Orbit - PHP Content Directory CMS

🚀 Overview

Orbit is a self-hosted PHP and MySQL content management system for curated directories. Manage apps, games, software, ebooks or other content types with their own categories, listing pages and destination links.

The package includes an administration panel, responsive public directory, blog, visitor favorites, newsletter subscriptions and installation documentation. No build pipeline is required.

Features

Demo : https://orbit.nbiliboss.space/admin

Admin : Demo / Demo@123

🌐 Public Site Features

🏠 Homepage & Discovery 🎯 Hero Section: Fully editable heading and subtext directly controlled via admin. 🌟 Featured Spotlight: Dynamic hero card pulling rotating featured items. 🔥 Trending Orbit Strip: Responsive, large cover-card strip optimized for desktop and mobile. 🗂️ Content Sections: Automatically organized featured blocks per content type. 🔍 Site-Wide Search: Global instant search engine covering all content types simultaneously. 🏷️ Dedicated Listings: Individual category filters, live search, and SEO-friendly detail URLs per item type. 🖼️ Auto Cover Generation: Smart fallback creates dynamic blurred-backdrop cover images from icons if no cover is provided. ⭐ Account-Free Favorites: Browser-persisted bookmarking system with a dedicated Favorites page. 📥 The "Get" Conversion Flow 🔄 3-Step Modal: Seamless transition: Description ➔ Device/Platform Choice ➔ Confirmation. 📱 Custom Platforms: Up to 4 customizable platform buttons per item with custom icons and links (not limited to iOS/Android). 💬 Custom Action Text: Configurable call-to-action labels (e.g., "Download", "Enroll", "Install"). 📧 Lead Capture: Optional newsletter opt-in embedded into the final confirmation step. 🚩 Broken Link Reporting: Direct visitor feedback pipeline linked into the admin queue. 📰 Engagement & Media 📝 Integrated Blog: Full article listings, single-post views, cover image support, and rich content formatting. 📢 Popup Notifications: Timed, custom announcement popups with icons and CTA links. 💰 Ad Placement System: 3 targeted banner/embed zones (Homepage, Listings, and "Get" Modal). 🌓 Appearance Control: Visitor light/dark mode switch with site-wide admin toggle control. 📱 Mobile-First Experience: Dedicated top bar, slide-in navigation drawer, and fluid grid layouts. 🎨 Brand Customization: Custom logo replacement across all interfaces, plus configurable social media and newsletter links.

⚡Admin Panel Features

📊 Dashboard: High-level metrics and key analytics across all content types. 📁 Content Type Builder: Add unlimited content types with custom names, icons, and automated route generation. 📝 Item Management: Complete CRUD controls (icons, covers, badges, ratings, categories, download mirrors, and descriptions). ✍️ Blog CMS: Manage articles, excerpts, cover visuals, and custom SEO meta descriptions. 👥 Subscriber Hub: Searchable mailing list management with direct CSV export capabilities. 📈 Privacy-First Analytics: Cookie-based live active users, total/unique pageviews, and post popularity breakdown. 🔔 Notification Manager: Real-time controls for popups, callouts, and rotation intervals. 🎯 Ad Manager: Independent zone control for image banners or raw ad network embed scripts. 🛠️ Report Queue: Moderation queue for visitor-flagged broken download links. 📦 Data Portability: Bulk CSV import with auto-category creation and remote icon fetching, plus full catalog JSON/CSV exports. 🔒 Granular Permissions: Role-based multi-admin permissions (Super Admin + restricted sub-admins with custom access checks). ⚙️ System Settings: Direct configuration for branding, social channels, hero copy, theme controls, and license activation. 🔒 Built-In Security 🔑 Password Hashing: Native PHP password_hash() implementing strong bcrypt encryption. 🛡️ CSRF Protection: Token verification enforced on all state-changing submissions. 🗄️ SQLi Prevention: Fully parameterized database queries using PDO prepared statements. 🧹 XSS Sanitization: Global output escaping via a standardized h() rendering helper. 📄 File Upload Validation: Deep MIME-type verification inspecting file contents rather than relying on extensions. 🚫 Server Hardening: Specialized .htaccess rules restricting script execution in /uploads/ and blocking direct access to core files. 🤖 Abuse Prevention: Integrated rate limiting and honeypot traps on public endpoint submissions. 🔐 Enforced Authorization: Server-side capability checks on every route and action.

Requirements

💻 System Requirements

• PHP 8.0 or later with PDO MySQL and Fileinfo
• MySQL 5.7 or later, or MariaDB 10.2 or later
• PHP web hosting with writable upload folders
• Apache; mod_rewrite is optional for sitemap aliase

Instructions

🛠️ Step-by-Step Installation

🗄️ Create Database : Open cPanel ➔ MySQL Databases, create a new database, and assign a user with full privileges. 📥 Import Schema : Open phpMyAdmin, select your database, and import the database/schema.sql file. 📁 Upload Files : Transfer the project files to public_html (or your target directory) via FTP or cPanel File Manager. ⚙️ Configure Database Connection : Edit config.php with your database credentials (host, name, user, password) and set your site URL. 🔐 Set Permissions : Ensure the uploads/ directory and its subfolders are set to writable (755 permissions). 🚀 Run First-Time Setup : Navigate to install.php in your browser, create your Super Admin account, and delete install.php immediately after completion. 🎉 Log In : Access your dashboard at admin/login.php to start configuring your directory!