Built by 
Why NexaTech
What makes it better
than the alternatives
- 01
Pixel-perfect bilingual storefront
Exact English & Arabic design with full RTL support.
- 02
Fully editable admin
Manage menus, pages, banners, sections and content in both languages.
- 03
UAE-ready checkout
Stripe, Tabby, COD and Aramex shipping from one admin panel.
- 04
Role-based staff access
Owner, Manager, Orders and Content roles with tested permissions.
- 05
Fast & launch-ready
SEO, structured data, sitemap, Docker setup and demo data.
Storefront
- homepage with 11 sections (hero slider
- flash deals with countdown
- best-seller tabs
- featured products
- brands)
- mega menus
- instant search
- category listings with
brand/price/rating/stockfilters - product pages with gallery
- variants
- specifications
- labels and reviews
- wishlist
- recently viewed
Languages & currency
- English and Arabic with full RTL
- USD and AED currency switcher
- all storefront texts editable per language
Cart & checkout
- cart drawer
- 3-step checkout
- discount codes
- countries and delivery rates
- Stripe card payments
- Tabby pay-later
- cash on delivery
- order confirmation and tracking
Customer account
- registration and login
- order history
- reorder
- saved addresses
- profile
- returns
- "Notify me" back-in-stock emails
Catalog admin
- products with variants
- specifications
- labels and media library
- categories
- brands
- inventory and stock adjustments
- CSV import/export
Orders admin
- order management
- fulfilment
- Aramex shipments and labels
- refunds
- returns
- draft orders
- payment links
- invoices
Marketing
- discount codes
- newsletter subscribers
- abandoned-cart email sequence
- reviews moderation
Content
- pages (About
- Careers
- Contact
- FAQ
- Store locator
- policies)
- menus
- banners
- homepage sections
- theme texts and pictures
- HTML editor with images
- video and tables
Settings
- store details
- logos
- languages
- currencies
- allowed countries
- tax
- shipping
- payments
- email templates
- SMTP
- reCAPTCHA
Team & security
- Owner
- Manager
- Orders and Content roles
- activity log
- login lockout
- read-only demo mode
Analytics
- sales
- orders
- conversion funnel
- missed searches
SEO & performance
- structured data
- sitemap
- canonical and hreflang tags
- compressed assets
- browser caching
| Language | Version | Framework | Used for | Share of code |
|---|---|---|---|---|
| PHP | — | — | Web, API | 79% |
| CSS | — | — | Styling | 12.4% |
| SQL | — | — | Database | 4.5% |
| JavaScript | — | — | Front-end | 3.2% |
| HTML | — | — | Front-end | 0.9% |
| Shell | — | — | Scripts | 0.1% |
- Primary language
- PHP 8.x
- Framework
- Laravel
- Database
- MySQL 8.0 / MariaDB 10.6
- Authentication
- Email + password (separate admin and customer logins), role-based admin access, login lockout
- Licence
- Single-site
- Screens
- 116
- Database tables
- 57
- Supported languages
- English, Arabic (RTL)
- Browser support
- Chrome 110+, Safari 16+, Edge 110+, Firefox 115+
| Minimum | Recommended | |
|---|---|---|
| CPU | 2 vCPU | 4 vCPU |
| RAM | 4 GB | 8 GB |
| OS | Ubuntu 22.04 or Windows Server 2019+, .NET 10, SQL Server 2019+ | Ubuntu 22.04 or Windows Server 2019+, .NET 10, SQL Server 2019+ |
| Est. monthly hosting | $20 | $20 |
cp .env.example .env # set DB_PASSWORD, ADMIN_EMAIL, ADMIN_PASSWORD in .env docker compose build docker compose run --rm app php artisan key:generate --show # paste the key into .env as APP_KEY docker compose up -d docker compose exec app php artisan db:seed --force docker compose exec app php artisan store:import-nexatech-images # Shop: http://localhost:8080 · Admin: /admin # Domain + HTTPS: docs/docker-deploy.md
cp .env.example .env # set APP_URL, database details, ADMIN_EMAIL, ADMIN_PASSWORD in .env composer install --no-dev --optimize-autoloader npm ci && npm run build php artisan key:generate php artisan migrate --force php artisan db:seed --force php artisan storage:link php artisan store:import-nexatech-images php artisan optimize # web root = the public folder; add the scheduler cron: # * * * * * cd /path/to/site && php artisan schedule:run >> /dev/null 2>&1 # Full guide: HowToSetup.md
Quality report
Manually reviewedHow to read the quality report
What this is. Every project on Vibe96 goes through an automated audit of its source code before a reviewer in Dubai checks it by hand. The score is out of 100; 75 is the minimum to be listed, and any single failing check blocks a listing regardless of the score.
