TrashMail - Temporary Email Platform

TrashMail is a complete platform for running your own temporary email service — the same kind of site as the big disposable-inbox names, installed on your own hosting, under your own brand, earning from your own ads.

Visitors get a working temporary address the second the page opens — no sign-up. Mail arrives live in a clean, modern inbox with a new-mail tab badge and sound, QR code hand-off, address history and favourites. Behind it sits a proper admin panel that runs the whole service: domains, mail profiles, users, blog, ads, limits, plugins, translations and settings that provably take effect.

This is the non-SaaS edition: visitors do not pay you — advertisers do. Eleven ad slots are designed into the layout, and an in-admin Launch Guide checklist walks a fresh install to ad-ready. If you do not own email domains, an optional built-in Domain API client can sync a ready pool of domains into your site with a separate paid Developer plan and API key — your per-domain tier choices are never overwritten, and a lapsed plan pauses new addresses politely instead of breaking anything.

Everything was built and tested on ordinary shared cPanel hosting: a 5-step installer with no licence step and no phone-home, plain-language requirement checks, and documentation that covers the full mail setup step by step — including the one DNS record people forget.

Included in the Download - The complete TrashMail application (Laravel 13, dependencies bundled — no Composer run needed) - Full documentation with screenshots (installation, mail setup, every admin module) - Quick-start instructions and changelog

Features

- Live disposable inbox: address ready on page load, real-time polling, new-mail tab badge + soft chime, QR code, copy button - Secure mail engine: incoming HTML is sanitised, shown in a CSP-sandboxed frame, tracking pixels blocked, attachments checked before download - Broken-mail proof: one malformed message can never break an inbox or produce a 500 - Guest & member limits engine: addresses, history, domains, attachments — generous defaults, fully adjustable, enforced everywhere - Domains three ways: add your own locally, let users connect theirs (TXT ownership check + guided MX setup + live status), or sync a ready pool through the built-in Domain API client - Per-domain access tiers: Free for guests / Registered / Premium (registered-only), set by the admin and never overwritten by sync - Blog with categories, author box, rich editor with in-editor image uploads, and comments with a moderation queue - 11 ad slots wired into real placements (header, inbox rails, blog, sticky) with labelled placeholders in demo mode - AdSense Launch Guide inside the admin: an auto-ticking checklist to take a fresh install ad-ready - 19 plugins, honestly wired: AI auto-translation with your own OpenAI or Gemini key, Google & Facebook login with your own apps, captcha options and more — every plugin has labelled fields, where-to-get-the-key help and test actions - Guarded addon installer for custom plugins/themes from the developer (manifest-checked, no arbitrary code uploads) - Full translations system: validation messages, alerts and every mailbox string resolve from the store you edit in the admin - Light + dark mode done properly: one synced preference across the public site and both dashboards, applied before first paint - Redirects that actually apply, maintenance mode answering a real 503 (with a mini game for visitors), contact messages readable in the admin - User dashboards with favourites, custom domains, blocked senders and a spam view - Installer hardening: refuses PHP below 8.3 with a designed help page, repairs a broken .env instead of dying, finish step cannot be triggered out of order - Demo mode: one .env switch turns your install into a read-only showcase with one-click demo logins - Your Domain API key is stored encrypted and never displayed again — not even to you

Requirements

- PHP 8.3 or newer (the installer refuses older versions with a clear help page) - PHP extensions: pdo_mysql, mbstring, xml, curl, zip, intl, gd, openssl (the installer checks each one and names anything missing; the imap extension is needed to receive mail on your own domains) - MySQL 5.7+ / 8.0 or MariaDB 10.x / 11.x - One cron job every few minutes (a keyed URL is provided in the admin) - For your own domains: one catch-all mailbox (IMAP) on the domain — the documentation walks the whole setup in 9 steps - Runs on ordinary shared cPanel hosting; no VPS, Node or command line required

Instructions

1. Upload trashmail-script.zip to your hosting and extract it into your domain's folder (files 0644, folders 0755). 2. Open your domain in a browser — the installer starts automatically. 3. Walk the 5 steps: welcome & requirements check, database details, install data, site details, admin account — finish.  4. Set up mail (documentation, 9 steps): create a catch-all email on your domain, set it as the domain's Default Address, enter its IMAP/SMTP details in Settings, add your domain under Domains, and check that the domain has an MX record — without one, no mail can arrive. 5. Add the cron job using the keyed URL shown in the admin (every few minutes). 6. First settings to change: site name and logo, your ad codes in the 11 slots, the Launch Guide checklist in the admin, and add your catch-all mailbox name to Settings → Forbidden address names. Full details with screenshots are in the documentation folder inside the download.