On this page
Operation & Security · Initial installation
dbxapp securely installed
The dbxapp installation assistant guides you through seven controlled steps, from the system check to the first sign-in. It separates the delivered code from local access data and changes database structures only after successful validation.
Reviewed for dbxapp 4.5.3Requirements, assistant, DB3/server paths, permissions, email, and acceptance were revalidated against the released build on August 22, 2026.
Before you begin
Create a backup, use an empty destination directory and have a personal admin password ready. Access data never belongs in a public release or repository.
Conditions
Mandatory conditions
- Web server with PHP 8.2 or later.
- The PHP extensions Session, PDO, JSON, Filter, Hash and OpenSSL.
- Write permissions of the web server for the local configuration and the directories
filesandtmp. - Installed component dependencies or the file supplied with the package
vendor/autoload.php. - For the selected database destination, the appropriate PDO driver.
Recommended extensions
For image processing and media analysis, GD and Fileinfo are recommended. The assistant shows mandatory checks and recommendations separately. A missing mandatory requirement blocks the next step; an optional recommendation can be addressed later.
Deploy the files and open the assistant
- Unpack the releaseUnpack the full package into your own web directory. Do not mix it with an older installation.
- Check the document rootThe web server must point to the directory containing
index.php. HTTPS is highly recommended for production installations. - Configure write permissionsThe web server requires write access to
dbx/modules/dbx/cfg/config.local.php,filesandtmp; the remaining source code should only be readable. - Open the homepageA new installation has the installation counter
install = 1and automatically redirects to the assistant.
The seven installation steps
- 1 · System testPHP version, mandatory and optional extensions, composer autoload and write permissions are checked. Red mandatory errors must first be corrected.
- 2 · Website & DesignSet page title, brand name, claim, standard language, time zone, and user and admin design.
- 3 · Data storageUse supplied DB3 databases, bind all DDs to a tested PDO target or retain existing per-DD bindings.
- 4 · Structures & DataDB3 is only checked for completeness. For a PDO target, schemas are synchronized only after successful connection; data transfer requires additional explicit confirmation.
- 5 · AdministrationAssign a personal password to the
adminaccount. Both entries must match and contain uppercase and lowercase letters, a number, and a special character; twelve or more characters are recommended. - 6 · EmailSet global mail mode, transport, SMTP data, visible sender, envelope sender and allowed sender domains.
internalis the secure delivery state without sending messages over the network. - 7 · Check and startReview the summary, which must not contain secrets and complete the installation. Only then write dbxapp locally
install = 0.
DB3 or PDO?
DB3 · fastest entry
The supplied databases remain in their intended places. The assistant reads and checks them without importing domain data.PDO · Central database server
MySQL/MariaDB, PostgreSQL and Microsoft SQL servers are supported. Connection, database system, schema structure and optional data transfer remain separate confirmation steps.Mixed · decide per DD
Individual data definitions can lie on different DB3 or SQL targets. Changing a binding never automatically moves data.
Security boundary
Server, SMTP, and other secrets are kept exclusively in non-versioned
config.local.php files. Summary, logs and CMS documentation must not be included.
Immediately after installation
- With the user
adminand the personal password assigned in step 5. - Under System → System Self-Test, run the quick test first and then the complete test.
- Verify the design, default language, time zone, mail mode and database bindings in the admin area.
- Create a full backup of the local configuration, files and all bound databases.
- For production operation, set up HTTPS, restrictive file rights and an external backup storage.
If the installation does not continue
- Assistant appears again and again: Write permissions and check the contents of
dbx/modules/dbx/cfg/config.local.php. The installation is complete wheninstall = 0can be stored. - Database connection fails: Check the host, port, database name, PDO driver, and user permissions. Without a successful destination connection, no schema or data transfer starts.
- Blank page or server error PHP version, extensions,
vendor/autoload.php, web server log andfiles/dbxError.logcheck. - Admin registration fails: Do not bypass the assistant through direct database changes. Repeat step 5 with a new personal password.