- Security
- No real credentials in the code, every data-changing route protected, admin areas role-gated, no SQL built from user input.
- Code structure
- A developer can navigate and extend it: clear module boundaries, no giant files, little copy-paste.
- Docs & completeness
- The setup guide, example config, schema and required files the builder committed to are actually in the archive.
- Dependency health
- Packages pinned, no known critical vulnerabilities, no abandoned libraries in production paths.
- Build & deploy
- A clean machine can restore, build and start it by following the shipped instructions.
Warnings are problems that didn't block the listing; they stay visible here until a later version clears them. The audit reads the code — it does not run it — so always try the live demo before you buy. Lines of code are counted from the same audited archive.
Reviewer notes (4 minor)
Good structure with minor duplication and some oversized service classes; database access mostly safe; minor schema gaps (missing indexes on foreign keys); weak default demo password and several placeholder credentials need rotation guidance; strong admin/auth guards; minor ownership gaps on customer reads (orders, addresses, returns). None of these stop the software from working; the developer has been told and improvements come in a future update.
Versions & updates
Release historyCurrent version
Updates in the last 90 days
Buyers
Updates included
-
1.3.0 Version Current23 Oct 2026 ✓ Reviewed & audited
- New: send a test email from Settings → Mail server, with plain-words help when it fails
- New: the store logo is built into emails, so it shows even when pictures are blocked
- New: HTML editor for pages and products (headings, lists, links, pictures, video, tables, full screen, Visual/HTML switch)
- New: Backup & clean-up in Settings: database backups on demand or daily, weekly or monthly, with download
- New: clean-up of old carts, sessions and unused files, always after a fresh backup
- New: Analytics → Traffic: visitors, world map, top countries, live visitors and bot filtering, with no IP addresses stored
- Fixed: landing page fonts and icons were missing from the package
- Fixed: schema.sql now creates exactly the same tables as php artisan migrate
-
1.2.0 Version 7 Oct 2026 ✓ Reviewed & audited
- New 404 page in the NexaTech design, with search, popular categories, and Arabic/RTL support
- New demo-history command: fills a year of realistic orders, customers, refunds, returns, subscribers and analytics so reports look real
- Order numbers now use the NX- prefix
- Order, invoice and return pages rate limited against token guessing
- Order tracking: signed-in customers only find their own orders
- Deactivated customers are signed out on their next click
- Password reset written once and shared by admin and customer sign-in; only known password brokers accepted
- Secure tokens and generated passwords from one central helper
-
1.1.0 Version 6 Oct 2026 ✓ Reviewed & audited
- New: full Arabic storefront — theme text, products, pages, menus and demo content
- New: Country → State/Region → City addresses, with delivery countries chosen in settings
- New: wide full-screen admin layout on large monitors
- New: Furnivo-designed 404 page with search and collection tiles
- New: store:demo-history — two years of sample orders and reports for demo shops
- New: ALLOW_FRAMING_FROM — show the public pages in a marketplace's live-demo iframe; admin never framable
- New: white logo in the admin top bar
- Fix: language and currency dropdowns show an arrow and readable options
-
1.0.0 First release 4 Oct 2026 ✓ Reviewed & audited
How updates work: versions add features and go through the full AI audit and human review. Patches are small fixes, audited and checked by a reviewer before release. Buyers get every update free for 1 year and are emailed the how-to-apply steps.
What you get
- </>Full source codeThe complete audited source, delivered as a download from your account. No obfuscation.
- ▤DocumentationSetup guide, architecture notes, CLAUDE.md and AGENTS.md.
- ↻One year of updatesEvery new version the builder publishes, free for 12 months.
- ♧30 days of supportInstallation and defect support through Vibe96 tickets.
