A complete browser-game site: upload a game as a ZIP, publish it, and visitors play at once. Categories, search, likes, favourites, moderated comments, ad slots, a blog and a full admin panel are included.
Weak uploads, inflated counters and spam comments. Arcade Portal is built so a stranger cannot break the site, fake the numbers or fill it with junk.
Only web file types, no scripts, no path tricks. A bad ZIP never replaces a working game.
One play per visitor per game per day and one like per visitor, enforced by unique database keys.
New comments wait for approval, links are limited, and blocked members cannot post.
No FTP, no editing files, no developer needed.
Drop in an HTML5 build with an index.html, or embed an https game.
Title, summary, Markdown description, category, tags and a thumbnail.
Go live now, set a date, or feature it on the home page.
Press Play, fullscreen, like it, save it and comment.
Built around the real work of a portal owner: adding games, keeping the community tidy and earning from the traffic.
Drop in an HTML5 build. It is checked, unpacked and played in a locked frame. Or embed a game hosted elsewhere.
Visitors press Play and the game starts in the page, with fullscreen, a controls note and related games.
A visitor counts once per game per day for plays and once for likes. Only a hash is stored, never an IP address.
Search title, summary or tag, sort by newest, most played or most liked, with clean URLs and a sitemap.
Visitors join free, save favourite games, see what they played last and comment. They never reach the admin.
New comments wait for approval. Visitors report a broken game and editors resolve it from one list.
Banner or ad-network code in four places, with start and end dates and a master switch. Admins only.
Live games, plays over 14 days, most played, comments waiting and open reports on one screen.
Every rule is enforced in code and covered by automated tests.
Games, categories, tags, comments, reports, members, blog posts, pages and ads, with a dashboard that shows what needs attention today.
The whole public site is responsive, and games with touch controls play right in the browser.
Everyone sees exactly what they need, and nothing they should not.
Settings, ads, editor logins and every record.
Adds games, moderates comments, writes posts and pages.
Saves favourites, sees recent games and comments.
Browses, searches and plays without an account.
Two admin roles, locked game frames and rate limits on every public action. No default passwords.
Editors cannot change settings, ads or logins, or delete records. Any other role is locked out.
Only web file types, no scripts, no path tricks. A bad ZIP never replaces a working game.
Uploaded games cannot read the site cookies. Serve builds from another domain for more isolation.
Per-IP limits, a comment link limit, a flood limit per member and moderation on by default.
Plays and likes use a salted hash of the connection, or of the member id when signed in.
Descriptions, pages and posts drop raw HTML and unsafe links. Only admins can paste ad code.
| Role | Games | Comments | Members | Blog and pages | Ads | Settings | Logins | Delete |
|---|---|---|---|---|---|---|---|---|
| Admin | ||||||||
| Editor | – | – | – | – |
Laravel 13 and Filament 5 with Blade and Tailwind 4 for the public site. Docker image included. No obfuscated code.
PHP 8.3+, policies, throttling
Livewire resources and widgets
The portal visitors see
MariaDB and SQLite also work
HTTPS behind Cloudflare, VPS guide
Uploads, counting, moderation
CLAUDE.md and AGENTS.md describe the architecture, conventions and how to run the tests, so an AI assistant can add a game field, a report or a new ad placement without breaking the rules.
# Project overview Arcade Portal: Laravel 13 + Filament 5. Uploads app/Services/BuildInstaller.php Counters app/Services/GameService.php Roles admin, staff (policies in app/Policies) $ php artisan test 72 passed
One end product per licence, full source, and honest limits so there are no surprises.
The things buyers ask most.
HTML5 games exported as static files: Construct, Phaser, Godot web export, Unity WebGL or plain JavaScript. The ZIP needs an index.html and only web file types.
Uploads are checked (no scripts, no unsafe paths), unpacked atomically and played in a locked frame. For stronger isolation, serve builds from a separate domain.
Yes. Ad slots hold a banner or ad-network code in four places, with dates and a master switch. There is no built-in ad network or payment system.
Yes. Eight small original games with their source and artwork are included for use inside your licensed product.
Docker (docker compose up -d, MySQL included, HTTPS behind Cloudflare) or any VPS with PHP 8.3 and MySQL. Both are documented step by step in HowToSetup.md.
The Vibe96 Standard License: one end product, for example one game site. Each extra client install needs its own licence, and the source cannot be resold.
Play the demo games, open the admin and add your own. No sign-up, nothing to install.
One click signs you in. Demo data resets every few hours.