Villamar — Real Estate PHP Website Template

Villamar PHP is a vibrant Hotel & Resort Booking HTML5 web template built on PHP 8.1 with a clean MVC architecture, Bootstrap 4, and MySQL database integration. It ships with 20 server-rendered pages, a filterable photo gallery, a blog module, an appointment booking system, all powered by PHP with PDO database abstraction and Composer autoloading — fully ready for shared hosting deployment.

Built for PHP developers delivering hotel & resort booking html5 websites where server-side rendering, dynamic content management, and database-backed functionality are required. The MVC structure separates routing, controllers, models, and view templates cleanly. PDO prepared statements protect every database query against SQL injection, and all user input is sanitised before output. No Node.js, no build step — deploy directly to any cPanel or Plesk host.

Everything in the Package

• 20 server-rendered PHP pages with MVC routing
• PHP 8.1 — named arguments, match expressions, and readonly properties
• MySQL database integration via PDO with prepared statements throughout
• Composer autoloading — PSR-4 class autoloading, no manual require chains
• Bootstrap 4 — responsive grid, mobile-first layout
• Contact form with server-side validation, CSRF token protection, and PHPMailer SMTP integration
• Environment configuration via .env — DB credentials, SMTP settings, and app URL
• Full SQL schema dump included — import and run immediately
• Swiper carousels and WOW.js scroll animations on all pages
• Retina-ready, fully responsive from 320px to 1920px+
• Well documented — setup guide covering database import, .env configuration, and SMTP setup

MVC Architecture and File Structure

• Router: app/Router.php — maps URL paths to controller methods via regex route matching
• Controllers handle request logic and pass typed data arrays to view templates
• Models wrap PDO queries with typed return objects — swap MySQL for PostgreSQL by changing the DSN
• Views: templates/ directory with reusable partials — header.php, footer.php, navbar.php
• All user input sanitised with htmlspecialchars() before output and PDO bindings before DB queries
• CSRF tokens generated with bin2hex(random_bytes(32)) on form render, validated on POST
• Folder structure: app/Controllers/, app/Models/, app/Router.php, templates/, public/, config/, database/

All 20 Pages

• home-v1.php — v3 — Three distinct hero and hotel showcase layouts
• about.php — Hotel story and hospitality mission
• room-grid.php — Accommodation in grid archive
• room-list.php — Accommodation in list archive
• room-details.php — Individual room and suite detail page
• booking.php — Hotel reservation and booking page
• places.php — Local attraction directory
• places-details.php — Individual attraction or location page
• restaurant.php — Hotel dining and restaurant page
• menu.php — Restaurant menu and dining options
• gallery.php — Hotel and resort photography
• offers.php — Seasonal deals and promotional packages
• news.php — Hotel news archive
• news-details.php — Individual news article page
• search-result.php — Room and accommodation search results

Key Features

• 20 Fully Designed HTML5 Pages across home, rooms, booking, places, dining, news, and gallery
• 3 Unique Home Layouts — distinct hero styles and hotel showcase arrangements
• Bootstrap 4 — responsive, mobile-first grid system
• Room Grid & Room List — two archive presentation formats for accommodation
• Room Detail Page — individual room and suite detail page
• Booking System — hotel reservation and check-in booking page
• Places & Places Detail — local attraction directory and individual place pages
• Restaurant & Menu Page — hotel dining and restaurant menu showcase
• News & News Detail — hotel news archive and individual news article pages
• Gallery — hotel and resort photography showcase
• Special Offers — seasonal deals and promotional package showcase
• Search Results — room and accommodation search results page

Security

• PDO prepared statements on every database query — SQL injection not possible through the model layer
• CSRF tokens on all POST forms — validated server-side before processing
• htmlspecialchars() applied to all user-supplied output — XSS prevention throughout
• DB credentials, SMTP passwords, and secrets stored in .env — never committed to version control
• File upload validation — MIME type check, extension whitelist, and size limit enforced server-side

Use Cases

• Hotel & Resort Booking HTML5 Businesses: Server-rendered, database-backed hotel & resort booking html5 site with no build step required
• PHP Developers: MVC architecture, PDO models, and Composer autoloading — extend without tech debt
• Shared Hosting Deployments: Pure PHP 8.1 — runs on any cPanel or Plesk host without Node.js or Docker
• Agencies: Dynamic content management via MySQL — update pages, galleries, and blog from the database or admin panel

Credits and Dependencies

• PHP 8.1 — PHP License
• Bootstrap 4 — MIT License
• Composer — MIT License
• vlucas/phpdotenv — BSD-3 License
• PHPMailer — LGPL 2.1 License
• Slick — MIT License
• Isotope — MIT License
• WOW — MIT License
• Magnific — MIT License
• Lightbox — MIT License
• Font Awesome 6 — Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT
• Google Fonts — SIL Open Font License
• Demo images: Unsplash — Unsplash License (free for commercial use, no attribution required)
• Demo images: Freepik — Freepik License (free for commercial use with attribution)
• All demo images are for preview purposes only and are NOT included in the download.

v1.0  Initial PHP Release
- PHP 8.1 MVC architecture with Composer PSR-4 autoloading
- MySQL database with full SQL schema dump included
- PDO prepared statements on all queries — SQL injection protected
- CSRF token protection on all POST forms
- Dynamic content management via MySQL database
- PHPMailer SMTP contact form integration
- .env configuration for DB credentials, SMTP, and app URL