SureBooking - Salon Booking Script

SureBooking is a self-hosted appointment booking system for salons, spas, nail studios, beauty clinics, and any appointment-based business. It includes the customer-facing booking website, admin panel, customer portal, built-in CMS, email automation, payment gateways, and a REST API — all in a single Laravel codebase. One-time purchase, no monthly fees.

Perfect for: Hair Salons & Barbershops  ·  Spas & Massage  ·  Nail Studios  ·  Beauty Clinics  ·  Medical & Dental  ·  Fitness & PT  ·  Pet Grooming  ·  Multi-Branch Businesses

Customer Booking Flow (8 Steps)

1. Select a branch
2. Choose a booking type (individual or group)
3. Select a service (with pricing and duration)
4. Pick a staff member — or auto-assign
5. Choose a date & time (real-time availability, no double booking)
6. Guest checkout — name, email, phone — no account required
7. Review & pay (Stripe, PayPal, or pay at salon)
8. Instant booking confirmation sent by email

Group booking: customers can add a guest — each person picks their own service and staff. The group pays in one checkout with one reference code.

What's Included

• Complete PHP / Blade / JS / CSS source code — 100% open, no ionCube, no encoding
• Customer-facing booking website + admin panel with all modules
• 7-step browser-based installer (no Composer, no CLI required)
• Docker and docker-compose configuration for local development
• Installation guide, user guide, and REST API reference documentation
• Database seeders with demo data
• 6 months of author support
• Free future updates

Note: Demo images and sample content are for illustration only and are not included with the product. You will need to upload your own images after installation.

Demo

Landing Page: https://surebooking.dreamteams.cloud Live Preview (Customer Website): https://demo.surebooking.dreamteams.cloud Admin Demo: https://demo.surebooking.dreamteams.cloud/admin Username: admin   Password: 12345678 Demo data is reset periodically.

Support & Updates

• 6 months of support included — extendable via Codester
• Support via Codester comments — responses within 1–2 business days
• Please check the included documentation before posting a support request
• When contacting support, include PHP version, server type, and error description

Changelog

Version 1.0.1 — Security & Performance Update

Security & Hardening

• ✓  Hardened input handling across all admin controllers to prevent unexpected variable overwrites from request payloads
• ✓  Improved error handling — internal error details (stack traces, file paths, database errors) are now logged server-side only; end users receive a clean, localized error message
• ✓  Corrected controller termination flow to follow Laravel's standard request lifecycle
• ✓  Removed development/debug tooling from the production package
• ✓  Moved development-only packages out of the production dependency tree

Performance

• ✓  Faster production autoloader — debug packages removed from the dependency tree
• ✓  Reduced overhead on admin form submissions through more direct input handling
• ✓  More reliable request/response finalization, avoiding potential resource leaks

Improvements

• ✓  Added localized error messages for media file and folder operations (English and Vietnamese)
• ✓  All exception details are now logged before returning a generic message to the client

Version 1.0.0 — August 2026 — Initial Release

• ✓  Online booking website with guided 4-stage booking flow
• ✓  Group booking — up to 2 guests per appointment
• ✓  Guest checkout — no account required
• ✓  Customer portal — history, rescheduling, reviews, coupons
• ✓  Admin calendar — day view
• ✓  Multi-branch and employee management
• ✓  Coupon and discount system
• ✓  Payment gateways: Stripe, PayPal, Pay at Salon
• ✓  Email automation — 8 triggers with editable templates
• ✓  Built-in CMS — blog, pages, shortcode blocks (20+)
• ✓  Custom tracking code fields (GA4, GTM, Meta Pixel, conversion tags)
• ✓  Multi-language with unlimited languages and RTL support
• ✓  Google Calendar two-way sync
• ✓  REST API — 11 endpoints, Sanctum auth
• ✓  Reports and analytics dashboard
• ✓  Role-based access, 2FA, audit logs
• ✓  Media library — local, S3, Cloudflare R2
• ✓  7-step browser-based installer
• ✓  Docker and docker-compose support

Features

Booking Engine

• Online booking flow with real-time availability
• Group booking — up to 2 guests per appointment
• Guest checkout — no account required
• Service variants and multiple services per booking
• Photo upload during booking
• Unique appointment code per booking

