What Is BulkWork Suite Digital Download & Online Service Store?
BulkWork Suite is a self-hosted PHP business platform designed for digital sellers, creators, and small businesses who want to own their infrastructure.
What Is BulkWork Suite Digital Download & Online Service Store?
BulkWork Suite is a self-hosted PHP business platform designed for digital sellers, creators, and small businesses who want to own their infrastructure. It is not Laravel — it's a custom, lightweight PHP MVC application with a theme layer, addon/hook system, REST API (v1 & v2), PWA support, and zero monthly fees. You install it on your own server, keep full control of your data, and never pay a SaaS subscription.
This is a complete store ecosystem with a built-in customer portal, admin panel, affiliate system, blog, ticketing, documentation (knowledge base), finance/accounting, tax compliance, push notifications, multi-language support, newsletter popup campaigns, ad management, store modes, and much more.
Core Platform Features
Store Front (Public)
- Theme-driven product grid with category filtering (by slug) and full-text search
- Responsive design (Bootstrap 5), mobile-first layout, dark navbar
- Product cards with type badges, sale badges, ratings, version badges, and category labels
- Partner/client logo carousel on homepage
- Custom Services section + Portfolio showcase section
- "Most Rated Products" highlight section
- Multilingual: English, Portuguese (Brazil), Spanish with flag-based language selector
- Full schema.org structured data (Organization, WebSite, SearchAction, Product, FAQ, BreadcrumbList, AggregateRating)
- hreflang tags for international SEO
- LLMs.txt support (AI/LLM discovery files in EN, BR, ES — both concise and full versions)
- Dynamic XML sitemap with pagination and hreflang alternates
- Full Progressive Web App — users can install your store as a native-like app on any device (Android, iOS, desktop)
- Image optimization proxy with responsive srcset, lazy loading, WebP support
Product Pages
- Full product detail page: title, description, gallery, screenshots, requirements, changelog
- Multiple license types: regular license, extended license, pre-order pricing
- Domain pack pricing (buy extra domain activations: 1, 3, 5, 10, or unlimited)
- Holiday promotion auto-application (date-range discounts, per-product or global)
- Service product handling (custom themes, server setup, other services)
- Service agreement modes (standard vs exclusive with pricing)
- Pre-sale Q&A comments with CAPTCHA, honeypot, rate limiting, StopForumSpam validation
- Customer reviews with star ratings and aggregate display
- Product FAQs with FAQ schema JSON-LD
- "You May Also Like" product recommendations (same category, popular)
- Related blog posts and portfolio projects per product
- Free/paid installation add-to-cart
- Previous/next product navigation
- Rich SEO: meta tags, Open Graph, Twitter Cards, canonical URLs, JSON-LD (Product, Offer, AggregateOffer, AggregateRating, MerchantReturnPolicy, ShippingDetails)
Shopping Cart
- Session-based cart stored in PHP session
- Add/remove items, clear cart, quantity adjustment
- Supports products, services, installation addons, domain packs, agreement modes
- Real-time cart total calculation
- Theme-rendered cart page
Checkout System
- Billing form: name, email, phone, address, city, state, zip, country
- Automatic tax calculation based on billing address (country/state via tax rules)
- Payment methods: Stripe (Checkout Sessions, cards only, Apple Pay, Google Pay), PayPal (Smart Buttons), Free checkout ($0 orders)
- Customer auto-creation for new emails, existing customer lookup for returning buyers
- Affiliate referral tracking on order (via cookie or URL parameter)
- Stripe webhook + PayPal webhook for async payment confirmation
- Checkout success page with license generation, service request creation, commission sync, and confirmation email
- Security: raw card field detection, CSRF protection, affiliate commission tracking
Customer Portal
- Dashboard: Welcome banner, quick actions (Services, Docs, Tickets, Bug Report, Feature Request, Store), stat cards (Purchases, Active Licenses, Downloads, Open Tickets, Services), recent orders list
- Orders: View all paid orders, individual order details (items, pricing, payment info, download links, license keys), invoice download
- Licenses: View all licenses per product (status badge, domain, license type, expiry, activation limit), domain pack usage display, install URL management, license certificate download
