Install Zen Cart on a Linux VPS by matching the server stack to your exact Zen Cart release, creating the domain and database first, uploading and verifying the official package, running the browser installer, and then locking down the generated configuration and installation files. Apache is the least complicated choice because Zen Cart ships with Apache-oriented .htaccess protections; Nginx works, but you must reproduce directory restrictions yourself.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
1. Confirm the Zen Cart release and server requirements
Do not provision a VPS from a generic PHP version list. Zen Cart compatibility changes by branch, so check the requirements for the exact archive you intend to install. The requirements page was last modified April 25, 2026, and the project continues to document compatibility by release.
As an Amazon Associate I earn from qualifying purchases.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11| Zen Cart information | Documented compatibility | How to use it when provisioning |
|---|---|---|
| v2.2.x line | PHP 8.2 through 8.5; MySQL 8.x or 9.x and MariaDB 11.x are preferred; MySQL 5.7.8 or newer and MariaDB 10.2.7 or newer are supported. | Choose a PHP 8.2–8.5 package and a current MySQL or MariaDB release unless the specific v2.2.x release page says otherwise. |
| Download-page summary for v2.1 and newer | PHP 8.1–8.3+, Apache or Nginx, and MySQL 5.7+ or MariaDB. | Treat this as a broad summary, not a substitute for the requirements of the exact minor release. |
Use a Linux VPS with root or equivalent administrative access, a web server, PHP, and MySQL or MariaDB. Windows/IIS is not supported. Leave enough memory and storage for the operating system, PHP workers, database, catalog images, logs, and backups; the documentation gives no universal VPS size because workload and extensions vary.
Required PHP extensions and settings
Enable every capability required by the release before opening the installer:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
bcmath,ctype,curlcompiled with OpenSSL, andfileinfoGD,getimagesize,iconv, andintl(required since v2.0.0)JSON,mbstring(required since v2.2.0),mysqli, andPDO MySQLPCRE,zip, andzlib
Set PHP memory_limit to at least 128 MB. A 256 MB or 512 MB limit can be useful when the VPS has sufficient memory, particularly during image or catalog administration. Keep allow_url_include disabled. The core documentation also advises disabling passthru, system, and shell_exec unless a plugin you have deliberately installed requires one of them.
2. Choose Apache or Nginx
| Decision | Apache 2.4 | Nginx |
|---|---|---|
| Documentation status | Primary documented web server. | Supported and suitable for Zen Cart. |
| Directory protection | Zen Cart’s distributed .htaccess rules can provide the intended protections when overrides are enabled. |
Apache .htaccess files are not processed, so equivalent deny and location rules must be written in the Nginx server block. |
| Required configuration | Set AllowOverride to All, or at least Limit Indexes Options, for the relevant document root. |
Configure PHP-FPM and manually restrict sensitive directories and files. |
| Recommended modules or features | rewrite, ssl, http2, headers, expires, env, alias, deflate, mime, and the PHP integration. |
Use the Nginx equivalents for TLS, compression, headers, expiry, MIME handling, and URL rewriting. |
Choose Apache if you want the closest match to the documented default protections and the simplest first installation. Choose Nginx when you already operate it confidently and are prepared to audit every protected path yourself. Whichever server you select, make sure the domain’s document root points to the directory containing Zen Cart’s uploaded files, not to the archive’s parent directory.
3. Provision the VPS and domain
- Install a supported Linux image. Apply the distribution’s security updates and create an administrative workflow that does not require sharing the root password. Your VPS provider may offer a control panel; the official guide assumes that the panel or an equivalent administration method can create databases and hosting users.
- Install the matched web stack. Add the exact PHP branch, required extensions, Apache or Nginx, and MySQL or MariaDB version selected from the release requirements. Confirm the active PHP version used by the web server, not only the version shown by a command-line binary.
- Create DNS records. Point the domain (and any intended
wwwname) at the VPS address. Wait for the records to resolve before testing the installer. If you use a separate mail service, keep mail records intact while changing only the web records needed for the store. - Create the database and user before installation. Record the database host, database name, username, password, and port. A local database normally uses a local host value, but use the host value supplied by your provider when the database is on another server. Grant the user access only to the Zen Cart database.
For a direct SQL setup, the sequence is to create a database, create a password-bearing user, grant that user privileges on the new database, and reload privileges according to your database version. Use a unique, long database password and store it in a password manager; the browser installer will need the same values.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
4. Download, verify, and upload Zen Cart
Use the official Zen Cart download source for the release you selected. The project installation instructions tell operators to verify the published MD5 or SHA1 hash, unzip the archive, and upload everything inside the unzipped folder to the web server. Verification catches incomplete or altered downloads before they become an application problem.
