Advanced Login Area Designer-Integrator

Definition


   Advanced Login Area Designer-Integrator (ALADIN) - is a web-based user access management tool. ALADIN consists of three tools - visual directories password protection regardless of directory conten,  member management and total user access management. ALADIN supports manual (administrative) and automated (online) user registration regimes. ALADIN allows you to create a login (member) area for your web site within minutes.



Total features


- The program consists of two components:
   A web-based administrative control panel;
   User area - forms and modules; via this area users interact with your web site;
- no programming skills are required to install the program;
- no installation required, no learning required, take and use at once;
- individual on-line training for everybody;
- clear and intuitive web interface;
- visual password protection and access control;



Main Functions


    - ALADIN:
    - allows you to manage password protection of files and folders and instantly create a login (member) area;
    - provides manual and automated (online) user registration, authentication and user access control;
    - allows you to manage email messages, send notifications and confirmation emails (optional);
    - supports manual (administrative) and automated (online) user management.


   You need to create only one link to the registration form and ALADIN will be your invisible user access control agent collecting user data and managing user access.



Supporting environment


- pre-sale consultations via email form processing;
- on-line documentation;
- on-line documentation and software updates;
- 24/7 email support;
- minor new versions free for customers;
- training system available 24 hours a day;
- minor customization for a small fee;
- flexible refund policy for unsatisfied customers;



Main features


   ALADIN provides a Web-based administrative control panel ( graphical user web interface). Our Web-based Administrative Control Panel automatically generates a tree image for all your directories. Using only your web browser, you will be able to apply password protection, multilevel access management, user account management, modify program settings and customize email messages .

   Graphical user web interface. With our graphical user web interface you don't have to learn Apache access directives or perform any programming. Our unique web interface makes it easy to manage user access to your protected folders and files. You work with the standard tree image of your folders and files and our easy to use tables and forms.

    One-Click Password Protection. By looking at the tree image, you have an easy to understand overview of your file and folder protection. To protect folders or files, click on the folder or file within the tree image and the folder or file will be protected immediately. To allow/deny user access, click on the folder/file image to toggle protection on or off.

   Folders and Files Protection regardless of content. ALADIN uses industry standard basic authentication method to provide reliability and the control of user access for your folders and files regardless of content - text files with articles or news, photos, video, digital products etc.

   Automatically generates or updates the critical .htaccess-htpasswd access control files. ALADIN provides the easy to use graphical interface and then automatically modifies the important control files -.htaccess-htpasswd . No need to become an Apache security expert! Our program already understands Apache directives and takes your security requests and automatically generates or updates the critical .htaccess-htpasswd access control files according to your instructions.

    Login area, Member Area in minutes. All you have to do is create a link to a registration form within your web site. With our web-based administrative control panel you will be able to create a login area, members only area consisting of protected directories and files. Aladin automatically generates Registration Forms for this area (areas). All you have to do is create a link to a registration form within your web site. Users are registered using a registration form. ALADIN automatically checks user data, verifies the user's email address and logs the users folder/file access time and date. Email notification is a programmable on/off feature at your option.

    Multiple Protected Areas. Multilevel access to areas and directories. With Aladin you will be able to create single or multiple Member Area. For example, you create one Member Area only for dealers, other - for customers. Other example. You create different photo albums: for visitors, friends, children...etc.

    Simply select copy and save your custom template. The Administrative Control Panel allows you to create email templates for all program events - user registration and user registration with confirmation etc.. You can also send email messages manually or automatically. Using the Control Panel, the administrator creates email templates. Simply select copy and save your custom template.

    User Registration Options. Our program supports several user registration scenarios - user gets instant access; with email notification; with email confirmation. For the highest level of security you can have the administrator, or site owner confirm registration and user access. If you have created an email template for the purpose of user registration, then the corresponding methods will work. All you have to do is enable or disable the registration method of your choice.

    Automated backup solution will make your data base more reliable. You don't need to worry about data safety and reliability, our program automatically keeps backup copies. They can be restored easily through the control panel. You can also review registration history.

    Ease of use. ALADIN is very easy to set-up and use within minutes. Gain access to ALADIN's interface using the administrator's username/password then fill-in the easy to understand form fields. That's it! You know have the peace of mind and security you have been looking for.

   All Aladin forms such as Registration Forms, Personal Data Forms, Forgotten Password Form etc. may be customised to integrate seamlessly with your own web pages.



