Secure Admin Access

Protect your operations, not just the login page.

This admin panel now uses session-based authentication, throttled sign-in attempts, session regeneration, and admin-only route protection.

Admin-only authorization Protected routes require an active admin account before any dashboard data is shown.
Throttled login attempts Repeated failed sign-ins are rate limited to slow brute-force attempts.
Session hardening Sessions are regenerated on login and invalidated on logout.

Admin Sign In

Use your administrator email and password to continue to the control panel.

First-time setup: create an admin with php artisan admin:create-user "Admin" "admin@example.com" "YourStrongPass123!"