Built by 
About this software
About Vendora: Multi-Vendor Marketplace
Vendora is a multi-vendor e-commerce platform built on Laravel 12 and Filament 4. Customers browse products from multiple approved vendors, add items to a single cart, and check out once while the platform splits orders by vendor. Each vendor manages their own products, variants, stock and order fulfilment through a dedicated seller panel. The admin controls vendor approvals, sets per-vendor commission rates, manages categories and coupons, and processes payouts after delivery.
Why Vendora: Multi-Vendor Marketplace
What makes it better
than the alternatives
- 01
Commission and vendor earning stored on every
Order line at purchase time, so changing a rate never rewrites old orders
- 02
Stock is checked and decremented under row locks
Inside a transaction, so concurrent buyers cannot oversell
- 03
One checkout across several shops
Each vendor packs, ships and tracks only their own lines and the order status follows its lines
- 04
Vendors withdraw only delivered earnings
Payout requests are checked against the balance and a minimum, then paid with a reference or rejected
- 05
Demo mode with a landing page and one-click signed
Logins for administrator, vendor and customer; no front-end build and no Node.js
Storefront
- home page with categories
- featured products
- new arrivals and shops; shop page with search
- category
- price range and sort (newest
- popular
- top rated
- price); product pages with variants
- image gallery
- stock hints and verified reviews; a page for every shop
Cart and checkout
- session cart that stores only product ids and quantities (prices come from the database)
- coupon codes (percent or fixed
- minimum spend
- usage limit
- expiry)
- guest or account checkout
- cash on delivery or bank transfer
- flat shipping fee with an optional free-shipping threshold
Orders
- order page with progress tracking reached through a private 32-character link that expires (default 30 days)
- lookup by order number plus e-mail that rotates the link
- customer account with order history
- reviews only for delivered items (one per product)
Seller centre (/seller)
- dashboard with available and pending earnings
- sales chart and low stock; products with variants (own price and stock)
- images and draft or published status; order lines to pack
- ship with a tracking code
- deliver or cancel; payout requests and history; shop settings with logo
- city
- about text and payout details
Admin panel (/admin)
- dashboard with gross sales
- platform commission
- products and items that need review; vendors (approve
- suspend
- own commission rate); categories with parents; products (publish
- feature
- delete); orders (mark paid
- cancel unshipped orders with stock returned); coupons; review moderation; payouts (mark paid with a reference or reject with a reason); users and roles; settings (store name
- currency symbol
- default commission
- minimum payout
- shipping
- bank details)
Money rules
- commission
- price and vendor earning stored per line; coupons funded by the platform so vendors earn on the listed price; vendor balance computed from delivered lines minus payouts
- never cached; payout requests serialised per vendor
Security and quality
- roles admin
- vendor and customer with a policy on every resource
- vendor panel queries scoped to the shop
- throttled forms with honeypots
- no default password
- role and active flag not mass assignable
- 52 Pest tests
- Docker image with MySQL and HTTPS
database/schema.sqland seed.sql- sample marketplace seeder (5 shops
- 33 products
- orders
- reviews
- coupons)
| Language | Version | Framework | Used for | Share of code |
|---|---|---|---|---|
| PHP | — | — | Web, API | 90.7% |
| SQL | — | — | Database | 6.2% |
| CSS | — | — | Styling | 2.5% |
| Shell | — | — | Scripts | 0.7% |
- Primary language
- PHP 8.2+
- Framework
- Laravel 12 + Filament 4
- Database
- MySQL 8 / MariaDB 10.6+ (SQLite works for a quick try)
- Authentication
- Session login for admin, vendor and customer with policies per resource; vendors are approved by an admin before the seller panel opens
- Licence
- Single-site
- Screens
- 45
- Database tables
- 19
- Supported languages
- English only
- Browser support
- Modern browsers (Chrome, Firefox, Safari, Edge)
| Minimum | Recommended | |
|---|---|---|
| CPU | 1 vCPU | 2 vCPU |
| RAM | 2 GB RAM | 4 GB RAM |
| OS | PHP 8.2+ (Docker: 8.4), MySQL 8 / MariaDB 10.6+, Composer. No Node.js. | PHP 8.2+ (Docker: 8.4), MySQL 8 / MariaDB 10.6+, Composer. No Node.js. |
| Est. monthly hosting | $10 | $10 |
```bash cat > .env <<ENV APP_KEY=base64:$(openssl rand -base64 32) DB_PASSWORD=$(openssl rand -hex 16) ADMIN_EMAIL=you@yourcompany.com ADMIN_PASSWORD=$(openssl rand -hex 12) APP_URL=http://localhost:8080 SEED_DEMO_DATA=true ENV docker compose up -d --build ```
```bash DBPASS=$(openssl rand -hex 16) sudo mysql -e "CREATE DATABASE vendora; CREATE USER 'vendora'@'localhost' IDENTIFIED BY '$DBPASS'; GRANT ALL ON vendora.* TO 'vendora'@'localhost';" unzip vendora.zip -d /var/www/vendora && cd /var/www/vendora composer install --no-dev && cp .env.example .env php artisan key:generate # then edit .env: APP_URL, DB_PASSWORD, ADMIN_* php artisan migrate --force --seed && php artisan storage:link ``` Nginx config and cron: see HowToSetup.md.
Quality report
Manually reviewedHow to read the quality report
What this is. Every project on Vibe96 goes through an automated audit of its source code before a reviewer in Dubai checks it by hand. The score is out of 100; 75 is the minimum to be listed, and any single failing check blocks a listing regardless of the score.
- Security
- No real credentials in the code, every data-changing route protected, admin areas role-gated, no SQL built from user input.
- Code structure
- A developer can navigate and extend it: clear module boundaries, no giant files, little copy-paste.
- Docs & completeness
- The setup guide, example config, schema and required files the builder committed to are actually in the archive.
- Dependency health
- Packages pinned, no known critical vulnerabilities, no abandoned libraries in production paths.
- Build & deploy
- A clean machine can restore, build and start it by following the shipped instructions.
Warnings are problems that didn't block the listing; they stay visible here until a later version clears them. The audit reads the code — it does not run it — so always try the live demo before you buy. Lines of code are counted from the same audited archive.
86/ 100
Automated audit score
✓ Passed the auditReviewer notes (3 minor)
Dependencies mostly current; a few outdated packages but no known critical vulnerabilities; several unindexed foreign keys and missing where clauses in delete operations; strong authentication on mutating endpoints; minor ownership gaps on read-only routes. None of these stop the software from working; the developer has been told and improvements come in a future update.
Versions & updates
No updates yet. New versions appear here with a changelog.
Buyers receive updates free for 1 year.
What you get
- </>Full source codeThe complete audited source, delivered as a download from your account. No obfuscation.
- ▤DocumentationSetup guide, architecture notes, CLAUDE.md and AGENTS.md.
- ↻One year of updatesEvery new version the builder publishes, free for 12 months.
- ♧30 days of supportInstallation and defect support through Vibe96 tickets.
