Built by 
About this software
About Rently Marketplace
Rently is a server-rendered ASP.NET Core 10 MVC application on Microsoft SQL Server, using ADO.NET with parameterised SQL and no EF. Customers browse and book items, approved members list their own items, and staff run a back office with one controller per module (bookings, listings, members, payments, CMS, reports and more). Payments run through Stripe Checkout with signed webhooks, or a Sandbox mode. The UI is available in English and Arabic (RTL). The package includes full source, Docker Compose and a setup guide, a schema script, and unit and integration test projects.
Why Rently Marketplace
What makes it better
than the alternatives
- 01
Three portals, one codebase
Customer, Member (lister) and Admin areas each inherit their own base controller with an authorisation policy, enforced by a reflection-based test.
- 02
Server-side sessions
The auth cookie points to a session row, so logout, password change, suspension or idle timeout revokes access immediately.
- 03
Money handling built in
Deposits held as liabilities, a commission ledger, earnings, payouts, VAT and PDF invoices, plus Stripe webhooks verified by signature.
- 04
Admin-editable operations
Stripe, SMTP and SMS settings are entered in the admin Settings and stored encrypted, with CMS pages, FAQ, banners and promotions editable without code.
- 05
Security and deploy hygiene
CSP and security headers, global anti-forgery validation, rate-limited auth endpoints, locked NuGet dependencies, no default admin password, and a first-run /setup gate.
Public Catalog & Checkout
- Browse by category
- item pages with quote and availability
- Checkout with Stripe or Sandbox payments
- Public CMS pages
- help and contact form
- English and Arabic (RTL) with a language switch
Customer Portal
- Bookings
- payments
- refunds
- favourites and reviews
- Notifications
- messages
- issues and claims
- Profile
- security and email/mobile verification
- Option to apply to become a member
Member (Lister) Portal
- Create and manage listings and locations
- Handle booking requests
- handovers and extensions
- Earnings
- payouts and bank details
- Messaging
- reviews and notifications
Booking Engine
- Quotes
- availability checks and a booking state machine
- Pickup and return handling with condition notes
- Cancellations with refund split
- late fees and extensions
- Disputes and support cases
- including overdue escalations
Finance
- Deposits and deposit transactions
- Commission rates and ledger
- with a 30-day commission chart
- Earnings
- payouts and refunds
- VAT and PDF invoices
Admin Back Office
- Role-based permissions with staff and roles management
- Categories and subcategories with custom fields
- Members
- users
- listings and inventory management
- Global search
- audit log and backup settings
CMS & Notifications
- Pages with version history and restore
- homepage sections
- banners
- featured items and promotions
- FAQ and footer link management
- SMS and in-app notifications from editable templates
Reports & Operations
- 35+ reports with CSV and Excel export
- Server-side paging
- sorting and filtering for data tables
- Background worker running every minute
- Maintenance mode and friendly database-down page
| Language | Version | Framework | Used for | Share of code |
|---|---|---|---|---|
| C# | — | — | Web, API, admin | 51.2% |
| C# (Razor) | — | — | Web pages | 22.5% |
| SQL | — | — | Database | 21.9% |
| CSS | — | — | Styling | 3.1% |
| JavaScript | — | — | Front-end | 1.3% |
| Shell | — | — | Scripts | 0.1% |
- Primary language
- C# on .NET 10
- Framework
- ASP.NET Core 10 MVC (server-rendered Razor, no SPA)
- Database
- Microsoft SQL Server 2019+ (ADO.NET, parameterised SQL, no EF)
- Authentication
- Cookie sign-in with server-side session rows; separate customer and staff schemes; BCrypt password hashing; email verification; mobile OTP; password reset; role-based permissions
- Licence
- Single-site
- Screens
- 120
- Database tables
- 89
- Supported languages
- English and Arabic, with RTL layout (rtl.css, Arabic resource files)
- Browser support
- Modern evergreen browsers (Bootstrap 5 pages); no formal browser test matrix in the digest
| Minimum | Recommended | |
|---|---|---|
| CPU | 2 vCPU | 4 vCPU |
| RAM | 4 GB (app and SQL Server 2019 on one host) | 8 GB |
| OS | Linux or Windows; .NET 10 runtime; SQL Server 2019+ | Linux or Windows; .NET 10 runtime; SQL Server 2019+ |
| Est. monthly hosting | $25 | $25 |
Set the required secrets first, then start the full stack from the package root: ```bash export MSSQL_SA_PASSWORD='<strong password>' export RENTLY_DB_PASSWORD='<strong password>' docker compose up -d --build ``` The site is served on https://localhost. Open /setup to create the first administrator.
Create the database from the schema script, then publish the web app: ```bash sqlcmd -S <server> -U <admin login> -P '<password>' -C -b -I -i database/schema.sql dotnet publish "NET Project/Rently/Rently.csproj" -c Release -o ./publish ``` Set ConnectionStrings:Rently, Rently:PublicBaseUrl and the key and upload paths in appsettings, then run the published app behind HTTPS. Details are in HowToSetup.md.
Quality report
Manually reviewedHow to read the quality report
What this is. Every project on Vibe96 goes through an automated audit of its source code before a reviewer in Dubai checks it by hand. The score is out of 100; 75 is the minimum to be listed, and any single failing check blocks a listing regardless of the score.
- Security
- No real credentials in the code, every data-changing route protected, admin areas role-gated, no SQL built from user input.
- Code structure
- A developer can navigate and extend it: clear module boundaries, no giant files, little copy-paste.
- Docs & completeness
- The setup guide, example config, schema and required files the builder committed to are actually in the archive.
- Dependency health
- Packages pinned, no known critical vulnerabilities, no abandoned libraries in production paths.
- Build & deploy
- A clean machine can restore, build and start it by following the shipped instructions.
Warnings are problems that didn't block the listing; they stay visible here until a later version clears them. The audit reads the code — it does not run it — so always try the live demo before you buy. Lines of code are counted from the same audited archive.
Reviewer notes (5 minor)
No real credentials found; weak default db passwords and published demo password ship to buyers; well-organised mvc layout, but several god-sized files and repeated controller helpers weigh the score down; parameterised ado.net throughout; schema and per-user scoping not verifiable from the digest; auth design looks solid, but most of 328 endpoints could not be traced; a few concrete gaps found. None of these stop the software from working; the developer has been told and improvements come in a future update.
Versions & updates
No updates yet. New versions appear here with a changelog.
Buyers receive updates free for 1 year.
What you get
- </>Full source codeThe complete audited source, delivered as a download from your account. No obfuscation.
- ▤DocumentationSetup guide, architecture notes, CLAUDE.md and AGENTS.md.
- ↻One year of updatesEvery new version the builder publishes, free for 12 months.
- ♧30 days of supportInstallation and defect support through Vibe96 tickets.
