[Nosferatu]

Forge — managed ECU tuning portal with a WїиоL5 robot attached

[img][/img]

What this is, in three lines

A hosted ECU tuning portal for the customer side, and an automated WїиоL5 tuning robot for the tuner side. I build it, I run it, I'm the one who picks up when it breaks. Demo access in the contact section at the bottom.

---

Why this post exists

There are plenty of "own your own portal, one-time fee, install on your VPS" scripts on this forum already. They're not bad products. But they don't tune the files — they only organise the paperwork around tuning. If you're a solo tuner or a small shop, the paperwork isn't what's eating your evenings. The tuning is. So I built two things that work together:

1. Forge Portal — the shop your customers see. They pick a vehicle, upload, pay, download.
   
2. ECU Copilot — a Windows app that sits next to your WїиоL5. It grabs files from the Portal, opens WїиоL5, runs the tune, validates the output, and sends it back.
   

The Portal without the Copilot is useful. The Portal with Copilot is the thing I don't see anywhere else at a realistic price for a solo/small-shop tuner.

---

The robot — ECU Copilot

When a customer uploads a file, this is what happens without you touching anything:

1. Portal pushes the file to your Copilot PC through an encrypted tunnel. No static IP or port-forward — the tunnel re-registers every 5 minutes automatically.
   
2. Copilot detects the ECU against 30+ signatures: B05cн EDC17/MED17/MG1/MD1/ME7, Continental SID/SIMOS/PCR, Delphi DCM, Denso SH705x, Marelli MJD/IAW, with confidence scoring.
   
3. Copilot asks my LїСёи5ё5 server for the Lua script matching that ECU + the tuning options the customer ordered. Scripts are AES-encrypted in transit and decrypted in memory only — your tuning IP does not sit in the EXE for anyone to decompile.
   
4. WїиоL5 opens automatically. Script runs. Map-copy from your donor projects at a match threshold you configure (default 70%, falls off in 10% steps if no donor found).
   
5. Output goes through a 10-point validation gate:
   • File size matches expected range
     
   • Header similarity ≥90% (catches "wrong ECU by accident")
     
   • Byte-difference magnitude sane (≤8% typical, ≤15% for DTC-heavy jobs)
     
   • At least 10 bytes actually changed (catches "WїиоL5 silently skipped it")
     
   • Critical-region changes capped at 30%
     
   • Max total byte diffs capped
     
   • Checksum verified, with auto-correction if you enable it
     
   • File hash different from original (catches no-op runs)
     
   • Expected change pattern present
     
   • Modified-timestamp proves WїиоL5 actually wrote it
     
6. Pass → customer gets the file. Fail → file goes to quarantine and you get alerted. It does not reach the customer.
   

Crash recovery: If WїиоL5 dies mid-script, Copilot resumes from the last known stage on restart. No lost jobs.

Supported ops: Stage 1/2/3/4, DPF delete, EGR, AdBlue/SCR, and combinations (DPF+EGR, DPF+AdBlue, etc.). Version-name aliases configurable — portal sends "Stage 1", Copilot resolves it against whatever your donor projects are named, with keyword fallback if no explicit mapping.

---

The shop — Forge Portal

Upload flow

• Vehicle picker cascade: Type > Make > Model > Generation > Engine. Separate vehicle database covering cars, trucks, vans, agricultural, construction, forestry.
  
• UK: live VRM/DVLA lookup — customer types their reg, portal fills make/model/fuel/year.
  
• Tuning options with live price calc, multi-option discount rules (per-additional / all-bundle / tier-by-count), priority tiers (normal/high/urgent) with configurable surcharge.
  
• Extensions: .bin, .hex, .ori, and extensionless files if your tool produces them.
  

Credits & pricing

• Credit packages in any currency.
  
• User groups with price adjustment — negative for dealer discount, positive for markup.
  
• Allow-debit per role — trusted customers go negative, top up later.
  
• Manual credit adjustments with mandatory reason field and audit log.
  
• EVC B05cн credit sync if you use that flow.
  

Payments — 10 gateways wired with webhooks, not just listed
Stripe (cards + Apple/Google Pay), PayPal, Paysera (EU bank + cards), WayForPay (UA/CIS), QNB ForPay (Middle East), BitPay (crypto), Redsys (ES), Adyen (global with 3DS), MBWay (PT mobile), manual bank transfer. API keys AES-256 encrypted in DB. Per-gateway webhook signature verification. Test/live toggle per gateway.

VAT

• Per-country VAT groups. VIES validation for EU B2B VAT numbers.
  
• Auto-applies correct rate on checkout based on the customer's VAT status.
  
• Reverse-charge handled properly.
  

QR certificates

• Every completed tune gets a PDF certificate with vehicle, stage, dyno chart (calculated from BHP/torque), your logo, your company details, a QR code.
  
• QR resolves to a public verification page — customer, dealer, insurer, inspector can scan it without logging in and see the certificate is real.
  
• Certificate localised to the customer's language.
  

Slave file handling — AutoTuner + bFlash (and more)

• Customer uploads an encrypted slave file → Portal decrypts via the master API → Copilot tunes the plaintext → Portal re-encrypts the output for the same slave before delivery.
  
• Customer's slave stays locked. Tuned binary never leaves your system in the clear.
  
• Not limited to AutoTuner and bFlash — can integrate with any tool out there.
  

DTC database — P/C/B/U codes in 14 languages with descriptions and category filters. Bulk import/edit from admin.

B05cн ECU search — searchable catalogue of B05cн control units with manufacturer numbers and photos. Helps customers identify what they actually have before they upload.

Tickets — attachments up to 10MB, priority, chat mode toggle, unread indicators both sides, escalation rules by category.

