OpenCart

This page explains the OpenCart one-click installer in GoAdmio. It lets you install a complete OpenCart online store on a domain in a single step — no manual file upload, no database setup, no configuration.

Location: Admin Panel → Scripts → OpenCart
Location (User Panel): Scripts → OpenCart (if enabled for the account)

Overview

OpenCart is a free, open-source e-commerce platform — a popular shopping cart system known for its user-friendly admin interface, extensive marketplace of extensions, and support for multiple stores from a single installation.

GoAdmio's one-click installer handles the entire setup:

• Downloads the latest OpenCart release
• Creates the database and database user
• Configures OpenCart's config files with the correct credentials
• Installs OpenCart in the chosen directory
• Runs the installation wizard (store name, admin user, admin password)

> Note: The one-click installer is for new installations. For migrating an existing OpenCart store, use Backup Wizard or restore from an OpenCart backup.

What the Page Shows

| Field | Description |
|---|---|
| Domain | The domain to install OpenCart on (e.g., example.com) |
| Directory | The installation path (e.g., /home/example.com/www) |
| Version | The OpenCart version to install (e.g., Latest Version) |
| Database Name | The database to use — prefixed with the account username |
| Database Username | The database user — prefixed with the account username |
| Database Password | The password for the database user — you must enter a new password |
| Install | Run the installation |

> Important: The Database Password field does not auto-generate. You must enter a new password for the new database. Choose a strong password and store it securely.

Prerequisites

Before installing OpenCart:

1. A domain is set up on the account — see Create New Account or Addon Domains.
2. DNS points to the server — the domain resolves to the GoAdmio server. See DNS Manager and Track DNS.
3. The document root exists — usually www/<domain> — see Change Document Root.
4. The domain is not suspended — see Suspend Account.
5. The account has disk space and database limits — see Show Accounts Over Quota and Add/Modify Packages.
6. PHP and MySQL are running — see Service Status.
7. PHP version is compatible — OpenCart 4 requires PHP 8.0+ (check the OpenCart documentation for the current minimum). See MultiPHP Manager.

How to Install OpenCart

Step 1 — Open the installer

1. Log in to the GoAdmio Admin Panel (or User Panel).
2. Navigate to Scripts → OpenCart.

Step 2 — Select the domain

1. Choose the Domain from the dropdown.
2. The Directory field auto-fills with the account's document root.
3. Adjust the directory if you want OpenCart in a subdirectory (e.g., /home/example.com/www/shop).

Step 3 — Choose the version

1. Select the Version — usually Latest Version.
2. If other versions are available, choose the one you need.

Step 4 — Configure the database

1. The Database Name and Database Username are pre-filled with the account's username prefix.
2. Add a suffix if you want a specific name (e.g., shop), or leave the default.
3. Enter a new password in the Database Password field.

> Warning: The database password is not auto-generated. If you leave it blank or use a weak password, the database is at risk. Use a strong password and save it immediately.

Step 5 — Install

1. Click Install.
2. GoAdmio downloads OpenCart, creates the database, configures the store files, and installs OpenCart.
3. The installation may take a minute or two.
4. When complete, GoAdmio shows the OpenCart installation wizard or a link to it.

Step 6 — Complete the OpenCart setup

1. Open the installation wizard at https://<domain>/install/ (or the URL shown).
2. Follow the wizard:

1. Click Install.
2. Delete the install directory — OpenCart requires this for security.
3. Rename the admin directory to something non-obvious (e.g., myadmin123).
4. Log in at https://<domain>/<renamed-admin>/ with the credentials you set.

> Warning: OpenCart installs with an admin directory by default. Rename it immediately after installation — leaving it as admin makes the admin login page a prime target for automated attacks.