Control panel


   The control panel provides the following menu options:

   >setup:     - first you need to set up the program - simply fill out form fields with administrator username/password;

   >protection:     - this menu allows you to protect a  new directory/file and include it in the login_area.

   You always see what you are doing on the catalogue tree image on the right frame of the screen. So, it is easy to set up protection: choose the folder/file icon on the catalogue tree, click on it and then on the button labelled "Set protection" and the folder/file will be instantly protected.

   You can create a login (member) area containing an unlimited number of directories. A protected directory is included into the login area by default. Also you can protect individual directories not included into the login area or create additional protected areas. Later you can allow access to the login area in full (>registration) or you can allow access to the separate protected directories (>specify access).

   >registration:     - This menu allows the administrator to register new users manually. The new user gets access to the login_area.

   You need to create only one link to connect the registration form to your web site (see documentation). Users will be registered by completing and submitting this form (automated on-line registration). Registered users gain access to the protected login_area.

   You can replace this form with a form of your own provided you do not change any of the form parameters: action, input etc (see documentation) since these parameters pass data to the  ALADIN database.

   If you have created other protected areas (separate protected directories), you can register users for these areas - click only on the link list of protected areas (directories):   , select the protected area (directory), then click on the appropriate link.

   ALADIN is your invisible user access control agent. It'll collect user data and manage user access. Click on the the link online modelling:, to check up it.

   >view users:     - here you can view the full list of registered users, update details and delete users; also you can click on the username-link to update user personal data.

   >specify access:     - this menu allows manual user access control over separate directories.

   There are applied tasks, when you need to control user access to the separate directories, but not only to the protected area. This is additional useful feature of our program.

   The program provides also the same visual graphical web interface - click only on the catalogue tree icon and the appropriate folder or file will be opened/closed for user access.

   >view access:     - total user access information can be displayed at any time and in a different forms. If user access conditions are changed, corresponding access control files will be automatically updated immediately (see access anatomy).

    Click on the link   access testing :     This allows you to check user access to ALADIN's experimental directories. You can test all properties of the program, using these directories.




User registration scenarios


   ALADIN supports several registration scenarioswhich, as a rule, satisfy our customers' needs.

   Manual method. Web site administrator can register users manually (>registration). User will gain access to the login_area. If you have created other protected areas (directories), you can register users to access these by clicking: list of protected areas (directories)::

   Automated method.  You need to make only one link from your web site to the registration form . Users will be registered immediately they submit this form (automated on-line registration). You can replace this form with your own provided you do not change any of the form parameters: action, input etc (see documentation, Login area creation steps).

    With ALADIN you'll be able implement also the following registration scenarios:

      Simple registration. User is registered and gains access to the protected area immediately. User personal data may be enabled or not thru the control panel (control panel for full featured version).

      Simple registration with email notification User is registered and gains access to the protected area immediately. User personal data may be enabled or not thru the control panel (contol panel for full featured version).

      Registration with email address confirmation. User receives email notification with a link to follow to complete registration. If user clicks the link, he will be registered and email notification will be sent with username and password.

      Registration with admin approval. Web site admin receives email notification of a request to register. Admin can allow or deny user access. If admin clicks the link allow, the user will be registered and email notification will be sent with username and password. Otherwise, user receives notification email that describes the reason etc.

   You can turn off the forms for personal data or email confirmation. You can examine and check up automated registration features in the menu >registration >  online modeling::ALADIN can support other user registration and authentication scenarios.



Who uses the ALADIN script?


   "…All sounds workable and I'm greatly relieved to hear there is no PHP programming skills needed. Seems that you kept us non-techs in mind when creating your products."
   Marshall Kusumoto

   If your web site's pages contain news, photo, video, digital product etc. and you would like to administrate your pages protection and access control, but you don't want spent your time for learning Apache access modes, program is exactly for you - it "knows" Apache basic authentication methods.

   You will operate only with clearly visible graphical objects - with tables, catalogue tree image etc. and program will act according to your data manipulations. You may protect separate directories or create a protected area consisting of some directories.

   "...I think it's a wonderful idea to make GUI (graphical user interface) programs for people like me, who can design great web pages but don't know how to program outside of html, and I hope you create many more applications like that. I wish you success."
   Rebecca Manak

   If you are web site administrator or web developer, program saves your time. You don't need to write or rewrite Apache directives and basic authentication access files - .htaccess/htpasswd. When new protected directory/file appears or new user is registered, all file will be automatically updated at once. You may focus you efforts on the tasks of web site design and content, but not on the programming.

