White Label Investment Platform

PLATFORM ADMIN - FULL FUNCTION LIST (TOP TO BOTTOM) Generated: 2026-05-11 ============================================================ 1) LOGIN & ACCESS GATEWAY ============================================================ 1.1 Admin Login (admin/login.php) - Fields: - Username - Password - Super Admin PIN (6 digits, only required for Super Admin except BGS) - Secret word (only needed when IP is not whitelisted) - Security behavior: - Rate limiting on failed attempts - Login success/failure logging - Geolocation capture (when browser allows) - IP extraction from Cloudflare/forwarded headers/remote address - Super Admin 2FA PIN: - Default PIN: 052026 (changeable in Security) - IP whitelist fallback: - If IP not allowed, secret word can bypass - Current secret word: Rochelle - Special account behavior: - Username bgs (break-glass) can bypass PIN requirement 1.2 Session & Permission Engine - Permission check runs on each module - Role-based access control supports: - Super Admin (all) - Admin - Investment Manager - Finance Staff - Grants Manager - Shareholder - Client / Beneficiary - Read Only ============================================================ 2) SIDEBAR NAVIGATION (TOP TO BOTTOM) ============================================================ 2.1 Dashboard 2.2 Portfolio 2.3 Stocks Register 2.4 Investor Investments 2.5 Governance (hover group) - Board / Shareholders - Board of Directors - Advisors 2.6 Finance (hover group) - Cashflow - Budget - Banking & Key Holders - Grants & Charities 2.7 Access (hover group) - Users & Roles - Security - Login Logs - Change Password 2.8 Tools (hover group) - Reports - Global Search - Audit Log - Recycle Bin - Data Tools 2.9 Logout ============================================================ 3) DASHBOARD (admin/dashboard.php) ============================================================ 3.1 KPI and summary blocks - Total Portfolio Value - Total Stock Current Value (currency-converted) - Portfolio + Stocks Total (combined) - Live BTC Rate (USD) - Monthly Cashflow - Grant Reserve - Failed Logins - Pending Stock Updates 3.2 Activity Highlights - Failed logins count - Recent audit entries count - Pending stock monthly updates count 3.3 Quick Actions - Direct links to Portfolio, Stocks, Cashflow, Audit Log 3.4 System Health - Data file existence/read/write checks - Healthy vs issue status table 3.5 Pending tasks panel - Shows tickers needing current month stock history updates 3.6 Recent edits panel - Latest audit events table ============================================================ 4) PORTFOLIO (admin/portfolio.php) ============================================================ 4.1 Add/Edit Portfolio Item - Fields: - Date - Category (Shares, Property, Interest, Metals, Crypto, Other) - Asset Class - Description - Value (NZD base input) - Allocation % - Status - Save creates or updates item 4.2 Delete Portfolio Item - Soft delete behavior: - Item moved to Recycle Bin - Audit log entry recorded 4.3 Allocation by Category - Visual chart with category split percentages 4.4 Totals - Total Portfolio - Total Stocks (current, converted) - Portfolio + Stocks combined total 4.5 Register tools - Search/filter by date range and text - Category filter - Currency display selector (NZD/USD/AUD/CAD/IDR/SGD) - CSV and Excel export with selected currencies ============================================================ 5) STOCKS REGISTER (admin/stocks.php) ============================================================ 5.1 Add/Edit Stock - Fields: - Date - Company Name - Ticker - Market - No. of Shares - Price - Currency (NZD, USD, AUD, CAD, IDR, SGD, BTC) - Total Value (auto from shares x price; can be overridden) - Dividend % - Current Value (auto from dividend % if left blank) - Status - Auto-calc behavior in form: - Shares x Price => Total Value - Total Value + Dividend % => Current Value (if empty) 5.2 Delete Stock - Soft delete to Recycle Bin - Audit log entry 5.3 Monthly Current Value History - Per stock monthly snapshots - Add/update by month - Fields: - Month - Book value - Current value - Notes - Delete history row supported 5.4 Performance Snapshot - Bar chart showing change vs prior month or book value 5.5 Totals and valuation blocks - Total Book Value (converted) - Total Current Value (converted) - Portfolio + Stocks combined (converted) 5.6 Register tools - Search/filter by date range and text - Market filter - Currency display selector (NZD/USD/AUD/CAD/IDR/SGD) - CSV and Excel export with selected currencies ============================================================ 6) INVESTOR INVESTMENTS (admin/investor-investments.php) ============================================================ 6.1 Add/Edit investment item - Fields: - Date - Investment title - Category - Summary - Status (Active/Monitored/Review/Private) - Visibility label 6.2 Delete item - Removes item from register 6.3 Drag-and-drop ordering - Drag rows to set public display order - Saves order for public Investors page 6.4 Register tools - Search/filter/date range - CSV and Excel export ============================================================ 7) GOVERNANCE MODULES ============================================================ 7.1 Board / Shareholders (admin/board-shareholders.php) - Add/edit/delete entries - Drag order support for display sequence - Typical fields: - Date, Name, Type, Role, Ownership/Holding, Status, Notes - Search/filter and CSV/Excel export 7.2 Board of Directors (admin/board-directors.php) - Add/edit/delete directors - Fields include: - Date, Name, Title, Committee, Status, Notes - Search/filter and CSV/Excel export 7.3 Advisors (admin/advisors.php) - Add/edit/delete advisors - Fields include: - Date, Name, Specialty, Contact, Status, Notes - Search/filter and CSV/Excel export ============================================================ 8) FINANCE MODULES ============================================================ 8.1 Cashflow (admin/cashflow.php) - Add/edit/delete entries - Fields: - Date, Type (Income/Expense), Category, Description, Amount, Status - Totals: - Total Income, Total Expenses, Net Cashflow - Search/filter and CSV/Excel export with selected currencies 8.2 Budget (admin/budget.php) - Add/edit/delete budget items - Fields: - Date, Category, Description, Amount, Currency, Period, Status, Notes - Filtered total - Search/filter and CSV/Excel export with selected currencies 8.3 Banking & Key Holders (admin/banking.php) - Add/edit/delete items - Types include: - Bank Account, Term Deposit, Loan, Overdraft, Credit Card, Debit Card, Crypto Account, Other Key Holder, Other - Fields: - Date, Type, Provider, Account/Reference, Currency, Value/Limit, Status, Key Holder, Notes - Search/filter and CSV/Excel export with selected currencies 8.4 Grants & Charities (admin/grants-charities.php) - Add/edit/delete grants/charity records - Fields: - Date, Name, Type, Purpose, Amount, Status - Totals and program counts - Search/filter and CSV/Excel export with selected currencies ============================================================ 9) ACCESS MODULES ============================================================ 9.1 Users & Roles (admin/users-roles.php) - Add/edit/delete users - Fields: - Date added - Full Name - Username - Email - Password + confirm (hashed, never shown) - Role - Access Level - Status - Support function: - Super Admin can use Login As for support sessions - Break-glass protection: - Protected user handling for BGS account restrictions 9.2 Security (admin/security.php) - Super Admin only - Features: - Change 6-digit Super Admin PIN - Manage IP whitelist - Secret word fallback visibility (Rochelle) - Shows current client IP and whitelist count 9.3 Login Logs (admin/login-logs.php) - Full login audit table includes: - Time, event type, actor/admin, target user, status, reason - IP, city/region/country, coordinates, geo source - Rows-per-page selector - Search/filter and CSV/Excel export 9.4 Change Password (admin/change-password.php) - Logged-in user password update flow - Fields: - Current password - New password - Confirm new password ============================================================ 10) TOOLS MODULES ============================================================ 10.1 Reports (admin/reports.php) - Add/Edit report metadata: - Date, Title, Type, Period, Prepared by, Status, File link - Rich content editor: - Bold/italic/underline - Left/center/right/justify - Bullets/numbering - Insert table (rows/columns) - Save report content as formatted HTML - Report register with: - Edit - PDF output link - Delete - Search/filter and CSV/Excel export 10.2 Report PDF View (admin/report-pdf.php) - Print-ready report page - Preserves rich formatting and tables from editor - Button: Print / Save as PDF 10.3 Global Search (admin/global-search.php) - Search across modules/data sets - Filters and pagination - Rows-per-page control - Results table by module/record/summary 10.4 Audit Log (admin/audit-log.php) - Tracks create/update/delete and admin post actions - Table columns include: - Time, user, role, module, action, record id, IP, meta summary - Search/filter and CSV/Excel export 10.5 Recycle Bin (admin/recycle-bin.php) - Shows soft-deleted records - Super Admin can restore item to original module dataset 10.6 Data Tools (admin/data-tools.php) - Backup & Restore: - Download Backup ZIP (dataset files) - Restore from Backup ZIP - Data export/import: - Export selected dataset to .xls - Import CSV/Excel-compatible file into selected dataset ============================================================ 11) CURRENCY & RATE FEATURES IN ADMIN ============================================================ 11.1 Currency display selector - Available display currencies: - NZD, USD, AUD, CAD, IDR, SGD - Can select one or multiple for view/export 11.2 Conversion source behavior - FX endpoint uses XE-based conversion parsing with fallback values - BTC handling: - BTC values default to USD conversion when no specific currency selected for source context - BTC live USD rate is cached and reused for conversions 11.3 Export behavior - CSV and Excel exports reflect currently selected currency display set where configured ============================================================ 12) LOGGING, AUDIT, AND DATA RETENTION ============================================================ 12.1 Login log retention - Keeps latest login events (capped) 12.2 Audit log retention - Keeps latest audit events (capped) 12.3 Recycle bin retention - Stores deleted records for restore workflow 12.4 Data storage model - JSON file-based storage in /bline_site/data/ - No SQL dependency required for current Admin module operations ============================================================ 13) SUPPORT / OPERATIONAL FUNCTIONS ============================================================ 13.1 Login As support mode - Super Admin may impersonate target users where permitted - Support reason and event details logged 13.2 Session logout - Logout endpoint available from sidebar 13.3 NZ timezone context - Admin timestamps centered on Pacific/Auckland context in logs/reports ============================================================ 14) IMPORTANT NOTES FOR CLIENT HANDOVER ============================================================ - Some functions are role-limited and may not appear/operate for non-Super Admin roles. - Break-glass and security controls are intentionally protected from standard admins. - Rich report editor is now the recommended method for structured PDF-quality reports. - Data Tools import works best with clean CSV format for reliability. END OF LIST ============================================================ 15) NEW UPDATE - REPORT EMAIL DISTRIBUTION (2026-05-11) ============================================================ 15.1 Email Lists in Admin Reports - Added 3 managed lists: - Board of Directors - Shareholders - Clients - Admin can save emails per list (one email per line). - Emails are validated and de-duplicated. 