What the Installer Creates

| Item | Created? | Notes |
|---|---|---|
| OpenCart files | ✅ Yes | In the chosen directory |
| Database | ✅ Yes | With the account's username prefix |
| Database user | ✅ Yes | With the account's username prefix |
| Config files | ✅ Yes | config.php and admin/config.php |
| OpenCart admin user | ⚠️ Via the wizard | You set it in step 6 |
| Store name | ⚠️ Via the wizard | You set it in step 6 |
| SSL certificate | ❌ No | Install separately — see Install Free SSL Certificate |
| Caching | ❌ No | OpenCart has built-in caching — enable it in the admin |
| Security module | ❌ No | Recommended: built-in security features |

> Note: The installer creates a working store, but a production e-commerce site also needs:
> - SSL — mandatory for e-commerce (protects payment data) — see Install Free SSL Certificate
> - Caching — OpenCart's built-in cache
> - Backups — see Backup Wizard
> - Security hardening — see the recommendations below

After Installing

| Task | Why |
|---|---|
| Complete the OpenCart wizard | Set store name, admin user, and admin email |
| Delete the install directory | Critical security step |
| Rename the admin directory | Critical security step — reduces brute-force risk |
| Log in to the admin | Confirm the store works |
| Install an SSL certificate | Mandatory for e-commerce — see Install Free SSL Certificate |
| Redirect HTTP to HTTPS | Mandatory for e-commerce — see Redirect HTTP to HTTPS |
| Configure email | OpenCart sends order confirmations and password resets — see Email Accounts |
| Enable OpenCart caching | Admin → System → Settings → Cache |
| Set up backups | E-commerce sites need daily backups — see Backup Wizard |
| Update OpenCart | Security and performance |
| Configure payment gateways | OpenCart supports multiple gateways |
| Configure shipping | Set up shipping zones and methods |
| Add products | Begin adding your catalog |

> Warning: The install directory must be deleted after installation, and the admin directory must be renamed. Leaving either in place is a serious security risk.

> Warning: SSL is mandatory for e-commerce. Without HTTPS, customer payment data is transmitted in plaintext — a PCI compliance violation and a serious security risk.

Common Scenarios

"The installation succeeded but the store does not load"

1. Check DNS — does the domain resolve to the server? See Track DNS.
2. Check the document root — is OpenCart in the right directory? See File Manager.
3. Check the web server — is it running? See Service Status.
4. Check the SSL certificate — if HTTPS is enforced but no certificate, the site will not load.

"The installation fails with a database error"

1. Check the database password — it must be filled in.
2. Check the database limit — the account may have reached its database quota. See Add/Modify Packages.
3. Check MySQL — is it running? See Service Status.
4. Check disk space — the account may be over quota. See Show Accounts Over Quota.

"OpenCart email is not working"

OpenCart uses PHP's mail() function by default, which is often unreliable — especially for order confirmations.

1. Create a mailbox — see Email Accounts.
2. In the OpenCart admin, go to System → Settings → Mail.
3. Set Mail Engine to SMTP.
4. Enter:

1. Save and test.

"I want OpenCart in a subdirectory (e.g., /shop)"

1. In the Directory field, append /shop to the document root.
2. Complete the installation.
3. The store is now at https://example.com/shop/.

"The customer's OpenCart store was compromised"

1. Reset the OpenCart admin password via the admin or database.
2. Review the OpenCart users list for unauthorized admins.
3. Scan for malware — see ClamAV Antivirus.
4. Update OpenCart — the most common compromise vector.
5. Check config files for injected code.
6. Review logs — see FTP Logs and Apache Status.
7. Check for card-skimming code — e-commerce sites are targeted for payment data.
8. Consider restoring from a clean backup — see Restore Full Backup.