   If you a programmer or web developer, who have many clients and will need multiple copies of ALADIN one for each client, you can purchase World Wide or ISP license (see ordering information). It gives you a discount of 35-55% for every copy.

   There are some number of ISP companies that have purchased program for their clients. Having program they provide convenient .htaccess automotive generation tool, but not only that. They can install program for every client's domain and typical password protection and user access control problem will be resolved for the most number of clients by intelligent and attractive way.

   Our program has the wide range of applications. The simple problem of login-area construction can be resolved, but also more complex access control schemes can be created.
   Program allows create a number of different protected areas. One protected area may be as members area with automated free registration, another protected area may be like area with paid access, where web site administrator assigns access by manual way.
   On the one hand you can combine on-line registration (sign up) and manual access control administration, and on the other hand you can turn off optional user data or email address confirmation functions



Typical Client Problems


   Here are some extracts from letters from our clients in which they describe their requirements being addressed by our programs. Probably you will find here much in common with your problems

   "This is a great program- I hope our ISP company will like & in the future be able to implement also all your programs. Thank you for your help!"

   "We have a new Japanese language learning software written in Java. In addition to CDs, we were thinking we might offer web subscription access to our product. We'd need a user/password/subscription management, hosting, etc. and I thought you might have some solutions?"

   "Need to secure access to a software store, want to make it membership based, not paid membership, but need users to register, get registration approval before they can enter store, look at prices and or place orders."

   "I am looking for to create an login area. Below are the features I am looking for.
1. Users will create there own user name and password - and it is authenticated through email
2. Administration can protect directories not just pages.
3. Administration can define what areas each specific user has access to. (I want to have two levels within the login. All users will have access to the general passworded area, but only specific users that admin sets have access to other directories, is that possible? If not its not needed, but it would be a plus.)"

   "..we want to put online version of the school's newsletter on the web site, but need to restrict access to it for the safety of our students. your program looks excellent for our needs. But we need to have people sign up. then they respond to the email, then we check the email against a list of our students' parents and guardians, before we give final approval. Can we turn off auto approval until we can verify that the email address corresponds to addresses of our student's parents?"

   "I am looking for something to password protect a site or directory. We have a list of email address in our mailing list database. We will be sending these customers a newsletter that will ask them to login to a website to access more information and special deals. We would like to password protect this site. We will be emailing the login name and password to the customers. Customers will all use the same login name and password."

   "I have clients, that want to protect CAD drawings. They want to assign client user names and passwords to be able to download the drawings. They need a simple windows admin panel to assign user names and passwords, as well as, restrict access to files, etc. Thanks!"

   "I want to password protect certain files or directories on my website. Each user's password would take them to their own section of the site. In other words, from the login screen, every user would go to a different age depending upon the login user/password. your program seems to be closest to my needs."

   "I want to offer a member's area where my members are able to download special stitch charts for free. I'm really looking forward to have program installed."

   "Im considering the purchase of your programs for my website which is currently being developed. Before I do however, I need to know whether this product will do what I need for it to do in a easy non-technical manner which non-tech people like myself can handle. All sounds workable and I'm greatly relieved to hear there is no PHP programming skills needed.
   Seems that you kept us non-techs in mind when creating your products."

   "I need to assign Password and Username to my clients. This means, visitors can not register on-line to gain access into the site.
Once a client has used my assigned Password & User name and has gained entry into the site. The client should be able to access (1) various articles, (2) information and (3) summary of that clients sales activities, the later of course can not be accessible by other clients."

   "If it is about the members signing themselves up, I prefer not to use that. That is an area for members that have paid. I assign access for users that have paid."

   "I want to give my clients an area of their own they can login to and view their project information. For example, I only want 'Client A' to be able to login to 'Client A's' page not any other client. All clients will have their own protected page. Thanks for your help. At this point I do not know PHP."

   "All sounds workable and I'm greatly relieved to hear there is no PHP programming skills needed. Seems that you kept us non-techs in mind when creating your products."

   "This does allow me to add "members", and the feature that I found appealing was the ability of members to register themselves using the email verification. This would provide me with a method to guarantee that my students would provide me with a valid (working) email address."

   "I am creating a members only area for an amateur radio club in our area. I plan on having the club database online as well as early posting of newsletters etc."

   "I'm interested in having you install this on our server asap. We are setting up some online backup routines for our clients and we needed some type of file access control. Your programs looked like a nice application. To be sure its installed properly we would like to have you set it up if possible."