- Downloads: Product download area with version history, download count tracking, latest version indicator
- Services: Service request list with status tracking, delivery file downloads, service agreement review/acceptance
- Support Tickets: Create tickets with subject, message, priority, product selection; view ticket status and message thread
- Bug Reports: Submit bugs with title, description, severity, product selection; track resolution status
- Feature Requests: Submit and vote on feature requests; track implementation status
- Documentation: Browse knowledge base articles by category, full article view, PDF export (per article or per category)
- Reviews: Submit product reviews (rating 1-5, title, text), review history
- Affiliate Dashboard: Affiliate profile management (code, PayPal email), stats (clicks, conversions, pending/approved/paid commissions), referral URL generator per target type, asset/banner display
- Settings: Update profile (name, email, password), email preferences
- API Sessions: View/manage API access tokens, API documentation
- GDPR Tools: Account data export, account deletion request
- Claim Purchase: Claim existing purchases by email/order number
- Email Preferences: Newsletter/notification toggle
- Password Reset: Forgot password and email verification flows
Admin Panel
Dashboard
- 10 stat cards: Paid Orders, Total Revenue, Customers, Products, Open Tickets, Bug Reports, Tax Collected (this month), Feature Requests, Pending Reviews, Pending Comments
- Recent orders table (last 8)
- Open tickets list (last 8 non-closed)
- Tax filing alerts (upcoming due dates within 14 days)
- Recurring expense alerts (due within 7 days)
- Planner mini-stats (overdue, due today, in progress, upcoming, blog ideas, open items)
Content
- Products: Full CRUD with rich editor (AI content generation via OpenAI), product types (script/addon/theme/patch/other), status (published/draft/coming_soon/preorder), pricing (regular/sale/extended/preorder), license settings (lifetime/expiring), version tracking, screenshot gallery, product FAQs, changelog, documentation URL, demo URL, SEO audit badge, domain pack pricing, service agreement modes, installation settings, featured image, category assignment, pack pricing
- Categories: Product categories CRUD with sort order
- Portfolio / Projects: Project showcase with images linked to products
- About Page: Full about page content editor with team member management (photos, roles, bio), social links, mission/vision text
- Product FAQs: Add/edit/reorder FAQs per product with question, answer, sort order, active flag, llms.txt inclusion toggle
- SEO / AIO / GEO Audit: Full page-level auditing with score calculation, issue detection (missing meta tags, broken links, image alt text, heading structure), batch scores for products and blog, recommendations
- Languages: Multi-language system management with translation keys
- Countries: Country list management for billing/tax with code, name, active/sort, auto-translation key generation
- Blog Posts: Full CRUD with AI content generation, hierarchical categories, SEO audit badges, product linking, scheduling, featured image
- Blog Categories: Hierarchical parent/child structure with sort order and active status
- Documentation (Articles): Knowledge base article management with categories, PDF export
- Doc Categories: Documentation category management
- Partners: Partner logo management with title, URL, image upload, sort order, active toggle — displayed as carousel on homepage
Appearance
- Themes: Install/activate/deactivate themes, theme requirements checker, skeleton theme download, manifest details, theme preview
- Theme Customizer: Live color/font/spacing customization, custom CSS injection, generated CSS output file
- Addons: Full addon management — upload ZIP, install, activate, deactivate, uninstall, export as ZIP, activity log, disk-only detection. Addon types: addon, payment_gateway, integration, theme. Each addon has its own directory, manifest (addon.json), bootstrap.php, install/uninstall SQL, activate/deactivate hooks, admin pages, API endpoints, thumbnail
- Addon Creator: Scaffolds a complete addon ZIP with selected hooks wired up — generates addon.json, bootstrap.php, install.sql, uninstall.sql, activate.php, deactivate.php, README.md, and assets directory. Hook selector shows all available action/filter hooks grouped by category
Sales
