🚀 AA-Register

The Ultimate, Database-Free aaPanel Registration Portal

Developed by Andy Goldau | © 2026 PanelLayer (Subdomain LTD) & GoMaKe UG

📦 Product Page: AA-Register  |  🧪 Live Demo: Demo  |  🌐 Project: PanelLayer

---

AA-Register is an incredibly robust, secure, and fully-featured self-service registration portal built specifically for aaPanel. Designed from the ground up for maximum security, beautiful UI/UX, and GDPR compliance, it requires zero database setup (100% flat-file logic) and handles website creation flawlessly through the native aaPanel API.

When a user registers, AA-Register automatically creates:

• 🌐 A PHP Website on your aaPanel server
• 📁 An FTP Account (optional, configurable)
• 🗄️ A MySQL Database (optional, configurable)

DISCLAIMER: This software is provided "as is" without any warranty of any kind. AA-Register is an independent software solution and is not affiliated with, endorsed by, or sponsored by the aaPanel team or its affiliates.

---

✨ Enterprise-Grade Features

🛡️ Unrivaled Security & Privacy

• k-Anonymity Password Checks: Integrates the Have I Been Pwned API directly in the client's browser using the Web Crypto API. Only the first 5 characters of a SHA-1 hash are transmitted—your plaintext password never leaves your browser.
• Advanced Rate-Limiting (Token Bucket): Fully protects the aaPanel API against brute-force and DDoS spam attacks using a highly efficient, session-independent Token Bucket algorithm based on cryptographically hashed IPs.
• No Database Required: Works strictly with local flat files (JSON/PHP). All sensitive log files (audit.log.php, used_codes.php) are completely locked down and unreadable from the web.
• Strict Content Security Policy (CSP): Ships with hardened HTTP response headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) out of the box, mitigating XSS and iframe-injection attacks.

🌐 Internationalization & UX

• 6 Supported Languages: Comes translated into 6 languages (English, German, French, Traditional Chinese, Spanish, Portuguese).
• Native aaPanel Design: Clean, modern interface styled directly after the official aaPanel login screen.
• Live Password Checklist: A real-time, side-by-side interactive UI element that instantly visually validates password complexity requirements.
• Fail-open DNS MX Checks: Automatically verifies the existence of mail servers (MX records) for the email domains entered during registration to prevent bot signups, featuring built-in caching.

🤖 Ultimate Anti-Bot Protection

Forget spam. We support natively integrated setups for:

• hCaptcha
• reCAPTCHA (Google)
• Cloudflare Turnstile
• Altcha (Proof-of-Work, 100% GDPR compliant)
• MTCaptcha

🎟️ Exclusive Access Modes

• Invite-Only Mode: Optionally lock your registration portal so only users with pre-generated, single-use, or multi-use invitation codes can join your platform.

---

🚀 Installation & Setup

Prerequisites

• PHP 8.x web server (Apache, Nginx, LiteSpeed)
• aaPanel server with the API enabled

1. Enable the aaPanel API

In your aaPanel dashboard:

1. Go to Settings → API
2. Enable the API
3. ⚠️ Add the IP address of the server where AA-Register is running to the IP Whitelist – this is mandatory; all API calls from unlisted IPs are rejected
4. Copy the API Secret Key

2. Upload & Configure

1. Upload the contents to any PHP 8.x web directory on any server
2. Open config.php and configure:
   • AA_HOST – your aaPanel server URL (e.g. https://panel.yourdomain.com)
   • AA_PORT – aaPanel port (default: 7800)
   • AA_API_KEY – the API Secret Key from aaPanel Settings
   • AA_PHP_VERSION – PHP version for new sites (e.g. '82')
   • AA_CREATE_FTP / AA_CREATE_DB – whether to create FTP/DB accounts
   • CAPTCHA provider keys
   • Security toggles (HIBP, Invite-Mode, Audit Logging)

3. Generate a Salt

Replace the default LOG_IP_SALT in config.php with a random 32-character string:

openssl rand -hex 16

4. Done

The system automatically creates and protects the necessary data/ and logs/ folders upon the first registration.

---

📄 License & Attribution

This project is licensed under the MIT License.

Developer: Andy Goldau
Copyright: © 2026 AA-Register by PanelLayer, a brand of Subdomain LTD and managed on behalf of GoMaKe UG. All rights reserved.
Product Page: https://aa-register.panellayer.com/
Live Demo: https://demo.aa-register.panellayer.com/
Project: https://panellayer.com/

The above copyright notice, the developer attribution, and the permission notice must be included in all copies or substantial portions of the Software.