REGISTER CMS
Expand your CMS to include secure user registration with email verification, admin approval and an encrypted data structure - all without a database.
Why CMS Register?
With the CMS Register add-on, users can register themselves and are only activated after approval by the administrator.
The architecture is based on the same security framework as the CMS Admin Tool: AES-GCM encryption, TOTP-2FA, HMAC signatures for tokens, rate limiting and encrypted secret management via volt-secret.php.
Ideal for protected customer areas, editorial access or projects that require maximum security without an SQL database.
New in version 1.3.2
-
Complete user registration with e-mail confirmation and release link
-
Automatic token signing (HMAC-SHA-256) with expiry time (TTL)
-
Admin release with master password and two-factor code (TOTP)
-
Independent use without admin tool possible
-
New dark theme in VOLT look
-
SMTP integration with diagnostic tools (diag_smtp.php, diag_register.php)
-
Improved security through rate limiting, HTTPS check and .htaccess blocks
Included / Features
-
User registration with e-mail verification and admin approval
-
Compatible with VOLT CMS v5+ and VOLT Admin Tool v2+
-
AES-GCM encryption via volt-secret.php (ENC string)
-
HMAC signing for secure one-time links
-
No database backend - completely file-based
-
SMTP e-mail dispatch with SSL/TLS and log files
-
Dark theme interface in VOLT design
-
Rate-limit protection and secure PHP sessions
Installation and use
🔑 Installation
-
Extract the ZIP and upload the folders /auth, /volt-user, /admin/css/register.css and volt-secret.php to Webroot.
-
Enter SMTP access data in mail_config.php.
-
open /auth/register.php in the browser and carry out a test registration.
⚙️ Use
-
User registers → system creates a pending entry.
-
Admin receives email with approval link.
-
After entering the master password and 2FA, the new user is created automatically.
Security:
volt-secret.php is encrypted (AES-GCM) and set to chmod 600.
/volt-user is protected against direct access.
Tokens expire automatically after the expiry time; generic error messages prevent data leaks.
✔ Web designers and agencies that manage customer access or member areas
✔ Projects with login areas without having to rely on external systems
✔ Developers looking for a secure, database-free user registration
FAQ
What does the VOLT Register add-on do?
The add-on extends VOLT CMS with an independent user registration with email verification, admin approval and secure token system. All registrations are encrypted and run completely without a database - 100% file-based, compatible with the VOLT Admin Tool.
How do I install the add-on?
Unzip the ZIP, the folders /auth,/volt-user and /admin/css/register.css and the file volt-secret.php into the Webroot (e.g.public_html) upload. Afterwards /auth/register.php in the browser and SMTP data in mail_config.php enter.
How secure is the Register add-on?
All sensitive processes are encrypted via volt-secret.php(AES-GCM, ENC string). Tokens are created with HMAC-SHA-256 signed, one-time links expire automatically (TTL). Rate limiting,.htaccess-Locking and secure file rights (600) are already preconfigured.
How does the registration process work?
A visitor fills out the form at /auth/register.php off. The system creates a pending entry and sends the admin an approval email. The admin opens the link, confirms with master password + 2FA, and the new user is created automatically.
Which systems is the add-on compatible with?
Developed for VOLT CMS v5+ compatible with the VOLT Admin Tool v2+. Runs on all servers with PHP 8.2+ and activated OpenSSL. Blocs 6+ and Bootstrap 4/5 are fully supported.
Can I use the add-on without the Admin Tool?
Yes, VOLT Register works both independently and in combination with the VOLT Admin Tool. When used together, users are automatically transferred and email assignments are synchronized.
Can I customize the design?
Yes, the styling is in /admin/css/register.css and can be easily customized or replaced with your own theme. The dark theme in the VOLT look is activated by default.
Can I use the add-on more than once?
Yes, the add-on can be used license-free for your own and customer projects. Resale or independent republication is not permitted.
Will I receive updates or support?
Yes, regular updates and direct support via VELUNO. In the event of problems, diagnostic tools (diag_smtp.php,diag_register.php) quickly when analyzing errors.

