Zombie — Halloween PHP Website Template

Zombie PHP is a bold, energetic Entertainment & Event Services HTML5 web template built on PHP 8.1 with a clean MVC architecture, Bootstrap 4, and MySQL database integration. It ships with 18 server-rendered pages, a filterable photo gallery, a blog module, an analytics dashboard, all powered by PHP with PDO database abstraction and Composer autoloading — fully ready for shared hosting deployment.

Built for PHP developers delivering entertainment & event services html5 websites where server-side rendering, dynamic content management, and database-backed functionality are required. The MVC structure separates routing, controllers, models, and view templates cleanly. PDO prepared statements protect every database query against SQL injection, and all user input is sanitised before output. No Node.js, no build step — deploy directly to any cPanel or Plesk host.

Everything in the Package

• 18 server-rendered PHP pages with MVC routing
• PHP 8.1 — named arguments, match expressions, and readonly properties
• MySQL database integration via PDO with prepared statements throughout
• Composer autoloading — PSR-4 class autoloading, no manual require chains
• Bootstrap 4 — responsive grid, mobile-first layout
• Contact form with server-side validation, CSRF token protection, and PHPMailer SMTP integration
• Environment configuration via .env — DB credentials, SMTP settings, and app URL
• Full SQL schema dump included — import and run immediately
• Swiper carousels and WOW.js scroll animations on all pages
• Retina-ready, fully responsive from 320px to 1920px+
• Well documented — setup guide covering database import, .env configuration, and SMTP setup

MVC Architecture and File Structure

• Router: app/Router.php — maps URL paths to controller methods via regex route matching
• Controllers handle request logic and pass typed data arrays to view templates
• Models wrap PDO queries with typed return objects — swap MySQL for PostgreSQL by changing the DSN
• Views: templates/ directory with reusable partials — header.php, footer.php, navbar.php
• All user input sanitised with htmlspecialchars() before output and PDO bindings before DB queries
• CSRF tokens generated with bin2hex(random_bytes(32)) on form render, validated on POST
• Folder structure: app/Controllers/, app/Models/, app/Router.php, templates/, public/, config/, database/

All 18 Pages

• home-v1.php — v3 — Three distinct hero and entertainment showcase layouts
• about.php — Brand story and entertainment mission
• portfolio-grid.php — Experiences in card grid format
• portfolio-masonry.php — Experiences in dynamic masonry layout
• portfolio-slider.php — Experiences in slider presentation
• portfolio-details.php — Individual experience detail page
• services.php — Entertainment service offerings
• service-details.php — Individual service detail page
• team.php — Staff directory
• team-details.php — Individual team member profile
• why-choose-us.php — Brand value proposition
• faq.php — Frequently asked questions
• blog-grid.php — Editorial content in grid format
• blog-standard.php — Articles in standard layout
• blog-details.php — Full article view

Key Features

• 18 Fully Designed HTML5 Pages across home, portfolio, services, team, blog, and FAQ
• 3 Unique Home Layouts — three distinct hero styles and entertainment showcase arrangements
• Bootstrap 4 — responsive, mobile-first grid system
• Portfolio in 3 Formats — grid, masonry, and slider archive styles
• Portfolio Detail Page — individual project and experience detail view
• Services & Service Detail — entertainment service offerings with individual detail pages
• Team & Team Detail — staff directory with individual profile pages
• Why Choose Us Page — brand value proposition and differentiators
• FAQ Page — frequently asked questions for guests and clients
• Blog Grid & Blog Standard — editorial content in two layout formats
• Slick Carousel — featured experience and testimonial sliders
• Isotope Grid Filtering — filter portfolio by event type or category

Security

• PDO prepared statements on every database query — SQL injection not possible through the model layer
• CSRF tokens on all POST forms — validated server-side before processing
• htmlspecialchars() applied to all user-supplied output — XSS prevention throughout
• DB credentials, SMTP passwords, and secrets stored in .env — never committed to version control
• File upload validation — MIME type check, extension whitelist, and size limit enforced server-side

Use Cases

• Entertainment & Event Services HTML5 Businesses: Server-rendered, database-backed entertainment & event services html5 site with no build step required
• PHP Developers: MVC architecture, PDO models, and Composer autoloading — extend without tech debt
• Shared Hosting Deployments: Pure PHP 8.1 — runs on any cPanel or Plesk host without Node.js or Docker
• Agencies: Dynamic content management via MySQL — update pages, galleries, and blog from the database or admin panel

Credits and Dependencies

• PHP 8.1 — PHP License
• Bootstrap 4 — MIT License
• Composer — MIT License
• vlucas/phpdotenv — BSD-3 License
• PHPMailer — LGPL 2.1 License
• Slick — MIT License
• Isotope — MIT License
• Magnific — MIT License
• Lightbox — MIT License
• Chart — MIT License
• Font Awesome 6 — Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT
• Google Fonts — SIL Open Font License
• Demo images: Unsplash — Unsplash License (free for commercial use, no attribution required)
• Demo images: Freepik — Freepik License (free for commercial use with attribution)
• All demo images are for preview purposes only and are NOT included in the download.

v1.0  Initial PHP Release
- PHP 8.1 MVC architecture with Composer PSR-4 autoloading
- MySQL database with full SQL schema dump included
- PDO prepared statements on all queries — SQL injection protected
- CSRF token protection on all POST forms
- Dynamic content management via MySQL database
- PHPMailer SMTP contact form integration
- .env configuration for DB credentials, SMTP, and app URL