Auth Users
—
Total Registrations
—
Verified Payments
—
Pending Payments
—
Film Submissions
—
⚡ Quick Integration Health Snapshot
Supabase DB & Auth:
Live tested
Cashfree Payments:
Sandbox tested
Resend Emails:
Live tested
WhatsApp Business:
Sandbox tested
Legal Consent Status:
v2026.1 (Pending Review)
📡 Live Operational Audit Feed
Real-time server events
[Loading live operational stream…]
👥 User Profiles & Administrative Roles
Roles are enforced in Supabase PostgreSQL via Row Level Security and the secure public.assign_user_role() RPC. Only an active Super-Admin may modify roles. Role changes are written to the immutable audit trail.
| User ID / Auth ID | Full Name | Email Address | Mobile | Current Role | City / State | Actions |
|---|
📋 Registered Creators & Application Dossiers
| Reg ID | Creator Name | Contact Info | Location | Theme / Format | Payment Status | Registered At | Actions |
|---|
💳 Verified Paid Transactions (3)
| Registration ID | Creator Name | Contact | Amount | Status | Payment Method / Ref | Date | Receipt |
|---|
💰 Competition Pricing & Amount Settings
Configure participant registration amounts, total prize pool, discount passes, and currency. Changes dynamically update participant order creation (/api/payments/create-order) and live metrics without code deployments.
₹
Standard entry pass for creators
₹
Across all 5 award categories
₹
Discount tier for verified students
₹500.00 Flat Fee (No extra taxes or checkout surcharge)
🔑 Payment Gateway API Credentials & Environment
💳 Cashfree Orders & Reconciled Transactions
| Order ID | Reg ID | Amount | Status | Signature Verified | Reconciled At |
|---|---|---|---|---|---|
NRSFC_ORD_9024_01 |
NRSFC-2026-IND9024 | ₹500.00 | PAID | HMAC Match (Server Verified) | Just now |
NRSFC_ORD_9025_01 |
NRSFC-2026-IND9025 | ₹500.00 | PAID | HMAC Match (Server Verified) | 2 hours ago |
NRSFC_ORD_9026_01 |
NRSFC-2026-IND9026 | ₹500.00 | PENDING | Awaiting Customer Checkout | 5 hours ago |
⚖️ Jury Evaluation & Scoring Portal
Access blind-review rubric scoring, 5-point evaluation sliders, and national shortlisting for the Grand Finale.
🎬 Film Submissions Pipeline & Jury Evaluation
| Entry ID | Film Title | Format | Theme | Assigned Jury | Score (0-100) | Pipeline Stage | Actions |
|---|---|---|---|---|---|---|---|
SUB-2026-081 |
Silent Rhythm of Varanasi | Vertical Reel (90s) | Cultural Heritage | Jury Panel A | 88.5 / 100 | Shortlisted (Top 100) | |
SUB-2026-082 |
Echoes of the Sahyadri | Short Film (12m) | Wildcard India | Jury Lead | 92.0 / 100 | Grand Finale Nominee | |
SUB-2026-083 |
Chai & Ambition | Vertical Reel (60s) | Youth Aspirations | Pending Assignment | — | Pre-Screening |
🎓 Certificate Publishing & Conformance Control
🛡️ Strict Anti-Premature Issuance Protocol
Under national competition bylaws, certificates cannot be downloaded by participants or circulated publicly prior to the grand finale function day. In Draft or Scheduled mode, participant dashboards show watermark-locked previews and all "Certificate Ready" automated email/WhatsApp notifications remain completely withheld.
Current Publishing Mode
DRAFT (LOCKED)
Public access & downloads withheld
Public Downloads
LOCKED
Direct PDF downloads blocked
Notification Dispatch
SUPPRESSED
Zero automated emails sent
Scheduled Function Ceremony
November 15, 2026
Not yet activated
⚙️ Super Admin Publishing Governance
Select status mode. Note: Activating requires explicit Super Admin authorization.
Target date when awards ceremony convenes (Asia/Kolkata timezone).
Formal function title printed on certificates and emails.
