Xavier – PHP登录脚本和用户管理管理面板

Xavier PHP 登录脚本是一个用户管理登录脚本 带有后端管理面板，允许您通过在页面顶部放置几行代码来轻松保护网页或网页中的内容。

该脚本可以很容易地放入现有网站中，允许您通过在页面顶部添加一行 PHP 代码来保护页面。您还可以保护页面的各个部分。保护您的网页或内容部分，具体取决于您的用户是登录还是注销，或者他们是否是用户组的成员。或者，根据您是否以管理员身份登录来保护您的页面。脚本中包含的示例页面和脚本（登录、注册、忘记密码等）可以自定义以在您自己的网站中使用，也可以整齐地适应您现有的网站。

管理面板允许您管理您的用户并更改各种站点设置。作为管理员，您可以添加、编辑、禁止或删除用户或用户组。它基于 Bootstrap 构建，并且高度可定制。

主要特点

可以放入现有网站或“开箱即用”使用。
通过登录状态、群组状态和/或群组级别状态保护您网站的页面或页面部分。
可选的 Captcha（和其他故障保护）以避免自动机器人的注册。
用户使用 PHP 会话登录，在页面之间导航并保持登录状态。
完整的伐木设施。
查看单个登录会话和详细信息。粒度信息。
具有可选级别的用户组。
将普通用户提升为具有一些管理员功能的管理员。
处于非活动状态后用户超时。
Unique User Home Pages（唯一用户主页）。唯一用户主页）。
用户可以更改配置文件设置、更改密码、电子邮件地址。
忘记密码功能。
可选的管理员或电子邮件激活。
可选的欢迎电子邮件。
管理员可以添加、激活、禁止、编辑或删除用户。
查看和显示活动用户。
记录用户的注册日期、上次登录日期和 IP 地址。
记录有史以来最多的在线用户。
密码使用 BCRYPT 单独进行哈希和加盐处理。
更改最小/最大用户名或密码长度。
请在注册时确认密码和电子邮件地址。
使用 Bootstrap CSS 的可自定义管理员皮肤
关闭/打开来自同一帐户的多个登录。
还有更多……

演示

尝试在线演示这里在 Angry Frog 网站上。以管理员身份登录，用户名为：admin/密码：P4ssw0rd

支持

支持由作者提供。如果您在使用脚本时遇到任何问题，请单击 support 选项卡并给我们发送电子邮件，或者您可以在评论部分发布任何一般查询或观察结果。脚本中还提供了详细的说明。

更新

版本 3.2.4

[Fixed] PHP 8.2: Added ` to MySQL Reserved Words
[Updated] Functions.php in Includes folder (added ` to every reference of group or groups table names)
[Updated] adminproces.php in Includes folder (added ` to every reference of group or groups table names)

版本 3.2.3

[Fixed] PHP 8.2: Dynamic Properties are deprecated - declared properties at top of classes
[Updated] Registration.php (declared properties at top of class)
[Updated] Session.php (declared properties at top of class)
[Updated] Adminfunctions.php (declared properties at top of class)
[Updated] Login.php (declared properties at top of class)

版本 3.2.1

[Fixed] Updated login issue - changed session.php file

第 3.2 节

[Fixed] Updated IPV6 issue in database, increased varchar to 49 characters.
[Fixed] Issue with User Groups. Updated editGroup function in adminprocess.php file.
[Updated] Session.php - added : to binded values to work with PHP v8 (eg, WHERE :session_id)
[Fixed] $this->session->updateActiveUsers($this->username) to ($this->id) in Login.php
[Fixed] Chart on front page of Admin Panel shows correctly.
[Updated] to jQuery 3.6.0

版本 3.1.5

[Changes] Added PHPMailer so that mail handling is improved.
[Updated] Added PHPMailer.php and Exception.php to Admin/Includes folder
[Updated] Edited/Updated Mailer.php page

第 3.1 节

[Fixed] Updated index.php sql query at bottom of page (around line 287) to prevent error caused when sql mode  ONLY_FULL_GROUP_BY is turned on.
[Fixed] Updated Functions.php page (line 301) to allow isMemberOfGroup function to work.
[Fixed] Please add default value of 0 to timestamp column in user_sessions table to prevent error caused when SQL STRICT mode is turned on.

版本 3.0

[Changes] Re-design of how User Sessions are handled.
[Changes] Improved 'Remember Me' cookie handling - More secure
[Changes] Improved User Password Reset feature - More secure
[Changes] Multiple login from one account enabled - turn on/off
[Updated] New tables in database - 'user_session' and 'user_temp'
[Updated] Change to Users table - removed 'actkey' and 'userid' columns
[Updated] Change to Configurations table - added 'ALLOW_MULTI_LOGONS' and 'PERSIST_NOT_EXPIRE' columns
[Updated] Introduced Google reCaptcha
[Fixed] Admin User Creation - better error handling of form fields

版本 2.5

[Changes] Updated hash algorithm to BCRYPT
[Updated] Multiple file changes to accomodate new password hash
[Updated] Removed references to usersalt and dropped column from Users table
[Updated] Changed password hashing function to password_hash and password verify functions.
[Updated] Tidied up code.

版本 2.4.1

[fixed] Problem not being able to change user password
[Changes] Banned User is now kicked from session whilst logged on
[Updated] Changed admin/login.php page to make it clearer that it is only for admin logins

版本 2.4

[Changes] Allow logon with e-mail address
[Changes] No longer allowed duplicate email addresses - option removed from admin panel (and database)
[Changes] Admin Registration Summary page gives better error info on unsuccessful admin registration
[Updated] Updated Database - removed ALLOW_DUPE_EMAIL column from configuration table

第 2.3 节

[Updated] - Added SHA256 hash algorithm for hashing user passwords.

版本 2.2.1

[fixed] Could not change user details correctly when 'Allow Duplicate Email' is Off
[Updated] admin/includes/Adminfunctions.php - Updated adminEditAccount function

版本 2.2.0

Added Logging and other small fixes.

版本 2.1.0

Added Unique User Home Pages - Pages users are sent to after initial login. This can be set by the admin or individually for each user.

第 2 节

New Release - complete update and redesign of the admin GUI with lots of improvements. Folder structure changes. No database changes.

1.1.2 版

Fixed isMemberOfGroup function
Change where site redirects to after login. <strong>Database update is required!);</strong> Run this SQL on your database - INSERT INTO `configuration` (`config_name`, `config_value`) VALUES ('login_page', 'index.php');

版本 1.1.1

Fixed Bug - removing user from all groups.

版本 1.1.0

Added User Groups.
Made improvements to the banning system.
Added ability to promote regular users to admin, who then have limited admin permissions.
Fixed some bugs.