Gospa PHP is a feature-rich Beauty Spa & Lifestyle Wellness HTML5 web template built on PHP 8.1 with a clean MVC architecture, Bootstrap 4, and MySQL database integration. It ships with 43 server-rendered pages, a filterable photo gallery, a full e-commerce module with cart and checkout, a blog module, all powered by PHP with PDO database abstraction and Composer autoloading — fully ready for shared hosting deployment.

Built for PHP developers delivering beauty spa & lifestyle wellness html5 websites where server-side rendering, dynamic content management, and database-backed functionality are required. The MVC structure separates routing, controllers, models, and view templates cleanly. PDO prepared statements protect every database query against SQL injection, and all user input is sanitised before output. No Node.js, no build step — deploy directly to any cPanel or Plesk host.

Everything in the Package

• 43 server-rendered PHP pages with MVC routing
• PHP 8.1 — named arguments, match expressions, and readonly properties
• MySQL database integration via PDO with prepared statements throughout
• Composer autoloading — PSR-4 class autoloading, no manual require chains
• Bootstrap 4 — responsive grid, mobile-first layout
• Contact form with server-side validation, CSRF token protection, and PHPMailer SMTP integration
• Environment configuration via .env — DB credentials, SMTP settings, and app URL
• Full SQL schema dump included — import and run immediately
• Swiper carousels and WOW.js scroll animations on all pages
• Retina-ready, fully responsive from 320px to 1920px+
• Well documented — setup guide covering database import, .env configuration, and SMTP setup

MVC Architecture and File Structure

• Router: app/Router.php — maps URL paths to controller methods via regex route matching
• Controllers handle request logic and pass typed data arrays to view templates
• Models wrap PDO queries with typed return objects — swap MySQL for PostgreSQL by changing the DSN
• Views: templates/ directory with reusable partials — header.php, footer.php, navbar.php
• All user input sanitised with htmlspecialchars() before output and PDO bindings before DB queries
• CSRF tokens generated with bin2hex(random_bytes(32)) on form render, validated on POST
• Folder structure: app/Controllers/, app/Models/, app/Router.php, templates/, public/, config/, database/

All 43 Pages

• home-v1.php — v2 — Two distinct hero and wellness showcase layouts
• about-us.php — Spa story, wellness philosophy, and values
• services-2.php — Spa services in two overview layout variants
• service-detail.php — Individual treatment or wellness service page
• portfolio-4.php — Wellness case studies in four distinct layout styles
• portfolio-detail.php — Individual treatment case study and results page
• team-2.php — Therapist directory in two layout variants
• team-detail.php — Individual therapist profile and expertise page
• gallery-6.php — Standard gallery and before-and-after comparison layouts
• shop-shop-grid.php — Wellness product archives
• product-details.php — Individual product page
• cart-checkout.php — Purchase flow
• pricing-2.php — Wellness membership and package plans in two layout variants
• testimonials.php — Client reviews and wellness journey stories
• clients.php — Brand partner and client logo showcase

Key Features

• 43 Fully Designed HTML5 Pages across home, services, portfolio, team, gallery, shop, and account
• 2 Unique Home Layouts — distinct hero styles and wellness showcase arrangements
• Bootstrap 4 — responsive, mobile-first grid system
• Services Module — spa services in 2 overview layouts + individual service detail page
• Portfolio Module — wellness case studies in 4 layout styles + portfolio detail page
• Team Module — therapist directory in 2 layout styles + individual team member detail page
• 6 Gallery Layouts — standard gallery, before-and-after comparisons (2-column), and more
• E-Commerce Shop — wellness products in multiple layout styles
• Pricing Module — wellness packages and membership plans in 2 layout variants
• Testimonials Page — dedicated client reviews and wellness journey showcase
• Clients Page — brand partner and client logo gallery
• CounterUp Animated Statistics — treatments performed, happy clients, years of wellness

Security

• PDO prepared statements on every database query — SQL injection not possible through the model layer
• CSRF tokens on all POST forms — validated server-side before processing
• htmlspecialchars() applied to all user-supplied output — XSS prevention throughout
• DB credentials, SMTP passwords, and secrets stored in .env — never committed to version control
• File upload validation — MIME type check, extension whitelist, and size limit enforced server-side

Use Cases

• Beauty Spa & Lifestyle Wellness HTML5 Businesses: Server-rendered, database-backed beauty spa & lifestyle wellness html5 site with no build step required
• PHP Developers: MVC architecture, PDO models, and Composer autoloading — extend without tech debt
• Shared Hosting Deployments: Pure PHP 8.1 — runs on any cPanel or Plesk host without Node.js or Docker
• Agencies: Dynamic content management via MySQL — update pages, galleries, and blog from the database or admin panel

Credits and Dependencies

• PHP 8.1 — PHP License
• Bootstrap 4 — MIT License
• Composer — MIT License
• vlucas/phpdotenv — BSD-3 License
• PHPMailer — LGPL 2.1 License
• Isotope — MIT License
• WOW — MIT License
• CounterUp — MIT License
• Countdown — MIT License
• Magnific — MIT License
• Lightbox — MIT License
• Font Awesome 6 — Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT
• Google Fonts — SIL Open Font License
• Demo images: Unsplash — Unsplash License (free for commercial use, no attribution required)
• Demo images: Freepik — Freepik License (free for commercial use with attribution)
• All demo images are for preview purposes only and are NOT included in the download.

v1.0  Initial PHP Release
- PHP 8.1 MVC architecture with Composer PSR-4 autoloading
- MySQL database with full SQL schema dump included
- PDO prepared statements on all queries — SQL injection protected
- CSRF token protection on all POST forms
- Dynamic content management via MySQL database
- PHPMailer SMTP contact form integration
- .env configuration for DB credentials, SMTP, and app URL