- Orders: List/search/filter by status, invoice generation (PDF), payment status management, full order detail view with items, billing, payment, license links
- Affiliates: Settings (global commission %, fixed amount, hold days, cookie duration, min payout threshold, checkout referrals toggle, access mode), affiliate approval/suspension, commission management (approve/reject/release), PayPal Payouts batch processing via API with encrypted credentials, affiliate asset/ads upload, audit logging
- Services: Service request management (waiting/in_progress/done), service agreements (standard/exclusive modes), delivery file upload, license attachment, ticket linking
- Customers: List/search, create accounts, view profile (orders, licenses, tickets, downloads, services), admin notes
- Licenses: Full lifecycle management (activate, deactivate, suspend, reset domain, edit), search by key/customer/product/domain, filter by status, activation limit tracking
- Downloads: Upload product files (zip, gz, tar, tgz, rar, 7z), version management, changelog, release notes, auto-update product version, download count tracking
Community
- Tickets: Full support ticket management with priority (low/normal/high/urgent) and status workflow (open/replied/waiting_customer/closed), internal admin notes, customer reply tracking, product linking
- Bug Reports: Manage with severity (critical/high/medium/low) and status (new/confirmed/in_progress/fixed/rejected), quick status changes
- Features: Feature request management with vote tracking and status workflow (requested/planned/in_progress/released/declined)
- Reviews: Approve/reject moderation with star ratings, title, text, customer info
- Comments: Pre-sale Q&A comment moderation with approve/reject/pending workflow
- Holiday Promotions: Date-range discount campaigns — percent or fixed amount off, per-product or global, badge text, status (live/upcoming/expired/paused), auto-applied on storefront
- Ad Campaigns: Create image or HTML code ads assigned to slots — Store Top/Bottom/Sidebar, Customer Portal Top/Sidebar. Each ad has: name, type (code/image), image upload, link URL, target, date scheduling, sort order, active toggle. Live/Scheduled/Expired/Paused status badges
Finance
- Overview: Profit & Loss overview (this month, last month, year-to-date) with gross sales, refunds, total expenses, net income, profitability indicator
- Expenses: Add/edit/delete expenses with categories and color coding, receipt PDF generation
- Expense Categories: Categorized expense tracking with color badges
- P&L Report: Full Profit & Loss reporting with date range filtering
- Recurring expenses management, affiliate liabilities tracking, pending affiliate alerts
Tax
- Tax Rules: Country/state-based rules with label, rate, applies_to, active toggle
- Schedules: Recurring tax obligation schedules
- Tax Report: Period-based tax summaries
- Filings: Tax filing management with status (unpaid/paid), due dates, filing alerts on dashboard
Email Settings
- Subscribers: Email subscriber list with search, status (active/unsubscribed/bounced), source tracking (widget/checkout/manual/API/popup), CSV export with preferences, manual unsubscribe
- SMTP: SMTP host, port, security (TLS/SSL/None), username, password, from email/name, admin notification address, test email sender
- Email Branding: Custom header color, footer text, business address, support email, email signature, social links toggle, custom logo URL, live preview
- Email Templates: Full transactional email template editor with multi-language support, variable reference per template, branded wrapper, preview, auto-seed defaults. Templates: order confirmation, new account, password reset, affiliate emails, ticket notifications, custom admin emails
System
- Store Update: Application update mechanism with database migration runner
- Maintenance: Maintenance mode (custom message, admin access, end time, allowed IPs), database backup (create/download/delete), GDPR data export, account deletion queue with cron processing
- Developer API: API key management for external integrations
- API v2: API v2 documentation and endpoint management
Settings
- Store Mode: Business type selector that tailors the product form, navigation, and storefront. Multiple modes with icons and descriptions. Per-mode theme assignments (auto-load a specific theme per mode). Feature Matrix with per-feature override (Auto/On/Off) for: License Management, Support Tickets, Changelog, Versioning, Affiliate Program, File Downloads, Documentation, Service Orders, Book Fields, Asset Fields