15.2 Send Report by Email (inside Admin -> Reports) - Email sender: admin@PLATFORM.ltd - Can send by: - Selecting one or more full lists (Send to list) - Selecting one or more individual emails from all lists - Using both methods together - Compose fields: - Subject - Message - Add file/report source: - Select one or more reports from Reports available list - Selected reports are included as clickable report links in email - If a report has a valid local file path in File Link, it is attached automatically - Sends individually to each chosen recipient. - Logs send attempt in audit log with counts. 15.3 Operational note for future updates - Admin_Functions_Full_List.txt will be updated for all future Admin function changes. ============================================================ 16) NEW UPDATE - WHITE-LABEL COPY / ACTIVATION / DEMO FLOW (2026-05-12) ============================================================ 16.1 White-label copy package - Created a deployable copy with branding replaced: - Replaced mentions of PLATFORM/Bottomline with "Company Name" - Replaced logos with placeholder image text: "LOGO HERE" 16.2 Activation / License model - Added one-time domain activation gate before normal app usage. - Activation key must be signed and domain-bound. - Stores activation state server-side in JSON. - Activation page: /activate.php - Non-demo installations remain locked until valid activation. 16.3 Signed license verification - Verifies signed key using public key file: - license_public.pem - Checks domain match and optional expiry in signed payload. 16.4 Auto initialize on activation - On successful activation: - Initializes required JSON data files automatically - Seeds runtime files and default structures for full operation 16.5 Update engine for future auto-updates - Included updater framework: - setup/update.php - setup/update_config.json - Supports update mode by: - Git branch pull (if .git exists) - Package URL zip extraction - Can be run from cron for automated update flow. 16.6 Demo mode deployment behavior - Added demo mode config (domain-targeted deployment): - data/demo_mode.json - Demo mode features: - Auto-login as demo Super Admin (no manual credential input) - Login page jumps directly to dashboard - Data reset from defaults on each new session to keep demo ephemeral - Super Admin PIN set as 123456 for demo profile context 16.7 Delivery artifacts - Upload-ready copy folder and ZIP package prepared locally. - Deployed demo instance to dev.beklen.id document root. ============================================================ 17) NEW UPDATE - WHITE-LABEL ENHANCEMENTS (2026-05-12) ============================================================ 17.1 Branding correction and content updates - Corrected naming from "Company Name" to "Company Name" across package and demo. - Replaced all public contact mentions: - admin@PLATFORM.ltd -> email@yourcompany.com 17.2 Deployment path correction - Removed white-label app from dev domain root. - Deployed demo app under subpath: - /IP - Demo URL path: - https://dev.beklen.id/IP/ 17.3 Site editing from Admin (white-label/demo only) - Added new Admin menu link: - Edit Site (below Tools) - New page: admin/site-editor.php - Features: - Edit all public page content (raw page HTML overrides) - Upload/replace logo image - Change theme colors (brand/secondary/gold) - Toggle private mode (public pages redirect to admin login) 17.4 Private site mode - Added setting to make public site private. - When enabled, public pages require admin session access. 17.5 Demo session behavior - Demo auto-login remains enabled at /IP/admin/login.php - Demo resets data from defaults per new session for ephemeral usage. ============================================================ 18) NEW UPDATE - EDIT SITE UX + CLOCK/CURRENCY CONTROLS (2026-05-12) ============================================================ 18.1 Edit Site no-code mode improved - Removed primary raw-code editing workflow from the page UI. - Visual Builder now auto-loads selected page in iframe editor. - Users edit text directly on page blocks/cards and save visually. 18.2 Admin clock timezone control - Added timezone input in Edit Site settings. - Admin header clock now uses configured timezone value. 18.3 Admin currency toggle control - Added enable/disable currency checkboxes in Edit Site settings. - Header currency buttons now follow enabled currency list. - FX/rate line and conversions update based on enabled currencies. 19) LICENSE MANAGER (admin/license-manager.php) - Added License Manager under Tools in Admin. - Purpose: - Issue exact-domain server-side signed licenses for white-label deployments. - Manage client records tied to issued licenses. - Revoke active licenses when a domain must be reissued. - Key controls: - Generate server-side signing key pair (Super Admin only). - Add/edit client register (name, email, WhatsApp, notes). - Issue license with: - Exact domain (no wildcard, no subdomain substitutions) - Optional expiry - Max activations value - Registry table with status and revoke action. - Enforcement model: - License remains domain-locked (exact match). - Moving to another server is allowed if domain stays identical. - Changing to subdomain/new domain requires a new license.