Directory layout


   As a rule your host-computer catalogue tree with ALADIN directories has typical layout.

   aladin                                                      
   index.html                                               /entry to your web site   
   login-exp-area                                       /experimental directory
   other-web-directories      

   protected_web_directory01                  / protected directory
      file_1
      .htaccess

   protected_web_directory02                  / protected directory may contain sub directories
      .htaccess
      file_1

   With ALADIN you can password protect directories, subdirectories or files. Click only on the file or directory icon and it will be protected.



Integration into website


   What does integration mean? It means ALADIN forms adapted to your website design will appear as a part of your website. Of course you may use these forms "out of the box" (not adapted to website design) immediately the program has been set up and directories have been protected.

   Aladin integration forms and pages:
/aladin-m/my_form_register_login_area.php users are registered by using this form; they register their username and password;
/aladin-m/my_form_personal_login_area.php form with user personal data (optional);
/aladin-m/aladin_welcome_page.php page with message: "User is successfully registered…";
/aladin-m/au_form_pass_forgot.php forgotten password form;
/aladin-m/send_new_pass_inform.php page with message: "New password has been sent to user address...";
/aladin-m/send_mail_inform.php page with message: "Email containing the link has been sent to
to user (admin) address to confirm registration...";
/pg_al/rejection.htm page with message: "You are not authorized to view this resource...";
   

   You need create links from your web pages to the ALADIN forms and if you wish you can modify their design to fit in with your website style.

   1. First, in the point menu >protection you must protect directories included into login area (members area) . Area name is login_area by default. Login area may consist of one or more directories. You should provide a link from your pages to the registration form as follows:

    /aladin-m/my_form_register_login_area.php?areaname=login_area .

   If you have created a login area with a different name (or you have created additional protected areas for other user groups), then you need create link like this:

    /aladin-m/my_form_register_Area_Name.php?areaname=Area_Name,
where Area_Name is the name of the login area you have created.

    You can change the form design or replace this form with your own design but leave all form parameters constant: action, input etc.
Also you may also wish to adjust the design of the form which collects personal data:

    /aladin-m/my_form_personal_login_area.php

    2. You need create a link from your web site pages to the protected page(s) of your login area.
When user clicks the link, a login form comes up.

    3. If you wish to use the "forgotten password" feature for members who forget their password, then you'll need create link from your web site pages to the form:

    /aladin-m/au_form_pass_forgot.php
Again you may wish to modify this form to match your own web site design.

    4. You will also need to amend the following pages which send messages to your users:

    /aladin-m/aladin_welcome_page.php
    /aladin-m/send_new_pass_inform.php
    /aladin-m/send_mail_inform.php (only for registration method with user or admin confirmation).

Live examples:

   Here are some web sites which have been protected using ALADIN:

  eBizHelpWorld, USA, Pennsylvania http://www.ebizhelpworld.com  
  Metrocrest Hospital Authority, USA,  TX, http://www.mhatx.org  
  Elmira Country Club, USA, NY http://www.elmiracountryclub.com/html/home.html  
  The Yacht Club at Sister Bay, USA, Wisconsin,    http://www.ycsb.com  
  COX REALTY PANAMA , PANAMA , http://www.coxrealtypanama.com  
  G2 Secure Staff, USA, TX, http://www.g2securestaff.com  


   Program settings. Automated backup


 

   The program determines settings values by default immediately after installation
   The administrator will be able determine other program settings:
       - backup copying parameters;
       - new server admin address  (will be embedded in email parameter from);
       - the number of rows in the displayed tables;
       - whether the form with personal data is enabled or not;

   The program automatically creates a database backup copy every time the program starts. If the program is interrupted or data is missed or deteriorated (disintegrated), the administrator can see this. In this case the administrator can select one of the backup copies to become the current database. He can keep track the registration history throughout a period that he had defined to recover accidentally lost or removed data .

   The administrator can set up the following backup copying parameters in the menu program settings:
      - expiration period for backup copies (days);
      - expiration period for backup copies (minutes), by default 1444.
   The administrator can select backup copy date out of a list. Click on the "Set up" button, the program will operate with this copy for all program states.

   The program scans all back up copies and deletes all expired copies (if "life cycle" > N days*1444 then backup copy is deleted). For example, if days = 1, minutes=1444, then this copy will be saved for 24 hours. If days=1, minutes=1, then new copy will be saved for every system entry and the expired copy will be deleted.

    If the current database is damaged, you can replace the current database by the one from the list of backup copies.
    You can use this method only for a deteriorated, disintegrated database!