- Store Settings: General (name, tagline, email, currency, registration toggle, email verification), Branding (logo/favicon upload), SEO (meta title/description, Open Graph, hreflang), About (content, social links: Facebook, Twitter/X, LinkedIn, TikTok, WhatsApp, Bluesky, Instagram, YouTube), FAQs (global FAQ management), Languages, Service Agreements, Domain Packs, Planner, Email Subscribers
- Tax Settings: Enable/disable sales tax collection, link to tax rules
- Payments: Stripe (publishable key, secret key, webhook secret), PayPal (client ID, secret, sandbox/live mode), PayPal Payouts (separate client ID/secret, encrypted)
- Integrations: PortaSale (API key, store ID), CodeCanyon (API key, username), Push Notifications (Firebase FCM or OneSignal with per-event toggles: new order, new customer, new ticket, license activated, new affiliate), AI (OpenAI API key, model selection)
- PWA: Full Progressive Web App configuration — enable/disable, install banner (5 styles: float card, bottom bar, top bar, toast, modal with customizable text), app identity (name, short name, description), display mode (standalone/fullscreen/minimal-ui/browser), orientation, start URL, scope, theme/background colors, categories, auto-generate 15 icon sizes from one source image, individual icon upload/override, mobile/desktop screenshots with captions (3 mobile + 2 desktop), up to 4 shortcuts with icons, related native apps (Google Play/Apple App Store/Microsoft Store) with prefer-related toggle, install analytics (total/month/week/today, install log with device/user agent tracking)
- Security: CAPTCHA provider (None/Cloudflare Turnstile/Google reCAPTCHA v2/hCaptcha), CAPTCHA toggles per form (registration, login, comments)
- Admin Users: Multi-admin with roles (super/admin), create/edit/delete, password change, first admin locked as super
Addon System with Hooks
Hook System (WordPress-style Actions & Filters)
- Actions (
bws_add_action,bws_do_action): Fire callbacks at defined points. Available hooks across 16 groups:- Checkout & Payments: checkout_before_validate, checkout_after_validate, checkout_complete, checkout_failed, cart_items_filter, order_total_filter, payment_gateways_filter
- Products: product_before_save, product_after_save, product_deleted, product_data_filter, product_price_filter
- Orders: order_created, order_status_changed, order_refunded
- Customers: customer_registered, customer_login, customer_deleted
- Licenses: license_activated, license_deactivated, license_renewed
- Downloads: download_before_serve, download_complete
- Email: email_before_send, email_body_filter, email_subject_filter
- Support/Tickets: ticket_created, ticket_replied, ticket_closed
- Affiliates: affiliate_commission_earned, affiliate_payout_processed, affiliate_commission_filter
- Reviews: review_submitted, review_approved
- Admin: admin_dashboard_widgets, bws_admin_sidebar_items, admin_head, admin_footer, admin_product_edit_fields
- Storefront: bws_storefront_head, bws_storefront_footer, storefront_nav_links, product_page_tabs
- Themes: theme_activated, theme_css_urls, theme_js_urls
- API: api_v2_routes, api_response_filter
- Documentation: docs_article_saved, docs_article_viewed
- Addons: addon_activated, addon_deactivated
- Filters (
bws_add_filter,bws_apply_filters): Transform values (order total, product data, email body/subject, cart items, API responses, nav links, theme URLs, commission amounts) - Register/unregister callbacks with priority system (lower = fires first)
Addon Manager
- Each addon lives in
addons/{slug}/with its ownaddon.jsonmanifest - ZIP install with safe extraction (path traversal protection, size limits, top-level folder stripping)
- ZIP update (backup, replace, run update.sql)
- Install from disk (manually uploaded files)
- Activate/Deactivate with lifecycle hooks (
activate.php,deactivate.php) - Uninstall (runs uninstall.sql, deletes all files)
bootstrap.phploaded on every request for active addons- Addon types: addon, payment_gateway, integration, theme
- Thumbnail support for card display
- Admin pages, API endpoints, assets per addon
- Activity log (install, update, activate, deactivate, uninstall)
Addon Creator
- Form to generate a complete addon ZIP with one click
- Fields: slug, name, version, type, author, description
- Visual hook selector showing all available hooks grouped by category
