something like that.
Regards,
Milos