Admin Panel & Calendar

• Day calendar view per staff and branch
• Create walk-in appointments manually
• Appointment status workflow: New → Accepted → Success / Cancelled
• Appointment history log for every change
• Search, filter, and export appointments
• Dashboard: revenue, bookings, occupancy, customer KPIs

Multi-Branch & Staff

• Unlimited branches — each with its own services, staff, and schedule
• Employee profiles, working hours, and service assignments
• Google Calendar two-way sync
• Role-based access — admin and staff roles with separate permissions

Customer Portal

• View, reschedule, and cancel appointments
• Booking history and status tracking
• Leave reviews after completed appointments
• Redeem coupons and view discount history
• Google OAuth ("Sign in with Google") supported

Payments

• Stripe (cards, wallets, BNPL)
• PayPal
• Pay at Salon (cash on arrival)
• Coupons and discount codes — fixed or percentage, scoped to service / branch / customer
• Invoice generation and payment status tracking

Email Automation

• Booking confirmation and payment receipt
• Reminder 24 hours before appointment
• Reschedule and cancellation notices
• New booking alert to admin and staff
• All templates editable from admin — no coding
• SMTP, Amazon SES, and Mailgun support

CMS & Marketing

• Blog, static pages, categories, and shortcode page blocks (20+)
• SEO: meta tags, Open Graph, XML sitemap, schema markup per page
• Admin field for custom tracking codes — paste GA4, GTM, Meta Pixel, or any conversion tag without touching code
• 301/302 redirects and custom permalink settings
• Theme: logo, colors, fonts, menus, header, footer
• Media library — local, Amazon S3, or Cloudflare R2

Multi-Language

• Unlimited languages — add from admin panel, no code changes
• Admin panel language set independently from the website
• RTL language support
• Built-in translation manager

Security

• Two-factor authentication (2FA) for admin
• Role and permission management
• System activity logs and login history
• CSRF protection and Google reCAPTCHA

REST API

• 11 endpoints: appointments, branches, services, customers
• Sanctum token authentication with per-token rate limiting
• Full API documentation included

Requirements

• PHP: 8.4+
• Framework: Laravel 13
• Database: MySQL 8.0+ or MariaDB 10.6+
• Web Server: Apache 2.4+ (mod_rewrite) or Nginx 1.10+
• PHP Extensions: BCMath, Ctype, Fileinfo, JSON, Mbstring, OpenSSL, PDO, XML, GD, Imagick, cURL, Zip
• RAM: 512 MB minimum (1 GB+ recommended)
• Disk: 500 MB minimum (2 GB+ recommended)
• Composer: Not required — vendor folder bundled in the download
• Hosting: Shared hosting, VPS, dedicated server, or Docker
• Redis: Optional — recommended for production queues

Instructions

Installation — Web Installer (Recommended)

No Composer, no CLI, no manual .env editing required. The vendor folder is bundled in the download package.

1. Upload files to your server (FTP, SFTP, cPanel File Manager, or Git). Point your domain / virtual host document root to the public/ subfolder. Set permissions: chmod -R 755 storage bootstrap/cache public/uploads
2. Open /install in your browser (e.g. https://yourdomain.com/install)
3. Complete the 7-step wizard:
   1. Requirements check — PHP version and extensions
   2. Permissions check — writable directories
   3. Database — enter DB credentials (installer auto-creates the database if missing)
   4. Site info — site name and application URL
   5. Admin account — set your own email and password
   6. Language & timezone
   7. Install — live progress log, runs migrations and seeds data (30–60 seconds)
4. Log in to the admin panel at /admin with the credentials you set in Step 5
5. Start a queue worker — required for emails and background jobs: php artisan queue:work --queue=high,default For production, configure Supervisord (see included install guide)

Docker (Local Development)

1. Extract the package files
2. Run: docker-compose up -d (.env and APP_KEY are created automatically)
3. Open: http://localhost:9059/install and complete the wizard
4. Start queue worker: docker exec -it surebooking_php php artisan queue:work --queue=high,default

After Installation

• Configure mail: Admin Panel → Settings → Email Configuration (no .env editing needed)
• Add branches, services, and employees: Admin Panel → Branches / Services / Employees
• Enable HTTPS and set up SSL certificate on your server
• Enable Two-Factor Authentication for admin accounts (Settings → Security)

Full step-by-step installation guide, Docker setup, server configuration (Apache / Nginx), Supervisord setup, and troubleshooting are included in the documentation package (documents/install.html).