Introduction to Encrypt CMS

Encrypt CMS is a modern, fast, secure, and installable Content Management System engineered from the ground up for high-performance publishing, modular extensibility, and enterprise-grade security boundaries.

Built with PHP 8.2+, MySQL/MariaDB PDO, server-rendered templates, and vanilla JavaScript, Encrypt CMS delivers an enterprise dashboard experience while remaining completely decoupled from external cloud lock-in.

Core Architectural Principles

1. Zero Production Node.js or Build Dependencies

Unlike monolithic JavaScript or heavy containerized CMS platforms, Encrypt CMS runs natively on standard Apache, Nginx, cPanel, and 20i StackCP shared hosting environments. It requires zero Node.js processes, Vite builders, or root/VPS access on your production web host.

2. Strict Core and Extension Decoupling

The core application (encrypt-cms-core) is completely self-contained. Central licensing, commercial extension updates, and customer portal backends operate as independent services. Core CMS operation and core security updates are strictly license-free and never depend on third-party availability.

3. Asymmetric Cryptographic Licensing

Commercial add-ons and premium ecosystem extensions utilize state-of-the-art Ed25519 asymmetric cryptography. License verification occurs locally using cached signed tokens (48-hour cache) and an offline 14-day grace period, ensuring your live site never goes down even during transient network outages.

4. Defense-in-Depth Security

• Strict parameterized queries with native PDO prepared statements (PDO::ATTR_EMULATE_PREPARES => false) to eliminate SQL injection vectors.
• Automated HTML output escaping via $e() helper functions.
• Cryptographically random CSRF token protection for all mutation requests.
• Built-in brute-force defense with rate limiting on authentication and sensitive endpoints.
• Archive extraction security enforcing pre-extraction SHA-256 validation, path traversal prevention, and Zip Slip defenses.

Key Capabilities at a Glance