Fashionable Self-Hosted PHP Weblog Platform
Poly is a contemporary, self-hosted PHP weblog platform engineered for builders, content material creators, startups, and small groups who need full possession of their publishing system with out the overhead of huge frameworks or pointless dependencies.
Constructed fully with vanilla PHP 8+ and MySQL, Poly delivers a clear MVC-inspired structure, strict safety requirements, and a modular design that’s straightforward to grasp, lengthen, and preserve. There isn’t any Composer, no Node.js, no construct instruments, and no hidden framework magic, simply structured, readable code that works on just about any shared internet hosting surroundings.
Poly was designed with long-term maintainability in thoughts. Each part, from authentication and permissions to media dealing with and templating, follows constant patterns and greatest practices. The codebase is organized for readability, making it perfect for builders who need full management over customization with out combating in opposition to a heavy framework.
The platform combines highly effective publishing instruments with enterprise-level security measures. It contains granular role-based entry management (RBAC), audit logging, strict add validation, encrypted SMTP credentials, Content material Safety Coverage (CSP) safety, price limiting, and hardened authentication flows. Poly is constructed not solely to publish content material, however to take action securely.
On the frontend, Poly encompasses a Blade-inspired template engine that permits builders to create trendy themes utilizing acquainted syntax like @extends, @part, and @embody. Templates may be swapped or redesigned with out modifying backend logic, giving full artistic freedom for constructing {custom} weblog experiences.
The admin dashboard gives a clear {and professional} interface for managing posts, classes, tags, customers, feedback, media, and system settings. Superior insights akin to put up reputation, response analytics, exercise feeds, and content material distribution statistics give directors significant visibility into web site efficiency.
Whether or not you might be launching a private weblog, a content-driven startup, a information base, or a distinct segment publishing platform, Poly offers you the flexibleness of a custom-built system with the simplicity of a plug-and-play answer.
Add, set up by way of the guided net installer, and you might be able to publish, absolutely self-hosted, absolutely customizable, and absolutely beneath your management.
Key Options
Wealthy Content material Modifying
- WYSIWYG editor with full formatting help
- Multi-category and multi-tag put up group
- Featured photographs built-in with the media library
- Draft and publish workflow
- Auto-generated Search engine marketing-friendly slugs
- Per-post remark allow/disable toggle
Media Library
- Drag and drop uploads (JPG, PNG, GIF)
- Computerized EXIF metadata stripping for privateness
- Inline editor uploads with out leaving the editor
- Media utilization monitoring and orphan detection
Person Administration & RBAC
- Granular role-based entry management with 29 permissions
- Create limitless {custom} roles (Admin, Editor, Writer, Moderator, and so forth.)
- Per-action permission checks throughout all the admin panel
- Admin-to-user impersonation for debugging and help
Remark System
- Nested and threaded remark replies
- Moderation queue with approve/reject workflow
- Optionally available login requirement for commenting
- Visitor commenting with title and e-mail
- E-mail notifications on approval or rejection
- Fee limiting and spam safety
Publish Reactions
- Response system (like, love, wow, and so forth.)
- IP-based deduplication to stop abuse
- Hashed IP storage for privateness safety
Admin Dashboard
- At-a-glance stats: posts, feedback, customers, media, classes, tags
- Most considered posts, most reacted posts, and high authors
- Latest exercise feed (posts, feedback, media, customers)
- Class and tag distribution insights
Website Settings
- Website title, base URL, timezone, and admin e-mail
- SMTP configuration with AES-256-GCM encrypted password storage
- Registration toggle with configurable default position
- Remark insurance policies (international toggle, login requirement, default standing)
- Reverse proxy help (Cloudflare, Nginx)
Safety
- CSRF safety on all kinds
- Bcrypt password hashing with computerized rehashing
- Content material Safety Coverage (CSP) with per-request nonces
- Safety headers: HSTS, X-Body-Choices, X-Content material-Kind-Choices
- Session fixation prevention
- Fee limiting on login, registration, password reset, and feedback
- Safe uploads: extension allowlist, MIME checks, magic byte verification
- Timing-safe authentication to cut back consumer enumeration danger
- Audit logging for admin actions
Blade-Impressed Template Engine
- Escaped output: {{ }} and uncooked output: {!! !!}
- Layouts: @extends, @part, @yield
- Partials: @embody
- Management constructions: @if, @foreach, @isset, @empty
- Swap templates with out touching backend PHP logic
Zero-Dependency Set up
- No Composer, npm, or construct step
- Internet-based installer with 6 guided steps
- Auto-generates a safe utility secret
- Creates the database schema robotically
- Runs on shared internet hosting (PHP 8.0+ and MySQL)
Necessities
- PHP 8.0+
- MySQL 5.7+ or MariaDB 10.3+
- Apache with mod_rewrite
- Extensions: pdo_mysql, mbstring, gd, openssl, fileinfo
What’s Included
- Full supply code (unencrypted)
- Internet-based installer
- Database schema (SQL)
- Default weblog template
- Admin panel template
- Full HTML documentation
- Bundled PHPMailer library
