Self-hosted ecommerce platform

Everything needed to launch a real online store.

SmithShop combines a product catalog, cart, checkout, digital downloads, shipping rates, customer accounts, reviews, comments, CMS pages, visitor insights, admin tools, policy pages, and production deployment support in one lightweight PHP ecommerce package built to load fast.

View features Deployment details

smithshop.local

Variant product Options, images, stock, SKU

$49.00

Download product Secure delivery after payment

$19.00

CartReady

ShippingUPS USPS FedEx + more

PaymentStripe PayPal Square + more

PHP 8.0+Runs on modern PHP hosting

~1.3 MBCompact release zip with the editor bundled

9Included storefront design presets

7Carrier options including UPS, USPS, FedEx, DHL, and postal carriers

Feature overview

What comes with SmithShop

Search or scan the cards below to see the included deployment, store, product, payment, shipping, customer, admin, SEO, and security features.

SVServer Compatibility

Runs on Apache or Nginx
Local Docker support for Apache and Nginx side by side
PHP 8.0+ supported and tested locally on PHP 8.4
MariaDB or MySQL database
Uses standard PHP extensions: pdo, pdo_mysql, openssl, json, session, fileinfo, gd
Can run as a subdomain store such as shop.example.com
Web root points to /public
Includes Apache and Nginx sample configs
Shared-host friendly for small businesses with modest daily traffic and catalogs up to about 2,500 products
Can scale to VPS or dedicated server deployments for larger catalogs around 10,000 products

PFLightweight And Fast

Compact app package with a small release zip
No heavy framework boot process on every request
Simple PHP MVC structure designed for quick page loads
Minimal frontend JavaScript on customer-facing pages
Optimized WebP image uploads with resizing and compression
Automatic thumb, card, and large image variants for faster catalog browsing
Admin image-size regeneration for older uploaded product and catalog images
Strict no-cache headers for dynamic customer, cart, checkout, storefront, CMS, review, comment, and admin pages
Cloudflare-friendly no-store headers for dynamic responses
Versioned CSS and uploaded image URLs to break browser and CDN cache after edits
CDN-ready upload URL support through ASSET_BASE_URL or CDN_ASSET_URL
Fast enough for niche catalogs while still structured for thousands of products
Designed to run well on low-cost shared hosting for a small business with a few hundred real visitors per day
Production path includes database indexing, paginated admin screens, image optimization, and server tuning for larger catalogs
Large-catalog database indexes included for products, orders, moderation queues, options, and visitor analytics

INInstallation

Browser-based installer
Command-line install support
Optional sample catalog during install
Optional reset of existing SmithShop tables during reinstall
Installer writes .env
Creates or updates SmithShop database tables only
Installer lock file prevents accidental reinstall
Reminder to remove public/install.php
Deployable as smithshop.zip
Docker files excluded from release zip
Supports separate private/business and public demo installs with separate databases, .env files, uploads, and storage
Demo installs can be seeded with safe public settings instead of private store credentials

SFStorefront

Product catalog
Product categories and detail pages
Shopping cart and checkout
Checkout collects name, phone, email, and address for every order, including digital/no-shipping orders
Digital checkout labels address as billing/location context instead of shipping
Address line 2 support for billing, location, and shipping addresses
Guest checkout stays primary with an optional create-account link
Optional checkout terms agreement with expandable text before order placement
Product search
Contact form
Customer comments page with moderation
Guest order lookup
Mobile-friendly layout
Collapsible mobile header menu
Mobile cart and checkout quick links
Header logo upload and positioning
Cart and checkout links in the main header
Store policy footer links

PRProducts

Physical products
Digital and downloadable products
Products with variants
Option types: select, radio, checkbox, text input, file/image upload
Product images and galleries
Variant images and option images
SKU, stock quantity, and low-stock threshold support
Product dimensions and weight for shipping quotes
Product tags for better catalog search and organization
Featured products and active/inactive status
Product reviews with 1-5 star ratings
Approved review display on product detail pages