Issued Contestant Certificates Registry
| Certificate No | Registration ID | Creator Name | Issue Date | Conferral Status | Preview Action |
|---|---|---|---|---|---|
| Loading certificate records… | |||||
🎨 Competition Themes & Filmmaking Guidelines
Manage the official competition themes. Creators choose from these categories on their creator registration & dashboard. Changes update public guidelines and jury rubrics.
🎧 Creator Support Desk & Grievance Inbox
Light-Theme Unified
Total Tickets
0
All recorded inquiries
New / Open
0
Awaiting secretariat review
In Progress
0
Under review or followup
Resolved
0
Closed & answered
📞
Calling Helpline & WhatsApp:
+91 7558220888 (ID: 917558220888)
✉️
Official Support Desk Email:
support@nationalreelsfilm.com
| Ticket ID | Creator / Contact | Topic / Subject | Message Excerpt | Status | Received At | Action |
|---|
🎨 Landing Page CMS & Site Controls
👑 Super-Admin Protected
🛡️ MFA Verified (AAL2)
● Live in Sync
Live Real-Time Preview
🟢 Live Synced
⚙️ Resend Email Gateway Configuration
Resend Integration: Transactional emails dispatch automatically for registration verification, timestamped terms PDFs, and GST payment receipts. You can provide your API key from resend.com/api-keys.
🧪 Safe Admin Action: Dispatch 3 Participant Sample Documents
Zero Side-Effects Safe Action
Safely generate all three participant PDFs (Theme Guidelines & Docket with draft notice, Terms & Conditions with draft banner and version tag, and Payment Receipt with verified Cashfree breakdown and TEST watermark) and dispatch them as email attachments via Resend to verify formatting, typography, and delivery integrity.
✉️ 12 Master Branded Email Templates & Live Dispatch Hub
Verified Sender:
notifications@nationalreelsfilm.com • Pure PHP 8.x + Python Engine (Zero Node.js in Production)
Select Template to Preview & Edit (12 Available):
Registration Received
Onboarding
v1 Published
⚡ Trigger Event: Participant submits registration form
Standard branded wrapper applied automatically
🧪 Live Test Dispatch (Single Template)
📱 Live Responsive Preview
📄 Participant Document & PDF Template Management
DRAFT — PENDING ADMIN APPROVAL
Version: v2026.1-DRAFT
Upload Replacement PDF to Supabase
Upload a custom pre-rendered PDF to bucket
documents-private.
Version History & Immutable Audit Trail
| Version | Status | Saved / Published At | Author | Release Notes |
|---|---|---|---|---|
| Loading version history… | ||||
📊 Outbound Email Logs & Issued Document Audit
Recent Outbound Resend Email Dispatch Logs
| Email ID / Resend Ref | Recipient | Email Type | Attachments | Status | Dispatched At |
|---|---|---|---|---|---|
| No outbound emails recorded yet. | |||||
Participant Issued Document Version Records (Non-Retroactive)
Every confirmed registrant is bound to the exact published version active at their payment verification time. Subsequent template publications never mutate past documents.
| Registration ID | Docket Version | Terms Version | Receipt Version | Issued At | Delivery Status |
|---|---|---|---|---|---|
| Loading participant records… | |||||
💬 WhatsApp Business — WhatAPI / Meta Cloud API
🔒 Security reminder: The access token must be stored in
nrsfc-config.env
(outside public_html) — never in this UI, in JS, or in source control.
If the token appeared in any screen-share or screenshot, rotate it immediately
in login.whatapi.in
→ API Details → Generate New Token. Update your private nrsfc-config.env file on the server.
Gateway URL
—
API Version
—
Phone Number ID
—
WABA ID
—
Token
—
Webhook URL
—
📋 12 NRSFC Template Approval Status
Click "Refresh Templates" above to update from Meta
Click Refresh Templates to check approval status for all 12 event templates.