- Auto-generates: addon.json, bootstrap.php, install.sql, uninstall.sql, activate.php, deactivate.php, README.md, assets directory
- Code preview updates live as hooks are selected
- Generated ZIP ready to upload and install
Newsletter Popup Campaign System (Addon)
- Full popup campaign manager with CRUD, duplicate, activate/pause/draft
- Popup Types: Blog Newsletter, Product Updates, Product Releases, Coming Soon Alerts, Pre-order Notifications, Affiliate Program Updates, Marketing & Promotions, Service Updates, Custom Popup
- Layouts: Center Modal, Side Image, Bottom Bar, Slide-in Corner, Full-width Banner, Hero Fullscreen, Minimal Card
- Animations: Fade, Slide up, Scale in, None
- Triggers: After X seconds, After X% scroll, Exit intent (desktop), After X page views, Immediately on load, Manual trigger button
- Frequency: Once per session, Once every X days, Every page load, Never after subscribing
- Display Rules: All storefront pages, Homepage only, Blog pages only, Product pages only, Store listing pages, Checkout pages
- Design Customization: Accent/button color, background color, text color, border radius (0-32px), max width (280-960px), overlay opacity, show/hide close button, dark mode support
- Image Support: Upload image, position (left/right/top), hide on mobile
- Form Fields: Headline, subtitle, CTA button text, success message, campaign name for tracking, email placeholder
- Email Preference Categories: Auto-subscribe preferences per popup type (blog_updates, product_updates, product_releases, coming_soon_alerts, preorder_release_alerts, affiliate_updates, marketing_promos, service_updates)
- Analytics: Stats cards (campaigns, total impressions, total subscribers, avg. conversion rate), per-campaign metrics (views, subs, CVR%), impression/conversion event tracking
- Priority System: Lower priority number = higher priority when multiple popups match
- Honeypot: Anti-spam hidden field on all popup forms
- CSRF Protection: Token validation on subscribe endpoint
- Completely replaces Mailchimp for newsletter signups — no third-party service needed
- Live preview in admin panel while editing
Affiliate System
- Customer application (via customer portal) or open registration mode
- Unique affiliate codes with validation (3-40 chars, no reserved words)
- Referral tracking via URL parameters (
?ref=,?aff=) and cookie (90-day default) - UTM parameter tracking (source, medium, campaign, content, term)
- Click tracking with IP hash, user agent hash, referrer, landing URL
- Commission structure: global percent + per-product override + fixed amount
- Commission lifecycle: pending (hold period) → approved → paid
- Automatic reversal on refunds/cancellations
- PayPal Payouts API batch processing (encrypted credentials)
- Minimum payout threshold
- Affiliate assets/ads (image banners with custom URLs)
- Referral URL generator per target (home, product, service, checkout)
- Affiliate emails: application, approval, commission, payout, reversal
- Full audit logging
API System
API v1 (Public, Read-Only, RESTful)
- Store info, products (paginated, filtered), categories, FAQs, reviews, releases, search, blog, widgets, OpenAPI spec
API v2 (JWT-Authenticated, Structured)
- Auth: login (email/password → JWT), token refresh
- Public: store info, products, categories
- Authenticated: user profile, orders, licenses, tickets, downloads
Internal API Endpoints
- Checkout tax calculation (AJAX)
- Claim purchase by order number
- Push notification subscription (FCM/OneSignal)
- Installation domain verification
- License key verification
- Stripe webhook + PayPal webhook
Theme System
- Self-contained theme directories with
theme.jsonmanifest - Template hierarchy: active theme → default theme → fallback layouts
- Required page templates: index, product, cart, checkout, blog, blog-post, about, portfolio, affiliate, legal pages
- Controllers handle business logic; themes handle presentation only (true separation)
- Two bundled themes:
default(production-ready) andskeleton(starter template) - Theme customizer: real-time colors, spacing, fonts, custom CSS, generated output
- Skeleton theme downloadable as ZIP
Widget System (Embeddable)
5 JavaScript widgets for external sites:
- Product Grid (embed product listings anywhere)
- Product Card (single product embed)
- Reviews (product review display)
- FAQs (accordion FAQ widget)
- Rating Badge (star rating embed)
Push Notification System
- Providers: Firebase Cloud Messaging (FCM) and OneSignal