SMSample Products

Optional sample catalog
Physical products
Digital products
Products with variants
Products with multiple option types
Sample product images
Sample downloadable placeholder files

BRDesign And Branding

Default SmithShop logo
Custom logo upload with PNG, JPG, WebP, GIF, and hardened SVG support
Logo placement controls
Design presets: Clean, Classic, Warm, Bold, Dark, Gallery, Fresh, Mono, Premium
Custom color controls
Button and card radius control
Home page layout controls for hero visibility, button visibility, promo position, and featured products
Drag-and-drop home section ordering and promo box ordering from the admin design page
Product page layout controls for image position, gallery placement, review placement, and SKU/stock visibility

CMContent Management

Self-hosted TinyMCE 8.5.1 rich text editor bundled with the app
GPL2+ self-hosted editor mode with no Tiny Cloud API key dependency
Formatting controls for headings, lists, links, tables, font family, text size, alignment, and color
Cleaned HTML output before customer display
Single visible editor to avoid overlapping editor controls
Formatting toolbar and character count
Headings, bold, italic, lists, quotes, dividers, tables, links, email links, phone links, buttons
Editable home page text and promo blocks
Editable contact intro and footer text
Editable shipping, returns, privacy, and terms pages
Editable site notice banner with optional custom background and text colors
Simple CMS pages with title, slug, body, SEO fields, sort order, and active status
CMS pages can appear in the storefront navigation when enabled
CMS module can be toggled on or off from Store settings

RVReviews And Comments

Customer product reviews with required star rating
Review title, name, optional email, and body fields
Public customer comments page
Comments support title, name, optional email, and body fields
Reviews and comments are pending by default until approved
Admin moderation for pending, approved, and hidden statuses
Admin delete actions for unwanted reviews or comments
Honeypot fields help reduce automated spam submissions
Reviews, comments, and CMS each have independent on/off toggles

VIVisitor Insights

First-party visitor analytics built into the platform
Browser-verified real visitors today, last 7 days, and last 30 days
Raw page views shown separately from verified visitor counts
Suspected bot and scraper traffic shown separately
Top pages and product pages
Top referrer hosts
Dashboard card for visitors today
Daily privacy-safe visitor hash instead of raw IP storage
Common bot, Cloudflare bot header, and suspicious-path filtering
Analytics and bot filtering can be toggled from Store settings

PYPayments

Manual payment option with admin on/off toggle
Embedded Stripe card checkout that keeps customers on the SmithShop checkout page
Embedded PayPal button integration with existing PayPal capture flow
Embedded Square card payment integration using Square Web Payments SDK
Payment Method heading supports card-brand icons for Visa, Mastercard, Discover, and American Express
Single enabled payment gateway opens automatically; multiple enabled gateways start unselected
Stripe embedded checkout stays collapsed until the secure card form loads successfully
Stripe, PayPal, and Square create normal order records only after payment is verified
Admin configuration slots for Authorize.Net, Braintree, Klarna, Affirm, Adyen, Amazon Pay, 2Checkout/Verifone, Worldpay, Mollie, and Afterpay/Clearpay
Private Payment Gateway Test Lab on the SmithShop authority/admin copy simulates success, decline, cancel, refund, webhook, timeout, and not-configured states without opening every processor account
Stripe, PayPal, and Square can be marked as sandbox-tested; other gateways remain available but unverified until real credentials are added
Stripe webhook support
Stripe refund support
PayPal capture and refund support
Admin payment events can retain processor-provided error reasons for troubleshooting
Customer-safe payment failure messages that avoid exposing gateway internals
Payment event audit trail for checkout starts, returns, captures, webhooks, cancellations, refunds, and admin payment changes
Admin cleanup controls for selected payment events or events older than a chosen retention period