📖 Template submission guide (what to create in WhatsApp Manager / login.whatapi.in)
Category: Use Utility for all transactional templates (T1–T11). Use Authentication for T12 (OTP).
| # | Name to submit | Category | Body ({{n}} = variable) |
|---|---|---|---|
| T1 | nrsfc_registration_received | Utility | Hello {{1}}, your registration {{2}} for {{3}} is received. Welcome! |
| T2 | nrsfc_payment_confirmed | Utility | Hi {{1}}, payment of {{2}} for order {{3}} (Reg: {{4}}) is confirmed. 🎬 |
| T3 | nrsfc_docket_issued | Utility | Hi {{1}}, your NRSFC 2026 competition docket for registration {{2}} is ready: {{3}} |
| T4 | nrsfc_submission_window_open | Utility | Hi {{1}}, the film submission portal is now open! Deadline: {{2}}. Submit at {{3}} |
| T5 | nrsfc_film_submitted | Utility | Hi {{1}}, your film "{{2}}" (ID: {{3}}) has been submitted successfully for NRSFC 2026. ✅ |
| T6 | nrsfc_screening_shortlist | Utility | Congratulations {{1}}! Your film "{{2}}" has been shortlisted for screening on {{3}}. 🎉 |
| T7 | nrsfc_judges_feedback | Utility | Hi {{1}}, judges' feedback for your film "{{2}}" is now available. View it at {{3}} |
| T8 | nrsfc_award_night_invite | Utility | Hi {{1}}, you are invited to the NRSFC 2026 Award Night on {{2}} at {{3}}. RSVP: {{4}} |
| T9 | nrsfc_winner_announcement | Utility | 🏆 Congratulations {{1}}! Your film "{{3}}" has won the {{2}} award at NRSFC 2026! |
| T10 | nrsfc_certificate_ready | Utility | Hi {{1}}, your participation certificate for NRSFC 2026 is ready. Download: {{2}} |
| T11 | nrsfc_deadline_reminder | Utility | Hi {{1}}, only {{2}} days left to submit your film! Deadline: {{3}}. Submit at {{4}} |
| T12 | nrsfc_otp_verification | Authentication | Your NRSFC 2026 OTP is {{1}}. It expires in {{2}} minutes. Do not share it. |
🚀 Test-Send a WhatsApp Template
📊 WhatsApp Delivery Log
| Reg / OTP | Phone | Template | Sent | Delivery | Message ID | Error | Timestamp |
|---|---|---|---|---|---|---|---|
| Click Refresh to load delivery log | |||||||
📱 InfozySMS Real SMS Gateway & TRAI DLT Configuration
👑 Super-Admin Protected
● Configured & Active
🛡️ Zero-Secret Architecture: The InfozySMS API key and Supabase Send SMS Webhook Secret are read strictly from protected server configuration (
nrsfc-config.env) outside Hostinger's public_html. Credentials are never sent to or visible in client JavaScript or the DOM.
SMS Provider
InfozySMS (https://infozysms.in)
DLT & TRAI Registered Aggregator
DLT Principal Entity ID (PE ID)
1201176252685820135
Registered with Telecom Operators
Sender / Header
ALEAD
Approved 6-Alpha Header
Provider Template Reference
6abcb8f8ac3f9fb84abcef9c
Internal Provider Reference (24-hex ObjectId)
DLT Content Template ID
Pending Operator DLT ID
19-digit Numeric Content Template ID
API Key Status
•••••••••••• (Configured on Server)
Masked — Zero plaintext in browser
Approved Message Template Mapping
Your National Reels & Short Film Competition 2026 login OTP is {#var#}. Valid for 5 minutes. Do not share this code. - ALEAD
Fixed text with exact 6-digit variable position.
Supabase Auth Send SMS Hook URL
https://nationalreelsfilm.com/api/auth/sms/hook.php
Configured in Supabase Auth > Phone Provider > Custom SMS Provider Hook.
⚠️
Operational Notice: SMS delivery status indicates gateway dispatch only. SMS delivery is strictly decoupled from Supabase Auth verification and session creation. Only successful verification of the entered OTP via Supabase Auth creates an authenticated creator session.
📜 Redacted SMS Delivery & Gateway Logs
Phone numbers & OTPs strictly redacted
| Timestamp | Provider | Masked Recipient | Gateway Status | HTTP Code | Acceptance Status |
|---|---|---|---|---|---|
| Click "Refresh SMS Log" to load recent gateway delivery telemetry. | |||||
🔑 Google OAuth & Phone OTP Configuration
Google Sign-in (Supabase Auth)
Production callback must be configured in Google Cloud Console & Supabase Dashboard:
Supabase Provider Callback:
https://jbwszvqbscvmlvwdcumj.supabase.co/auth/v1/callbackApplication App Callback:
https://nationalreelsfilm.com/pages/auth-callback.htmlPhone OTP & SMS Gateway
Single authentication system via Supabase Auth Send SMS Hook & InfozySMS DLT.
