Release 1.0.0 · Laravel 13 on PHP 8.3+
Rovads is a self-hosted advertising network. Advertisers fund prepaid impression or click credit, publishers verify their domains and paste an ad tag, and an administrator approves the campaigns, the deposits and the withdrawals. Seven ad formats, two account consoles, one admin panel and the full Laravel source.
Counts are of the files and schema in the release you receive. A callback route is code, not a merchant account: the gateways and payout methods are yours to configure. CPM and CPC both default to zero, so the economics are also yours to set.
A demo is available at rovads.hansaldev.com for you to click through. The archive also ships four genuine captures from the release, and this page uses all four rather than filling the gallery with mockups.
The demo is a shared instance with no published credentials. Treat anything you enter there as public. The four captures and the documentation are the honest preview of what ships.
Advertisers buy attention, publishers sell it, and someone has to verify both sides and move the money.
An advertiser needs a balance, a campaign builder and reporting. A publisher needs domain proof, ad tags and earnings. Sharing one login between them is a support problem on day one and a permissions problem forever.
The ad request has to resolve a verified domain, pick an eligible campaign for that format and country, ignore a repeat from the same IP inside the interval, write an impression and a ledger row, and return the creative.
Web push needs VAPID keys, a service worker, a subscription endpoint tied to a verified domain, a delivery log, a frequency cap and a scheduler. It is not a checkbox beside a banner.
A publisher requests a withdrawal, the fee has to be calculated from the method record, the balance has to leave immediately, and a rejection has to put it back. Someone still has to send the money.
Rovads puts both consoles and the referee in one Laravel application, and leaves the commercial decisions where they belong: with you.
Grouped by the job each part performs. Every card describes a shipped screen or a real code path.
Seven formats and one delivery model. The publisher pastes a tag for the size or behaviour it wants; the ad request resolves a campaign and writes the accounting in the same request.
Leaderboard 728×90, billboard 970×250, medium rectangle 300×250, large rectangle 336×280, half page 300×600, wide skyscraper 160×600, mobile banner 320×50 and large mobile banner 320×100. Uploads are checked against the exact width and height before they are accepted.
A headline, description, display URL, language and UTM fields, rendered as a labelled text unit. Text ads can auto-approve or wait for an administrator, depending on the setting.
A small image card anchored in the corner of the page, built from the ad's icon, title, body and call to action. It behaves like a push notification without requiring a browser subscription.
A separate push campaign type with a service worker, VAPID keys, a subscriber table and a delivery log. Subscriptions are accepted only for a verified publisher domain, and 404 or 410 responses revoke the subscription automatically.
A click-triggered script that opens the campaign once, then stores a thirty-minute cooldown in the visitor's local storage so a second click does not open a second window.
A full-screen overlay with a centred creative and a close control, loaded from its own publisher script. It is a separate format in the admin, not a display size with different CSS.
A ZIP with a root index.html and allowlisted assets. The
server rejects external URLs, popups, redirects and breakout
attempts, injects clickTag, and serves the creative in a
sandboxed iframe that exposes Bitmedia.ready and
Bitmedia.exitClick.
The publisher console prints the exact tag for each active type:
ad.js for display and text, push.js for
in-page push, popunder.js and vignette.js
for the behavioural formats.
DatabaseSeeder. Create the formats in the admin, or run the
included AdTypeSeeder to add the eight IAB sizes plus text,
in-page push and push types. Popunder, vignette and playable types are
created in the admin's ad-type screen.
The buy side: an advertiser account, prepaid credit, a campaign per format, two targeting filters and reporting by country and ad title. There is no campaign scheduler, and the page says so below.
Registration, login, password reset and profile editing are their own guard and their own session. An advertiser never shares a login with a publisher or an administrator.
Plans are purchased from the advertiser balance and add either
impression credit or click credit. Six demo plans ship in
PlanPriceSeeder; the admin can create and toggle its
own. A campaign stops when its credit reaches zero.
Advertiser deposits run through the gateway module, with 29
callback routes in routes/ipn.php covering Stripe,
PayPal, Razorpay, Mollie, CoinGate, BTCPay, NowPayments and others.
Automatic and manual gateway types are both supported.
Choose an active ad type, a click or impression billing mode, a destination URL and the creative fields that format needs. Display uploads must match the type's exact resolution; playable campaigns require a valid ZIP.
An advertiser can target a list of countries or mark the campaign
global. The visitor's country is resolved through the ipstack key
in settings, and only when check_country is switched
on.
Publishers tag a verified domain with suggested keywords. When
check_domain_keyword is on, the selector only returns
campaigns whose keyword list matches one of those terms.
Source, medium, campaign, term and content are stored per campaign and appended to the destination URL when the click is redirected, with the correct separator for a URL that already has a query string.