- Download the archive and the matching published checksum from the same official release area.
- Calculate the archive’s MD5 or SHA1 value on your workstation or VPS and compare it character-for-character with the published value. Do not continue when the values differ; download the archive again.
- Unzip the verified archive. Upload all of its contents, including hidden files such as
.htaccess, to the intended document root or a deliberate subdirectory. - Use the directory your host calls
public_html,www, orhtml, or the equivalent web root. Avoid an accidental extra level such as/public_html/zen-cart/zen-cart/unless that nested URL is intentional.
If you are deploying into a subdirectory, decide that path before installation because it affects the catalog URL, administrator URL, and generated configuration files.
5. Prepare configuration files and writable directories
Before launching the browser installer, make the files and directories available exactly as the package expects.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
- Inside the uploaded tree, rename
includes/dist-configure.phptoconfigure.php. - Temporarily make the new
includes/configure.phpwritable by the web-server process so the installer can write the store settings. - Make the
cacheandlogsdirectories writable by the web-server process. - Keep ownership and permissions as narrow as your hosting model allows. Do not make the entire document root world-writable merely to silence a permission warning.
- Leave the installer able to report additional directories that need attention. The detailed installation guide may flag more paths depending on the release and server layout; fix each red item it identifies before proceeding.
On a server using separate deployment and web-service users, use group ownership or an approved ACL rather than granting write access to every account. The objective is temporary installer write access followed by read-only configuration files wherever the server supports it.
6. Run the browser installer
Open the domain or subdirectory URL in a browser. Zen Cart’s installer starts with a pre-flight screen that tests the PHP runtime, extensions, permissions, and other technical requirements.
Pre-flight checks
- Read every red error, not only the first one. A missing extension, wrong PHP branch, unwritable directory, or unsupported database driver must be corrected before continuing.
- Recheck the web server’s PHP handler after changing packages. PHP-FPM and Apache module configurations can expose different extensions from the command line.
- Reload the check after each correction. Warnings may be acceptable only when the installer explicitly labels them as optional; do not dismiss an error because the page otherwise looks complete.
System setup
The system-setup screen collects the server and URL settings. Enter the final domain, catalog path, administrator path, and whether the store will use SSL. Select HTTPS when the certificate is already installed and reachable. If the certificate is not ready, complete the prerequisite certificate work before treating the store as production-ready rather than leaving a permanent HTTP deployment.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Database setup
Enter the database type supported by your release, database host, database name, username, password, and port when required. These values must match the database and user created earlier. A failed connection usually means a typo, a wrong host value, a blocked database port, or a user that was created without privileges on the selected database.
Demo data and administrator account
The installer offers optional demo data. Use it only when you want sample categories and products for evaluation; omit it when the database must begin empty for a real catalog. Set the administrator username, email address, and a unique password that is not reused anywhere else. Save the credentials in a password manager before submitting the form.
After the final screen writes the settings, test both the catalog and the administrator URL in a private browser window. Confirm that pages load, the administrator can sign in, and the database contains the expected demo or empty state.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.7. Secure the completed installation
Installation is not finished when the storefront first renders. Perform these actions immediately after the installer succeeds.
- Lock both configuration files. Change permissions on the generated
includes/configure.phpandadmin/includes/configure.php. The installation guide lists 644 or 444 depending on the server; choose the most restrictive value that still lets the web server read the files. Do not leave either file writable by the web process. - Delete the installer. Remove the entire
/zc_installdirectory from the web root. Do not merely rename it or rely on an access rule while leaving the installation files online. - Change or confirm the administrator password. Use a long, unique password and remove any temporary account you created for testing. Review administrator accounts and privileges before opening the store publicly.
- Enable HTTPS. Install and renew an SSL certificate, redirect HTTP to HTTPS, and use the HTTPS choice in Zen Cart’s configuration. Zen Cart’s documentation states that stores should always use HTTPS.
- Review PHP exposure. Keep
allow_url_includeoff and leavepassthru,system, andshell_execdisabled unless a specifically vetted plugin requires one. Recheck that cURL uses OpenSSL. - Audit web-server rules. On Apache, verify that
AllowOverridepermits the package’s protections and that rewrite and SSL modules are active. On Nginx, create explicit rules that deny direct access to sensitive configuration, cache, log, and installation paths; the Apache.htaccessfiles do not enforce those restrictions for you. - Establish backups. Back up the database and uploaded files separately, retain more than one restore point, and test a restore on a non-production location. A VPS snapshot alone is not a substitute for a database-aware backup you can retrieve independently.