SHShipping

Flat-rate shipping
Free shipping threshold
Digital-only carts skip shipping
Ship-from ZIP and country
Live or estimated carrier quote support
UPS, USPS, FedEx, DHL, Canada Post, Royal Mail, and Australia Post controls
Select which services to offer per carrier
Carrier logo badges at checkout
Admin shipping rate test tool for destination, package weight, and dimensions
Shipping Carrier Test Lab simulates estimated success, live success, missing credentials, carrier outage, address rejection, and oversize-package scenarios
Rate test results identify configured, estimated, or live carrier sources
Estimated fallback rates when credentials are missing or carrier calls fail

TXTaxes And Regions

Country enable and disable controls
Expanded major-country sell-to list
Tax rules by country and state
Default country tax rules
Tax shown in cart, checkout, and order summary

CPCoupons

Coupon codes
Percentage discounts
Fixed amount discounts
Minimum subtotal
Active and inactive coupon status
Coupon delete action

CUCustomers

Customer registration
Customer login and logout
Customer account page
Saved default shipping details
Customer order history
Customer digital downloads page
Forgot and reset password flow

Operations

Order, admin, email, and launch tools

SmithShop includes the back-office pieces needed to manage customers, orders, content, settings, and production readiness.

OROrders

Admin order list and detail view
Order status updates
Payment status updates
Order payment event timeline with customer-safe messages and admin-only gateway details
Short sequential order numbers starting at SSA-2055 for cleaner customer lookup and email references
Customer phone number saved on each order
Automatic software license key display for paid matching download orders
Tracking carrier and number
Mark shipped
Cancel, refund, and restock order actions
Bulk delete orders
Guest order lookup by order number and email
Download email resend for paid digital orders

EMEmail

Local mail fallback
SMTP settings
Local sendmail option with configurable sendmail path
Order confirmation email
Admin new order email
Shipped order email
Digital download email
Customer password reset email
Contact form email
Admin email template editor for subjects, HTML bodies, placeholders, test sends, and reset-to-default controls
Mail log records test emails, saved order email copies, live SMTP/sendmail successes, and failures

ADAdmin

Admin dashboard
Visitor insights dashboard with top pages, referrers, and daily visitor totals
Products, categories, coupons, content, CMS pages, reviews, comments, and design settings
Product CSV import and export with SKU-based create/update behavior
Bulk product actions for price changes, category edits, active/hidden status, and inventory adjustment
Saved product and order filters for faster repeat admin workflows
Duplicate SKU tools across product and variant SKUs
Supplier, supplier SKU, wholesale cost, MAP/MSRP, fulfillment type, and supplier URL fields
Orders, shipping, tax, payment, and general settings
Checkout terms agreement toggle and editable agreement text
Customer engagement toggles for reviews, comments, and CMS pages
Default editable SmithShop Features CMS page for owner/demo reference
Collapsible admin header with remembered expanded or collapsed state
Admin user management for adding and removing backend admins
Username or email admin login support
Optional demo admin login for sample catalog installs
Hidden license key, licensed owner, and HTTPS license server fields for support and future update identity
Manual license check button that validates against smithshopcommerce.com by default
Customer installs keep license-key creation hidden and validate against the configured SmithShop license server
Private license-server mode for SmithShopCommerce-issued keys, owner email, allowed domain, expiration, status, notes, search, and paid-order auto issuing
30-day full-feature trial model before license-required updates, support, and premium tools
Soft license policy: stores keep selling, while updates, support, and premium tools can require a valid key
Licensed browser update page for uploading official SmithShop release zips, creating a database backup, preserving .env/uploads/downloads, and running the schema updater
Production readiness page
Admin-only large-catalog performance test generator with cleanup for generated test products
Realistic demo catalog generator with original sample electronics, outdoor gear, workshop, travel, home, and fitness products
Admin SQL database backup download from the production checklist
Stored database backup manager with create, preview, download, delete, and pre-update backup support
Admin log viewer for mail, contact, rate-limit, and PHP error logs
Log delete controls without typed confirmation boxes
Stored backup and payment event cleanup with select-all, delete checked, and delete all controls
Payment events viewer for gateway returns, webhooks, refunds, and payment failures
Payment event selected-delete, delete-all, and older-than retention cleanup without typed confirmation boxes
Update safety panel with app version, database schema version, and safe schema update action
Schema update timestamp displayed in the server timezone, such as 06/12/2026 @ 8:30 AM EDT
Backup and restore checklist covering SQL, .env, public/uploads, and storage/downloads
Upload image cleanup tool for unused product, category, variant, option, and logo images
Image regeneration tool for missing thumb, card, and large WebP sizes
Admin login throttling
Configurable admin URL path through ADMIN_PATH