   In this way, selecting different dates, you will be able also view the registration history and recover accidentally removed data.
   For the every new program start the current database is recovered.



Notification email settings


   Template characteristics

   There are several program events when the administrator or program sends a notification email to a newly registered user or to the current client to inform about his access status:
   - administrator registers new user manually;
   - automated user registration;
   - administrator changes user password;
   - user changes his password;
   - administrator forbids user access;
   - administrator rejects user account;
   - administrator sends email to the individual client;
   - administrator sends email to all clients.
   A number of events can be changed, but this approach to the problem meets all needs. Program modules can be quite easily updated to respond to new events. You define the full list of possible events and adapt them to the program modules, you'll make up the whole complete client access management system.

   This part of the software is intended to create email templates and set up characteristics (parameters) to inform about program events.
   Template characteristics accepted in ALADIN are as follows:
   - email template number is assigned automatically by the program;
   - email subject;
   - email message;
   - email message version, emails with the same subject can have different text details;
   - email type of operation-event (administrator selects from listed options);
   - email template default sign, if value "yes", then this template will be used automatically (ALADIN automatically sends email).
   The current version of the program processes only three events:
   - administrator registers new user by manual way;
   - automated user registration;
   - administrator sends email to all clients.
   Automated email will be sent only for the events "administrator registers new user manually" and "automated user registration".

   Several different templates may correspond to the one event. Only one template will be utilized by the program to send a message automatically. The administrator needs fill in some form fields to set the template for automatic sending.
   New templates are saved in a database (file). This database is created automatically, when the administrator creates the first template or sends the first message manually. The list of templates will be displayed in the right frame of the screen after clicking on the link [template::].
   When you click on the link template in the right frame, template characteristics will appear at the left frame of the screen. You can update all parameters and create a new template based on the existing one. The new updated template will be saved if you have changed any of the characteristics - event, subject, message version.

   Two methods of template creation

   You can create a new template for automated or (and) manual notification in advance, when you set up program parameters (immediately after installation or later) in the menu "Setting up"; click on the button "Email templates creation" or "Send message all clients". Here you will be able create templates or update existing templates

   If you had not created templates in advance, you can do it when you register a new user manually; after successful manual registration, the program suggests you send a message to the  newly registered user; the message is sent and the new template is saved in the database automatically; later you can use one of the templates from the database to update it and send it next time; the template will be saved if you have changed any of the characteristics - event, subject, message version.

   If, first, you had created a template for manual user registration, then you can use this template also for automated user registration, if you change only the "type of operation-event" and "template default sign" to "yes".
   If you had created templates with automated email sending, then messages will be sent automatically for appropriate events - "administrator registers user manually" or "automated user registration".
   Otherwise, for the case of manual registration, the program will suggest you send message you want. Manually you can send any message regardless of it status email template default sign - automatically or manually).
   ALADIN doesn't keep track of parameter's correctness. For example, if you are creating a message for all clients, ALADIN doesn't match error if you type - email template default sign="yes".

   ALADIN replaces the following template's internal parameters by the appropriate values:
      - &&username - username;
      - &&password - not encrypted password;
      - &&areaname - the name of protected area;
      - &&firstname - user first name;
      - &&lastname - user last name.
   It's your own choice whether to include these parameters or not.

   Template examples

   1. Program event - administrator registers new user manually

   Hello! &&firstname &&lastname!
   You have been successfully registered!
   You gain an access to the Diofants &&areaname
   http://www.diofant.com/downloads/aladin-2.2.zip
   You can log in with:
   Username=&&username;
   Password=&&password

   Best regards
   Alex Kolder
   Diofant Project Manager

   2. Program event - automated user registration

   Hello! &&firstname &&lastname!
   You have been successfully registered!
   You gain an access to the Diofants &&areaname
   You can log in with:
   Username=&&username;
   Password=&&password

   Best regards
   Alex Kolder
   Diofant Project Manager




Ordering information


   You can purchase a license and install the program yourself, or we can install it for you. We can also help with integration of the program with your web site. We'll carefully examine your problem and adapt the program for your web site. ALADIN will be completely integrated with your web site and will solve your access control problems while remaining invisible to your visitors.

   If you a programmer or web developer, who has many clients, and you need multiple copies of ALADIN, one for each client, you can purchase a World Wide or ISP license (see ordering information). It gives you a discount of 35-55% on every copy.

   You may order Diofant products on the site.  [ordering information::].