Text, in-page push, playable and push campaigns have their own auto-approve switches; the rest wait for an administrator. The report screen totals impressions, clicks and CTR and can search by country or ad title.
expires_at, is
exposed only on provider ads created in the admin; the eligible scope
honours it, but an advertiser cannot set it. A campaign runs while it is
active and has prepaid credit.
The sell side: a publisher account, domain verification, copy-paste ad tags, slot-level reporting and a withdrawal queue. The same IP, interval and blocked-IP guards apply to every served impression.
Registration, login, password reset and optional Google two-factor authentication are their own guard. A publisher never shares a session with an advertiser or an administrator.
A publisher submits a domain with suggested keywords. The platform
generates a 32-character code and a text file name; the publisher
places a text file at the domain root and asks the panel to check
it. Depending on the domain_approval setting, the
domain is either verified immediately or held for an administrator.
Only verified domains can serve.
The Ad Scripts screen lists every active ad type with its
copyable tag: ad.js for display and text,
push.js for in-page push, popunder.js
and vignette.js for the behavioural formats. It also
shows the publisher's counts of slots, clicks and impressions.
A Published Ads screen shows every slot with its impressions, clicks and CTR, plus a details view per campaign. A day-to-day earnings report and a per-ad report are also available.
Seven method templates ship in the demo seeder (bank transfer,
PayPal, Payoneer, Wise, Skrill, USDT, mobile money). Each method
carries its own min/max, fixed plus percent charge, rate and
currency. The publisher requests an amount inside the limits, the
fee and final amount are calculated, the balance is held at submit,
and an administrator approves or rejects. Rejection refunds the
held amount and writes a withdraw_reject transaction.
A publisher's verified domain is the anchor for web push subscriptions. The browser subscription is accepted only for a domain the panel recognises, and a 404 or 410 response from the endpoint revokes it automatically.
One administrator role with the full console. The screens below are the ones that exist: moderation, money flow, reporting and settings. There is no staff permission grid and no audit-log screen beyond the notification and login histories.
Publishers, advertisers, domains, all ads, deposits, withdrawals and support tickets are listed with pending filters. The dashboard shows the counts of pending deposits, withdrawals, domains and open tickets alongside publisher, advertiser and finance totals.
All advertiser campaigns with status toggles, provider ads created directly by the administrator with an optional expiry date, plan prices, ad types, the CPC and CPM rates, IP logs with block and unblock, blocked IP logs, keyword management and ad-language management.
Domain approval and rejection, publisher and advertiser lists with email and mobile verification states, profile and password management, and login history for both account types.
Automatic and manual gateways, deposit history, withdrawal methods, pending, approved and rejected withdrawals, and the withdrawal log. The administrator pays out of band; the software does not move money to any provider.
Publisher earning log, advertiser transaction log, login histories, notification history and the advertiser report by country and ad title with totals, clicks, impressions and CTR.
General, system configuration, logo and favicon, extensions, language, SEO, notification templates, global, email and SMS settings, frontend templates, pages and sections, maintenance mode, GDPR cookie, cache and custom CSS. Site name, logo, favicon, meta tags, social links and head and footer code are all editable here.
The infrastructure the platform runs on: web push, the one scheduled command, the rate limits and the installer. None of it is a queue worker or a separate service to host.
VAPID keys are generated in the admin, the service worker is served
at /sw.js, and a subscription is accepted only for a
verified publisher domain. The default batch size is 100 and the
default frequency cap is 3 notifications per subscriber per day.
The push auto-approve switch controls whether a new push campaign
goes live immediately.
php artisan push:send runs every minute and is the
only entry in the scheduler. There are no queue jobs and
QUEUE_CONNECTION is sync. The cron line
for it is the only recurring job the platform needs.
Ad serving 120 per minute per IP, push subscription 30 per minute per IP, push click 60 per minute per IP, and the API limiter 60 per minute. IP tracking records country, browser and operating system, and an administrator can block an IP from the log.
One frontend template ships, basic, with 224 Blade
views. Three language files are included (English, Hindi and
Bengali) and the admin can edit and add translations. Both layouts
hard-code dir="ltr", so there is no RTL support.
Six steps: licence, requirements, database, setup, administrator,
finish. It checks PHP 8.3 or newer, nine extensions and seven
writable directories, imports database/install.sql,
and creates the administrator with an eight-character minimum
password. It does not run DatabaseSeeder.
There is no Vite or Mix configuration and no Node dependency. Composer installs the PHP dependencies, the installer imports the schema, and the application runs. Outbound HTTPS is needed for the ipstack geo lookup and mail transport.
database/install.sql default to
0.00000000. Until an administrator sets them in the CPC and CPM
screen, every served impression and click is valued at zero for both sides.
Every step below is a real code path, and every one of them writes to the same tables.
AdTypeSeeder), and the plan prices the advertisers will buy.
domain_approval
setting.
/ads/{publisher}/{type}/....
check_country is on, and domain keywords
when check_domain_keyword is on, then picks at random.
withdraw_reject transaction. The administrator
pays out of band.
push:send runs every minute, sends in batches of 100, and honours a
per-subscriber daily cap. 404 and 410 responses revoke the subscription.
