White-Label Partner Manual & Architecture Guide
You now own a complete, multi-tiered digital software business. Instead of spending tens of thousands of dollars and months of development, this package gives you an enterprise-grade bio-link, creator storefront, and micro-site platform ready to launch under your own brand name, custom domain, and customized pricing tiers.
1 Why Are There 3 Panels? (The 3 Pillars)
Understanding the division of responsibilities across the product ecosystem.
A serious, high-margin software business requires more than just a single frontend application. To scale safely, protect your intellectual property, and automate license fulfillment upon purchase, the system is separated into three distinct, specialized pillars:
1. BioScript Control Center
Master Command HubThe top-level authority dashboard. Tracks all client agencies, global licenses, revenue ledgers, domain blacklists, and hosts the emergency remote kill-switch to shut down fraudulent installations instantly.
2. BioScript License Hub
License Distribution ServerAutomates license creation when a customer buys on your store (WooCommerce / Stripe / PayPal). Tracks domain activations, enforces hardware ID locks, and serves authenticated product zip downloads.
3. BioScript SaaS
End-User Creator PlatformThe actual customer-facing platform. Includes 50 bespoke themes, 30+ interactive blocks, visual drag-and-drop builder, instant checkout store, lead magnet capture, and custom domain mapping.
2 How to Sell This (The 2 Proven Business Models)
Choose between recurring monthly subscriptions or high-ticket lifetime software licenses.
Run Your Own Linktree / Beacons Competitor
You host BioScript SaaS on your main brand domain (e.g., yourbrand.com). You do not distribute the code. Instead, you sell monthly or annual subscriptions to creators.
- Free Tier: 1 Page, 15 Blocks, standard themes.
- Creator Pro ($9/mo): 5 Pages, Custom Domain with SSL, 0% fee storefront.
- Agency ($29/mo): Unlimited pages, unlimited domains, priority support.
Sell Self-Hosted Software with License Keys
You package BioScript SaaS as a downloadable digital asset and sell it on WooCommerce or Shopify for a one-time fee (e.g., $97 to $497).
- Customer completes purchase on your store.
- Your License Hub auto-issues an encrypted license key.
- Customer installs on their server; key is validated against your License Hub.
3 Server Requirements & Prerequisites
Ensuring your web hosting environment is properly configured.
4 Recommended Domain Layout
How to partition your domains across subdomains for maximum stability.
| Component | Suggested Subdomain / URL | Folder in Release Package | Description |
|---|---|---|---|
| Pillar 1: Control Center | https://master.yourdomain.com | BioScript Control Center/ | Master authority CRM & license kill-switch |
| Pillar 2: License Hub | https://licensing.yourdomain.com | BioScript License Hub/ | Key generator & verification endpoint for clients |
| Pillar 3: BioScript SaaS | https://yourdomain.com | BioScript SaaS/ | Live multi-user creator portal & public bio-links |
| Marketing Landing Page | https://get.yourdomain.com | BioScript/ | High-converting static landing page with video & pricing |
5 Installing Pillar 1: BioScript Control Center
Deploying the Master Authority & Agency Management Console.
BioScript Control Center/ to your server directory (e.g. master.yourdomain.com).
master_auth_db) and user in your hosting panel (cPanel, hPanel, Plesk).
https://master.yourdomain.com/install.php in your web browser. Follow the on-screen wizard to configure your admin password.
config.php in the Control Center directory:
define('MASTER_DB_HOST', 'localhost');
define('MASTER_DB_NAME', 'master_auth_db');
define('MASTER_DB_USER', 'your_db_username');
define('MASTER_DB_PASS', 'your_db_password');
define('MASTER_DB_PORT', 3306);
// Set your private master secret key (used to generate auth tokens)
define('MASTER_AUTH_KEY', 'GENERATE_A_SECURE_64_CHAR_SECRET_KEY_HERE');
6 Installing Pillar 2: BioScript License Hub
Configuring the Automated License Server & WooCommerce Key Delivery.
BioScript License Hub/ to your license subdomain (e.g., licensing.yourdomain.com).
https://licensing.yourdomain.com/install.php to seed the database tables.
BioScript License Hub/config.php and set the cryptographic secret and master authority link:
// 1. Authorized Domain (CORS & Webhooks)
define('BLS_AUTHORIZED_ORIGIN', 'https://licensing.yourdomain.com');
define('BLS_BRAND_NAME', 'Your Brand License Hub');
// 2. Upstream Master Authority Connection
define('MASTER_AUTH_URL', 'https://master.yourdomain.com');
// 3. Shared Cryptographic Handshake Key
// CRITICAL: Must be EXACTLY IDENTICAL to WL_SHARED_SECRET in BioScript SaaS!