- Events: new order, new customer, new ticket, license activated, new affiliate
- Push subscriptions stored in database
- Notification logging
- PWA service worker integration
Newsletter / Email Subscribers
- Multiple subscription sources: widget, checkout, manual, API, popup campaigns
- Status management: active, unsubscribed, bounced
- Per-subscriber email preferences (blog_updates, product_updates, product_releases, coming_soon_alerts, preorder_release_alerts, affiliate_updates, marketing_promos, service_updates)
- Public subscribe/unsubscribe pages with email preferences
- CSV export with preferences and source tracking
- Popup campaign integration for automated list growth
Security Features
- CSRF protection on every form
- CAPTCHA (Cloudflare Turnstile, Google reCAPTCHA, hCaptcha)
- Bcrypt password hashing (cost 12)
- Secure session management (httponly, strict mode, 8-hour lifetime)
- Honeypot anti-spam fields (including popup forms)
- StopForumSpam API integration
- .htaccess security headers (HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
- PHP execution blocked in themes directory
- Rate limiting on comments and API endpoints
- Admin audit logging (all create/update/delete actions)
- Demo mode guards (prevents changes in demo accounts)
- File upload validation (MIME, extension whitelist, image validation)
- License key verification and domain locking
- Encrypted storage for sensitive credentials (PayPal payouts)
- Safe addon ZIP extraction (path traversal protection, null byte detection, size limits)
Email System
- PHPMailer integration with SMTP support
- Full email template system with multi-language support
- Branded email wrapper (custom header color, footer text, business address, logo, social links, signature)
- Transactional emails: order confirmation, welcome, password reset, tickets, affiliate notifications, custom admin emails
- Email logging to database
SEO & Discovery
- Dynamic XML sitemap with pagination and hreflang
- LLMs.txt support (AI discovery files in 3 languages — EN, BR, ES)
- Full schema.org structured data (JSON-LD)
- Built-in SEO audit tool (page-level scoring for SEO, AIO, Schema)
- Image optimization proxy with WebP conversion
- hreflang tags for international SEO
- Open Graph / Twitter Card meta tags
Technical Details
- Language: PHP 8.x (named arguments, match expressions, enums, arrow functions, readonly properties, str_contains, str_starts_with)
- Database: MySQL 8.x with InnoDB, utf8mb4 charset
- Frontend: Bootstrap 5, Bootstrap Icons, custom CSS
- Architecture: Custom MVC with theme layer + addon/hook system (not Laravel)
- Routing: Apache mod_rewrite (.htaccess) for clean URLs
- Database migrations: 49+ sequential SQL migration files
- PWA: Full Progressive Web App with manifest, service worker, offline support, splash screens, 15 auto-generated icon sizes, install analytics
- Multi-language: Custom translation system (EN, BR, ES)
- Addon System: ZIP install/update/uninstall, WordPress-style hooks (25+ actions, 15+ filters), addon creator scaffolding tool
- Cron: Account deletion processing
- Cache: File-based cache directory with image cache
- File size: ~70 core PHP files — tiny footprint compared to WordPress (600+ files) or Laravel
What Makes It Different
- Self-hosted: You own everything — data, code, customers, branding. No monthly fees, no platform lock-in.
- Not Laravel: Pure PHP with a lightweight custom MVC. No heavy framework dependencies. Easy to customize.
- All-in-one: Store, customer portal, admin panel, affiliate system, blog, knowledge base, ticketing, finance, API, PWA, newsletter popups, ad campaigns — all built-in, no plugins needed.
- Extensible: Full addon/hook system with creator tool. Extend the platform without touching core files.
- Dual-purpose: Sell digital downloads AND services (custom work, setup, consulting) from the same platform.
- Affiliate-first: Full affiliate system with PayPal Payouts, UTM tracking, click tracking, and commission lifecycle management.
- Newsletter-driven: Built-in popup campaign system replaces Mailchimp entirely. Capture emails, manage preferences, track conversions.
- Store Modes: Switch between business types with per-mode themes and feature toggles.
Whether you're selling PHP scripts, WordPress plugins, digital art, PDFs, software licenses, or offering custom development services — BulkWork Suite gives you a professional, self-hosted storefront with enterprise-grade features at a fraction of the cost of SaaS alternatives.