- Patch the operating system and application. Subscribe to release and security notices, test updates on a copy when possible, and keep a rollback or backup before changing PHP, the database, or Zen Cart files.
8. Troubleshoot common installation failures
| Symptom | Likely cause | Correction |
|---|---|---|
| Pre-flight reports a missing extension | The extension is not installed for the PHP handler serving web requests, or the wrong PHP branch is active. | Install the required extension for that PHP branch, restart the relevant PHP/web service, and reload the pre-flight page. |
| Installer cannot write configuration | includes/configure.php was not created from dist-configure.php, or the web-server user lacks write permission. |
Check the filename, owner, group, and directory permissions; grant temporary write access only to the required file. |
| Cache or log warning remains red | The directory exists but is not writable by the actual web-service account. | Correct ownership or ACLs for cache and logs, then rerun the check. Avoid making all files writable. |
| Database connection fails | Wrong host, port, name, username, password, database driver, or missing privileges. | Test the credentials outside the installer, confirm the user is granted access to the selected database, and verify that the PHP MySQL drivers are enabled. |
| Clean URLs or protected paths do not work on Apache | AllowOverride is disabled or rewrite and related modules are unavailable. |
Set AllowOverride to All or at least Limit Indexes Options as appropriate, enable the documented modules, and reload Apache. |
| Nginx exposes a sensitive directory | The server is ignoring Zen Cart’s Apache .htaccess rules. |
Add and test explicit Nginx deny/location rules for configuration, logs, cache, and installer paths before exposing the site publicly. |
| Store works over HTTP but shows mixed-content or redirect errors over HTTPS | SSL was enabled incompletely, the configured URL still uses HTTP, or the proxy/web server is not forwarding HTTPS correctly. | Install a valid certificate, set the canonical store URL to HTTPS, configure the proxy headers when applicable, and test catalog, administrator, images, and checkout pages. |
| Administrator login fails immediately after installation | Credentials were mistyped, the wrong administrator URL is being used, or cookies are blocked by an HTTP/HTTPS mismatch. | Use the exact administrator path generated during setup, verify the password from the saved record, and retry in a private window after correcting the canonical HTTPS URL. |
9. VPS selection and ongoing operating checklist
A VPS is suitable when you need control over PHP versions, web-server directives, database settings, and scheduled backups. Compare providers on the capabilities that directly affect this deployment rather than on generic CPU claims.
- Can the provider run the PHP and MySQL/MariaDB versions required by your exact Zen Cart release?
- Can you choose Apache or Nginx and edit
AllowOverride, virtual hosts, or Nginx server blocks? - Is SSL certificate issuance and renewal automated, or must you manage it manually?
- Are database backups restorable independently of full-server snapshots?
- Is there enough memory and storage headroom for PHP workers, database growth, images, logs, and several backup generations?
- Do you have root access, a firewall, patching tools, monitoring, and a documented recovery path?
- Does support understand a Zen Cart-compatible PHP and database stack rather than offering only a generic web-server response?
After launch, schedule a recurring review of operating-system patches, PHP and database support windows, certificate renewal, backup success and restore tests, administrator accounts, writable directories, and Nginx or Apache access rules. Recheck compatibility before upgrading a major PHP or database branch; a newer package is not automatically supported by every Zen Cart release.
Quick Recap
10. Final deployment checklist
- Exact Zen Cart release requirements matched to PHP and MySQL/MariaDB.
- All required PHP extensions enabled, with
memory_limitat least 128 MB. - Domain DNS points to the VPS and the final document root is correct.
- Database and least-privilege user created before the browser installer.
- Archive checksum verified and every package file uploaded, including hidden files.
dist-configure.phprenamed, required directories writable during setup, and no unnecessary world-writable permissions.- Pre-flight has no unresolved red errors; system, SSL, database, demo-data, and administrator settings are intentional.
- Both generated configuration files are no longer writable,
zc_installis deleted, and the administrator password is unique. - HTTPS works for catalog, administrator, images, and checkout, with HTTP redirected appropriately.
- Apache protections are active, or equivalent Nginx rules have been written and tested.
- Backups, patching, monitoring, and a tested restore procedure are in place.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