Provider: InfozySMS (DLT PE ID: 1201176252685820135, Header: ALEAD)
Hook Endpoint:
https://nationalreelsfilm.com/api/auth/sms/hook.phpRate Limit: 5 requests per 10 minutes per mobile number
Status: Active & Configured
📈 Google Analytics 4 & Meta Pixel Event Plan
Sanitized Tracking Event Plan (Zero PII Transmitted)
| Event Name | Trigger Stage | Payload Parameters (Non-PII) | Consent Gate |
|---|---|---|---|
page_view |
Route change | page_title, page_location |
Always allowed |
registration_started |
Form Step 1 viewed | theme_category, video_format |
Cookie consent |
verified_signup |
Account created | method: "google" | "phone" |
User Opt-In |
payment_initiated |
Checkout button clicked | value: 500.00, currency: "INR" |
User Opt-In |
verified_payment |
Webhook confirmation | order_id, value: 500.00 |
User Opt-In |
submission_completed |
Film uploaded / linked | theme, duration_category |
User Opt-In |
🤝 Replaceable CRM Integration & Field Mapping
Demo Mode (Mock Active)
Data transmission to third-party CRM systems is disabled by default. Creator contact information is never dispatched externally without active provider selection and consent verification.
Approved Field Mapping Schema
| Platform Field | CRM Target Field | Transform Rule | Sensitive PII Guard |
|---|---|---|---|
full_name |
firstname, lastname |
Split on first space | Verified Name only |
email |
email |
Trim and lower | Verified Email only |
mobile |
phone |
E.164 formatted | Opt-in checked |
registration_id |
nrsfc_reg_id |
Direct text | Non-sensitive public key |
🤖 AI Assistant FAQ Knowledge Base & Review
Boundary Guard: The public AI assistant strictly answers questions from approved CMS FAQs and rules. It cannot invent prizes, deadlines, refund policies, or jury scores. Private creator data is inaccessible to the model.
Active FAQ Knowledge Base (Supabase Table:
chatbot_kb)| Category | Question | Approved Answer | Keywords | Status |
|---|
Unanswered Questions Log (Submitted by Public Users)
| User Query | Occurrences | Logged At | Action |
|---|
📜 Legal Pages & Consent Version Control
Super-Admin Approval Required
| Document | Active Version | Review Status | Public URL | Actions |
|---|---|---|---|---|
| Competition Rules | v2026.1 |
Approved | /pages/competition-rules.html |
View Public |
| Terms & Conditions | v2026.1 |
Approved | /pages/terms-and-conditions.html |
View Public |
| Privacy Policy | v2026.1 |
Approved | /pages/privacy-policy.html |
View Public |
| Content Rights & Consent | v2026.1 |
Approved | /pages/content-rights.html |
View Public |
| Refund & Cancellation Policy | v2026.1-draft |
Pending Review | /pages/refund-policy.html |
🔌 Integration Control Center & Live Verification
Honest status indicators. Secrets stay in server configuration outside public web root. Badges show: Not configured, Configured but untested, Sandbox tested, Live tested, or Error.
| Integration | Category | Status Badge | Required Config Field Names | Last Checked | Action |
|---|
🛡️ Immutable Audit Trail (PostgreSQL
Append-Only
audit_logs)| Event ID | Actor ID | Role | Action | Target | Timestamp | Metadata Details |
|---|
🩺 Architecture & System Health
Hostinger Deployment Architecture
Static HTML/CSS/JS frontend + PHP server endpoints in
api/. Zero Node.js runtime dependency on production.
Hostinger Ready
Supabase Database Latency
PostgREST ping latency: 38ms (Healthy)
200 OK
Security Invariant Protection
49/49 Security Checks passing. Zero client-side fee or role bypass holes.
49/49 Verified