Dealer / sub-portal network — run resellers as their own branded sub-portal. Their files forward to you for tuning. Their price list maps to your stages. Billing tracked per sub-portal. Full row-level tenant isolation — they don't see each other's data.

Embeddable widget — a separate JS bundle you drop on your WordPress (or a dealer's site) that lets visitors pick a vehicle, see estimated gains, and start an order that lands in your portal. 17 languages baked in.

Real-time — Admin dashboard updates without refresh. Customer sees file status flip live. Chat on file and ticket pages.

Security — 2FA via Google Authenticator TOTP + 10 backup codes. IP ban list. Login history with geo-tagging. Full audit trail on profile edits, credit adjustments, admin actions. Private disk for files, signed URLs with token validation. Sanctum API auth. CSRF. Argon2ID password hashing. Rate limits on sensitive endpoints.

17 languages — EN, DE, FR, ES, IT, PL, PT, RU, UK, AR, LT, NL, RO, SV, TR, HR, HU. Around 5,700 strings each, post-edited for placeholder integrity — the build actually fails if a translator corrupts a placeholder variable. No Google-Translate-and-pray.

Menu control — hide, reorder, or add custom navigation items per role from admin. Add external links, file downloads, or internal pages. Orphaned section headings auto-remove.

Mass mail campaigns — target by user group, language, country, or manual list. Templated with placeholders. Queued delivery, per-recipient language.

Notifications — email, SMS + WhatsApp (Twilio), browser push, in-app WebSocket. Per-event per-channel configurable.

Reports — revenue by period/gateway/group, credit consumption trends, SLA adherence, top customers, file processing times. CSV export.

---

Why it's monthly instead of one-time

This is the рдят every seller on this forum skips, and the рдят that costs you the most money if you pick wrong.

"One-time fee" sounds like you pay once and you're done. You are not done. You are just starting. Here's what happens to a PHP tuning portal 12-18 months after you install it:

• PHP 8.2 ships its end-of-life, your host upgrades, half your composer dependencies stop resolving.
  
• Laravel 12 becomes Laravel 14. Breaking migrations in between.
  
• Stripe deprecates the API version your portal is pinned to, payments silently drop to a fallback that charges the wrong VAT rate.
  
• Browsers tighten CSP rules, your chat / 3D-Secure iframes stop loading.
  
• Chrome kills third-рдятy cookies, half your OAuth sign-ins break.
  
• Payment providers rotate signing keys, webhooks stop verifying, orders pile up in "pending".
  
• Someone finds an XSS in an old library, you get a friendly email from a security researcher (if you're lucky) or you get the other kind of email.
  

When that happens, you will pay. It's only a question of how:

• Freelance dev time — €60-120/hour. One emergency call-out at midnight on a payment bug is your whole year of my subscription.
  
• Living with it — conversion silently drops, customers stop complaining and start going elsewhere, you don't know why.
  
• Paying the same seller again for "v3" which is just v2 with the ратснes rolled in and a rebrand.
  

What I sell is not a PHP zip file. It's a running operation. I host it, ратсн it, rotate certs, keep Copilot's tunnels alive, keep the LїСёи5ё5 server up, update payment SDKs, and fїж the thing at 2am when a gateway pushes a bad webhook. Monthly cost covers all of that. It's the honest price for a thing that keeps working.

If you're going to pay for maintenance either way, you may as well pay for it on the invoice instead of in your support backlog.

---

Pricing

CarTechnology lдциcн deal — next 3 months only

• €250 flat setup + €50/month for the portal.
  
• Copilot add-on at normal pricing (€500 setup + €85/month).
  

Rough per-tune math if you want it: Copilot is €85/month. If you run ~3 tunes a day, that's ~90 a month — so about €1 per tune to have a robot open WїиоL5 for you, map-copy from your donors, validate 10 ways, and hand the file back. Cheapest employee you'll ever hire.

---

What you need to run Copilot

• Windows 10/11 PC next to your WїиоL5 (can be the same machine you're already tuning on).
  
• WїиоL5 5.x LїСёи5ё5d with OLS 530 LUA Active.
  
• Stable internet.
  

Setup including portal provisioning: same day, usually 2-4 hours of my time. I send you the installer and LїСёи5ё5 key, you activate, I route the tunnel from my side.

---

Honest limits

This рдят is in the post because every support ticket starts here and I'd rather you know before you sign up.

• Crypto is BitPay-only (BTC/LTC/ETH via BitPay). No native wallet-address flow yet. On the list.
  
• Copilot local quick-automate — drag-drop a file onto Copilot without creating a portal order — is on the roadmap, not live. Every tune currently goes through a portal order.
  
• No native mobile app. The portal is mobile-responsive and the Copilot side has an Android companion planned but I'm not pretending there's a native iOS/Android app shipping today.
  
• 17 languages are all in production and pass the build's placeholder check, but if you spot an English fallback string in, say, Hungarian, flag it and I'll fїж it within the week.
  

If any of these are deal-breakers, tell me before you pay, not after.

---

Contact & demo

• Demo access: DM me here or message on any of the channels below. I'll give you Admin/Tuner/Customer credentials on a seeded demo tenant — click around, break things, poke at it.
  
• WhatsApp: https://wa.me/3538570566659
  
• Telegram: https://t.me/Lietuvonis
  
• Microsoft Teams: https://teams.microsoft.com/l/chat/0/0?u...otmail.com
  
• Email: [email protected]
  
• Site: file-tuning.com
  

I'm not a reseller, not a team, not a support queue. I build it, I run it, I'm the one who answers the DM. Ask the dumb questions before you buy — I'd rather lose a sale to "not what you needed" than take one to a refund.
 
 

[Nosferatu]

BUMP...... ........

[Nosferatu]

BUMP...... ,,,,,,,,,,,,,,,