Captured from the release. Filter by area, then select any image to open it full size.
The public home counters are demo content from a seeded installation. Your installation starts with no publishers, no advertisers and no campaigns. The advertiser and publisher screens show their sign-in forms because there is no shared demo account to publish.
Standard Laravel and MySQL, with a pre-built frontend. Nothing exotic to host.
routes/api.php does not exist, and there is no versioned
REST or JSON endpoint for external clients. The application is a web
product with three browser-facing guards and IPN callbacks for
gateways.
The operator's path, then the advertiser's and the publisher's.
Point a vhost at the release, make the storage directory writable, and open the site. A six-step installer checks the server, writes the environment file, imports the schema and creates your administrator account with an eight-character minimum password.
Set CPM and CPC, create the ad types (or run AdTypeSeeder),
and create the plan prices advertisers will buy. None of these ship with
usable values.
Site name, logo, favicon, social image, meta tags, social links and head and footer code, all from the admin. Send yourself a test impression to prove the loop works before you invite anyone.
Configure the automatic or manual gateway records with your own credentials. All 30 ship with test credentials and must be replaced before launch.
Flip the registration switch, point mail at a real transport so verification codes send, and let advertisers and publishers in. The captcha is already on.
Add * * * * * php artisan push:send to your cron. It is
the only scheduled command and it is what delivers web push. Outbound
HTTPS is required for the geo lookup and mail.
Checked automatically by the installer, which will not continue until they pass.
| Requirement | Detail |
|---|---|
| PHP | 8.3.0 or newer |
| Extensions |
pdo, pdo_mysql, mbstring,
openssl, tokenizer, xml,
ctype, json, and fileinfo
|
| Writable paths | The project root, the storage directory and the bootstrap cache directory, plus four more directories the installer checks |
| Database | MySQL, reachable with the credentials you enter in the installer |
| Web server | Anything that can serve a Laravel application, with .htaccess support if you use Apache. An IIS configuration file ships with the release. |
| Cron | Required — push:send runs every minute, and the platform depends on it for web push delivery |
| Outbound HTTPS | Required for the ipstack geo lookup used in country targeting and for mail transports |
| A real transport is required to send verification codes and notifications. The installer's default writes mail to a log file instead. | |
| Node.js | Not required. The frontend ships as Blade views. |
Written against this release and versioned with it. The documentation is included in the archive you receive, alongside the source and the schema.
Introduction, installation, requirements, initial configuration, interface navigation, deployment and troubleshooting.
Ad formats, price plans, payments, push campaigns and domain verification end to end.
Admin guide, advertiser guide, publisher guide, user accounts and permissions.
Settings and customization, maintenance and updates, version support, and an FAQ.
Plain statements, including the parts that are limited.
You receive the complete source code and the right to run it on a server you control and modify it for your own operation.
The product is sold as a regular licence for a single installation. You cannot resell or redistribute the source as a competing product. The full terms are presented and accepted during installation, so they are recorded on your own instance as well as here. The store's refund policy and the licence field on this listing are what apply.
You get a maintenance and updates guide with the release, and the source is yours to maintain. The release is built from committed source rather than from a vendor's working copy, so the archive you hold matches the documented version.
Future releases are a commercial question for the vendor at the point of purchase. This page does not promise a lifetime update commitment, because none has been contracted.
HansalDev provides support on a commercial basis, and you can raise a request through the contact form before or after purchase.
This page deliberately makes no response-time or 24/7 availability promise. The shipped documentation says the same thing: no support policy, response time, channel or contact has been committed, so none is quoted here.
Answered from what the release actually does.
A single Regular licence. No per-impression fee to us and no revenue share.
One commercial licence for one installation. The full Laravel application, the advertiser and publisher consoles, the admin panel, the schema, the installer and 19 pages of documentation.
$99.00
$
49
USD one-time
One-time payment. Taxes, if any, are added at checkout. The archive is delivered against your order, and the licence is presented and accepted again during installation so it is recorded on your own instance.
None of this is held back from you deliberately. Some of it can only be issued to you personally, and the rest is your operation to run.
No default administrator credentials ship with the release. The schema has an empty user table, an empty campaign catalogue and an empty ledger; your administrator is created during installation with an eight-character password minimum, and a release test asserts that no credential value is present in the seed.
You pay once for the source. There is no per-impression charge, no revenue share to us, and no subscription to renew.
The licence covers one site you operate. A single installation can host many publishers and domains, but running several public instances is outside it.
The source is yours to host, modify and maintain. Future releases are a commercial question with the vendor.
Offerwall & App Monetization Platform
Monetise your website or app with offerwall and content-locker integrations, postback tracking and monthly payout invoices.
Get the source code, install it, set your rates, and connect the advertisers and publishers you already know.
