5 Support questions or comments

• 
  1 day ago
  zaryov Purchased

  XSS VULNERABILITY FOUND!
  Replicate:
  - Sign up for news letter
  - Use script tags as name
  - Once admin opens their Newsletter page, script executes.
  I can show you on your demo.
• View 2 more replies
• 
  1 day ago
  NextMAS Author

  Thanks for informing.
  I have used Rakit Validation for validation and I missed the point that it doesn't sanitize inputs. I will consider it and clean the input entered by user.
  
  Thanks!
  
• 
  1 day ago
  NextMAS Author

  I uploaded the patch. And it will be published by tomorrow.
  Thanks.
• 
  1 day ago
  zaryov Purchased

  Perfect! Thanks! Also, few questions,
  1. What file do I edit to change the Gemini prompt? And Pexels search prompt?
  2. Where do I change the fake view count of posts? Can I change it to display true view count? Some are weird displayed like 0.83K views
  3. Where do I configure mail settings for contact form? Emails don't seem to go through
  
  Further minor issues and feature requests:
  4. Sitemap date sets 1970 as the year for lastmod
  5. Add captcha for admin sign in to prevent password brute forcing
  6. Add read and respond options on Contact Mails, rightnow it just shows partial snippets
  
  I'm still doing further testing, but other than what I have mentioned so far, this is a pretty clean and stable script! Well done
• 
  1 day ago
  zaryov Purchased

  (Also add captcha for newsletter and contact form)
• 
  1 day ago
  NextMAS Author

  Thanks again for the detailed feedback — really appreciate it!
  
  1. You can edit the Gemini and Pexels prompt in controllers/Blog.php. I’ll add a custom prompt option in the next update.
  2. View counts can be changed in views/home.php, views/list.php, and views/read.php. I’ll improve the formatting and add real view support soon.
  3. It uses PHP's mail() function — make sure it's enabled. I’ll add SMTP option later.
  4. Noted about the sitemap date — will fix that.
  5. CAPTCHA for admin login will be added.
  6. Contact form will get full read/reply features in the next update.
  7. Will include captcha in every necessary page.
  
  This is the first stable launch (v1), mainly to get it out early. The next polished update is planned for 20 July.
  
  Let me know if you find anything else!

• 
  1 week ago
  zaryov Purchased

  Any plans to add an option for ChatGPT/OpenAI API?
• View 9 more replies
• 
  1 week ago
  NextMAS Author

  This script generates blog for free using Gemini API (100 Articles per day without any cost). If you still want support for OpenAI API. It will be added in v1.5 (Current, v1.3) along with user, bookmark, comment system.
• 
  4 days ago
  zaryov Purchased

  Where and how does the system choose which category to put articles in? Is it decided by Gemini automatically?
• 
  3 days ago
  NextMAS Author

  It is done by the Gemini automatically.
  All categories are passed to Gemini as a string and Gemini chooses the "three" most relevant ones.
• 
  3 days ago
  zaryov Purchased

  Ah nice! Few more questions;
  1. Is it possible to adjust the prompt that the script uses for Gemini?
  2. I see there is sitemap, but no RSS feed?
  3. Any option to write custom/manual articles aside from AI generated ones? If not, please consider adding this in the admin panel for the next updates
  
  Thank you!
• 
  3 days ago
  NextMAS Author

  Sure.
  1. You can't edit it directly from Admin Panel but you can do it manually.
  2. Yes, only sitemap provided for now.
  3. Not yet, I will make sure to add it in next update.
  
  Probably by 20 July.
  Thanks!
  
• 
  3 days ago
  zaryov Purchased

  Install questions:
  What do I need to set for the JWT Secret Key and the Cron Job Key?
• 
  3 days ago
  NextMAS Author

  JWT_SECRET_KEY -> used for state management, so you don't get logged out after every session.
  CRON_JOB_KEY -> To automate things, like I have added 3 cron jobs and mentioned it in the documentation (You have 3 urls and use your cron job key to verify it).
  
  Thanks for purchasing. And next version will include your requirements. Also if any other, do share it.
• 
  3 days ago
  zaryov Purchased

  Ah so it's just passwords that I can set myself if I understand correctly.
  
  An issue I keep running into.. I made 3 articles, but now when I try to make more, I get:
  
  Oops!
  An unexpected error occurred. Please try again later.
  The webmaster has been informed. If this continues, please contact support.
  
• 
  3 days ago
  NextMAS Author

  Okay. Can you check error logs?
  And have you set CRON Jobs properly?
• 
  1 day ago
  zaryov Purchased

  I have not set up cron jobs yet, just posting manually.
  
  For error logs, there are a few different ones, but I think it may be this one:
  
  [04-Jul-2025 18:58:05 UTC] Error: Trying to access array offset on null in /home/*********/domains/**********.com/public_html/controllers/Blog.php on line 50
  
  
  Let me know if you need the full logs and where I can contact you if so.
  This seems to be some sort of timing issue. If I re-do the same title after the error (about 3-5 attempts), it usually ends up working
• 
  1 day ago
  zaryov Purchased

  I think same thing happens on demo. It is likely due to API timeout, to get around this, script should check for API availability, success API call, increase wait time, and retry on fail, and then also check to make sure response is in valid JSON format
• 
  1 day ago
  NextMAS Author

  This error occurs due to Gemini as it doesn't returns JSON format. So I parse it manually.
  Sometimes Gemini doesn't return the proper text which causes the error while parsing.
  
  The error you found is likely due to Pexels API. It can't find images sometimes with the thumbnail description provided by Gemini.
  

• 
  2 weeks ago
  Jokki Purchased

  admin page?
• 
  2 weeks ago
  NextMAS Author

  Yeah. https://yourdomain.com/signin
• 
  2 weeks ago
  NextMAS Author

  Hello Sir. If you liked the script, can you please leave a review? Also can you share feedback and any updates or changed you want in upcoming updates?

• 
  2 weeks ago
  Jokki Purchased

  im purchase but not download
• 
  2 weeks ago
  NextMAS Author

  Hi there. I received the sale and the files should be available for download
• 
  2 weeks ago
  Jokki Purchased

  ty

• 
  3 weeks ago
  https

  hi, good start. make a dedicated page for the newsletter signup. right now, both contact form and newsletter form are on the /contact route. not a great ux.
• View 6 more replies
• 
  2 weeks ago
  NextMAS Author

  Thanks for you feedback. AIBlog v1.1 will be released by today with few additional features, including this.
• 
  2 weeks ago
  https

  ok great! waiting to see your magic.
• 
  2 weeks ago
  https

  oh i see you updated it today but now its worse
  the newsletter button takes you to contact form. no more newsletter signup form.
  whats happening friend?
• 
  2 weeks ago
  NextMAS Author

  I didn't update the navigation component on server, which caused this issue.
• 
  2 weeks ago
  NextMAS Author

  Also it would be great if you provide some feedback or features request for next updates (It will take a month though, kinda busy) but I will be working on it in spare time.
• 
  2 weeks ago
  https

  /newsletter routes to /contact upon form submission.
• 
  2 weeks ago
  https

  it should route to a dedicated newsletter subscription thank you page.
• 
  2 weeks ago
  NextMAS Author

  Thanks I will design it and publish in the next update.
• 
  2 weeks ago
  NextMAS Author

  Hi! The update will be available tomorrow. Though, dedicated thank you page isn't added but every other bug is fixed. Please review and let me know.