Welcome to PhPstrap

A lightweight admin micro-framework that gives your PHP project a place to grow.

Launch secure, scalable membership sites and dashboards without a framework rewrite.

Sign Up Log In View on GitHub
Modular at the Core

Drop-in modules with their own settings, assets, and routes. Build features like building blocks.

Fast to Deploy

Works on standard shared hosting. Keep your stack simple and ship faster.

Secure by Default

Auth gate patterns, CSRF protection, safe sessions, and production-ready error logging.

Who Is PhPstrap For?

Teams building tools — not just websites.

Custom PHP Developers

Add an admin, settings, and modules to bespoke apps without adopting a heavy framework.

Agencies & Freelancers

Deliver consistent dashboards and membership sites quickly, with reusable module patterns.

Indie Hackers

Ship your micro-SaaS faster: login, roles, settings, and hooks out of the box.

Feature Highlights

  • Unified bootstrap (_bootstrap.php) for sessions, config, DB, and autoloaders
  • Module discovery with validated module.json + settings screens
  • Header/Footer script hooks to extend UI without core edits
  • CSRF protection and auth gate snippets for admin actions
  • Bootstrap 5 components, cards, and modals for a polished admin
  • Version source of truth (config/version.php) with optional DB mismatch warnings

How It Works

  1. Drop PhPstrap into your project (or start fresh).
  2. Enable modules in Admin → Modules and open each module’s settings.
  3. Use hooks to inject analytics, scripts, or custom UI.
Tip: Use the Module Forge scaffold to spin up new modules with boilerplate settings & assets.

Launch your membership site today

PhPstrap gives you everything you need to get started quickly.

Create an Account Access My Account Download

Getting Started

1. Clone or Download

Get the code from our GitHub repository and start building.

2. Run the Installer

Use install.php to create the database tables and configure your environment.

Production-ready defaults

Error display off, logging on, CSRF tokens for admin forms, and safe include patterns by default.

Extensible by design

Add modules for payments, analytics, or email with minimal code. Keep your project portable.