SESEO

SEO title and meta description defaults
Product and category SEO fields
Canonical URLs
sitemap.xml
robots.txt
IndexNow support with generated key file and admin public URL submission
Policy pages included in sitemap
CMS pages include SEO title and meta description fields

SCSecurity And Production

CSRF protection on forms
CSRF protection on review and comment submissions
Production checklist includes a routed POST CSRF audit
Moderation prevents public display before approval
Visitor analytics store daily hashed visitor identifiers, not raw IP addresses
Configurable analytics retention cleanup
Password hashing
Admin login throttling
Rate limiting for contact, review, comment, customer login, password reset, account registration, and guest order lookup submissions
Contact form anti-spam with honeypot, timing checks, rate limiting, and optional simple challenge
Server-side enforcement for optional checkout terms agreement
Admin test email action with SMTP/sendmail failure feedback
Configurable private admin path
Production checklist and launch cleanup visibility for active license identity
License validation API endpoint for the smithshopcommerce.com authority site
Private license-key creation and issued-key management stay limited to the private smithshopcommerce.com license-server copy
Demo and customer builds show license entry, license check, and trial status without exposing license issuance controls
Pending checkout snapshots exclude gateway secrets, SMTP passwords, webhook secrets, and full settings data
Production warnings for default admin path, demo admin login, missing HTTPS, installer file, and local environment mode
Launch status panel shows whether the store is safe to launch or still has review items
Launch cleanup panel for demo admin, test catalog, installer, payment, email, and contact protection status
Installer lock
.env configuration
Digital files stored outside public web root
Upload folders separated from app code
Upload validation requires approved extensions and matching MIME types; SVG logo uploads remain strict-sanitized
HTTPS-ready deployment docs
Apache and Nginx production examples
Next production step: finish performance testing and document shared hosting, VPS, and dedicated server recommendations

PRProduction Scale Roadmap

Database Scale

Product, category, status, order, customer, review, and comment indexes are included for large-catalog installs
Moderation indexes are included for pending reviews and comments
Visitor analytics indexes are included for date, page, referrer, and unique-visitor rollups
Analytics cleanup and retention controls are included to keep shared-host databases lean
Next step: continue removing any admin screens that load large lists all at once

Product Management

CSV import and export is included for product create/update workflows
Supplier and wholesale fields are included for reseller, dropship, and affiliate catalog planning
Bulk price updates are included from the Products admin page
Bulk category and active/hidden status edits are included
SKU duplicate detection is included across products and variants
Inventory set and adjustment actions are included

Search

Improved product search relevance for search-result ordering
Search by SKU, title, description, category, and tags
Admin filters for category, status, and product type
Optional MySQL/MariaDB full-text product index for larger catalogs

Image Strategy

Automatic WebP thumbnails and image derivatives
Multiple image sizes for product pages and catalog cards
Admin regeneration for missing image sizes after upgrading older stores
Lazy loading for large product catalogs
Image cleanup for unreferenced uploaded product, category, variant, option, and logo images
Optional CDN-ready upload paths through environment configuration

Admin UX

Paginated product, order, review, and comment tables
Saved product and order filters for repeat admin workflows
Bulk actions for catalog and order management
Faster dashboard queries
Clear production checklist, update safety panel, and admin log viewer for shared hosting, VPS, and dedicated servers
Uploadable performance test catalog tool for 1,000, 2,500, 5,000, and 10,000 product tests

Built for practical self-hosted ecommerce.

Upload the release zip, run the installer, choose sample products or start clean, configure payments and shipping, and manage the store from the admin area.