define('LS_SHARED_SECRET', '57e1547ecd7cf9e0681b8ab40c83e3007f9336251d0884abfe60196c9e75f0af');
define('LICENSE_SHARED_SECRET', '57e1547ecd7cf9e0681b8ab40c83e3007f9336251d0884abfe60196c9e75f0af');
// 4. WooCommerce Automation Integration
define('BLS_WOOCOMMERCE_URL', 'https://store.yourdomain.com');
define('BLS_WEBHOOK_SECRET', 'your_woocommerce_webhook_secret_key');
// 5. Database Connection
define('DB_HOST', 'localhost');
define('DB_NAME', 'license_hub_db');
define('DB_USER', 'your_db_username');
define('DB_PASS', 'your_db_password');
define('DB_PORT', 3306);
Connecting WooCommerce for 100% Automated Key Delivery
Whenever a customer buys a software license on WooCommerce, you can configure your store to notify your License Hub automatically:
- In WordPress admin, go to WooCommerce → Settings → Advanced → Webhooks.
- Click Add Webhook and configure:
- Name: BioScript Key Automation
- Status: Active
- Topic: Order completed (or
Order created) - Delivery URL:
https://licensing.yourdomain.com/api/webhook_wc.php - Secret: The exact value set in
BLS_WEBHOOK_SECRETin config.php. - API Version: WP REST API Integration v3
7 Installing Pillar 3: BioScript SaaS
Configuring client verification, product branding, and routing.
Before shipping a package to a client or launching on your live domain, edit white-label.config.php in the root of the SaaS application. This tells BioScript SaaS where to check its license:
<?php
// 1. License Server URL (Point to your License Hub without trailing slash)
define('WL_LICENSE_SERVER_URL', 'https://licensing.yourdomain.com');
// 2. Shared Cryptographic Secret
// CRITICAL: MUST exactly match LS_SHARED_SECRET in BioScript License Hub config.php!
define('WL_SHARED_SECRET', '57e1547ecd7cf9e0681b8ab40c83e3007f9336251d0884abfe60196c9e75f0af');
// 3. Your Product Branding
define('WL_PRODUCT_NAME', 'BioScript');
define('WL_SUPPORT_EMAIL', '[email protected]');
define('WL_SUPPORT_URL', 'https://yourdomain.com/support');
// 4. Grace Period (0 = Strict zero-trust live check; 3 = Allow 3 days offline before re-checking)
define('WL_GRACE_DAYS', 0);
// 5. Stealth Mode (hides version strings and internal signatures)
define('WL_STEALTH_MODE', false);
CRITICAL: Uploading .htaccess to Hostinger / cPanel public_html
Because .htaccess begins with a dot, operating systems and FTP clients treat it as a hidden system file. If it is omitted during FTP upload, requests to clean URLs like https://bioport.in/@username or /login will fail with a host 404 error page.
Ensure .htaccess is uploaded directly to your document root (public_html/.htaccess) with these rules:
DirectoryIndex index.php home.php
RewriteEngine On
RewriteBase /
# Allow existing physical files and directories
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
# Explicit Named System Routes
RewriteRule ^(login|signup|onboarding|verify-email|reset-password|forgot-password|terms|privacy|refund|aup|eula|logout)/?$ index.php [L,QSA]
# Route Linktree-style /@handle or clean /handle directly to index.php
RewriteRule ^@?([a-zA-Z0-9_\.\-]+)/?$ index.php?u=$1 [L,QSA]
# Universal fallback for all dynamic routes
RewriteRule ^(.*)$ index.php [L,QSA]
ErrorDocument 404 /index.php
8 The Cryptographic Licensing Handshake
How client installations securely authenticate without exposing credentials.
Challenge Nonce
SaaS client requests a single-use random cryptographic challenge nonce from License Hub.
HMAC Signing
Client signs JSON payload (Key, Domain, HWID, Nonce) using SHA256 and the shared secret.
Hub Validation
License Hub verifies signature, checks database status, and verifies domain usage limit.
Local Caching
On success, validation is cached locally for 1 hour in data/.license_cache for speed.
9 Master Integration Reference Sheet
Cross-reference table for every matching key and URL.
| Setting Name | Defined In | Must Match In | Description |
|---|---|---|---|
| HMAC Shared Secret | BioScript License Hub/config.php → LS_SHARED_SECRET | BioScript SaaS/white-label.config.php → WL_SHARED_SECRET | Must be 100% identical 64-character random string |
| License Server URL | N/A (Your License Hub domain) | BioScript SaaS/white-label.config.php → WL_LICENSE_SERVER_URL | Full URL without trailing slash (e.g. https://licensing.brand.com) |
| Master Authority URL | Control Center URL | BioScript License Hub/config.php → MASTER_AUTH_URL | Connects License Hub upstream to Master Authority |
| WooCommerce Webhook Secret | WooCommerce Webhook Settings | BioScript License Hub/config.php → BLS_WEBHOOK_SECRET | Authenticates automated purchase notifications from your store |
| Web Server Rewrites | BioScript SaaS/.htaccess | public_html/.htaccess on server | Required on Apache/LiteSpeed for /@username URLs |
10 Final Launch & Verification Checklist
Perform these checks before inviting paying users or clients.