Security Recommendations

| Practice | Why |
|---|---|
| Delete the install directory | Critical — otherwise the store can be reinstalled |
| Rename the admin directory | Critical — reduces brute-force attacks |
| Install SSL immediately | Mandatory for e-commerce — protects payment data |
| Redirect HTTP to HTTPS | Mandatory for e-commerce |
| Use a strong admin username | admin is the most targeted username |
| Use a strong admin password | Admin accounts are brute-force targets |
| Enable 2FA on the admin | OpenCart supports 2FA via extensions |
| Keep OpenCart updated | Outdated versions are the top compromise vector |
| Keep extensions updated | Same reason |
| Remove unused extensions | Every extension is a potential vulnerability |
| Use a security extension | Check the OpenCart marketplace |
| Back up daily | E-commerce sites need regular backups |
| Limit admin users | Fewer admins means fewer targets |
| Use file permissions | See Fix Permissions |
| Monitor the store | Check for unusual admin activity |
| PCI compliance | If you handle card data, follow PCI DSS requirements |
| Use a payment gateway | Do not store card data on the server |

> Warning: A newly installed OpenCart store is not automatically secure. The install directory, the admin directory, default admin credentials, and outdated extensions are common compromise vectors. E-commerce sites have additional legal and compliance requirements — especially if they handle payment card data.

Related Commands

| Command | Purpose |
|---|---|
| /go/conf | Rebuild web server config |
| /go/ssl domain.com | Install SSL for the site |
| /go/repair | Repair the OpenCart database if needed |

See Command Reference for the full CLI list.

Related Pages

• Scripts — other one-click installers (WordPress, Joomla, Drupal, phpBB, myBB, MediaWiki, LiteCart, osCommerce, Zen Cart)
• MySQL Databases — manage the OpenCart database
• Install Free SSL Certificate — mandatory for e-commerce
• Redirect HTTP to HTTPS — mandatory for e-commerce
• Email Accounts — SMTP mailbox for order confirmations
• SPF / DKIM — email authentication
• File Manager — inspect OpenCart files, rename the admin directory
• Backup Wizard — back up the store
• ClamAV Antivirus — scan for malware
• Cache Website — full-page caching for performance
• MultiPHP Manager — PHP version for the site
• PHP Disable Functions — restrict dangerous functions
• Fix Permissions — repair file ownership
• Change Document Root — if OpenCart is in a subdirectory

Troubleshooting

| Problem | Likely cause | Solution |
|---|---|---|
| Installation fails with "database error" | Wrong password, database limit reached, or MySQL down | Verify the password; check limits; check Service Status |
| Site does not load after install | DNS not pointing to the server, or wrong document root | Check Track DNS; verify the directory |
| "The install directory still exists" | The installer did not remove it | Delete it manually via File Manager |
| OpenCart wizard does not appear | Installation incomplete, or wrong URL | Check the install log; try https://domain/install/ |
| Cannot log in to the admin | Wrong credentials, or the admin directory was renamed and the URL is wrong | Verify the admin directory name; reset the password via the database |
| Email not working | OpenCart uses mail() by default | Configure SMTP in the admin — see Email Accounts |
| Site shows a blank page | PHP error suppressed | Enable display_errors temporarily in PHP Configuration; check the error log |
| Extensions cannot be installed | File permissions, or PHP limits | Check Fix Permissions and PHP Configuration |
| Store is slow | No caching, or PHP version too old | Enable OpenCart cache; use PHP 8.x — see MultiPHP Manager |
| Payment gateway not working | Wrong API credentials, or SSL missing | Verify the gateway settings; install SSL |
| OpenCart is in the wrong directory | Installation path was set incorrectly | Delete and reinstall in the correct directory |

Best Practices

| Practice | Why |
|---|---|
| Use the latest OpenCart version | Security and performance |
| Delete the install directory | Critical security step |
| Rename the admin directory | Critical security step — reduces brute-force attacks |
| Install SSL immediately | Mandatory for e-commerce |
| Redirect HTTP to HTTPS | Mandatory for e-commerce |
| Use a non-default admin username | admin is the most targeted |
| Use a strong admin password | Brute-force protection |
| Enable 2FA on the admin | Adds a layer beyond the password |
| Configure SMTP for email | Reliable order confirmations |
| Enable OpenCart caching | Improve performance |
| Back up daily | E-commerce sites are high-value targets |
| Keep everything updated | Outdated extensions are the top compromise vector |
| Remove unused extensions | Every extension is a potential vulnerability |
| Do not store card data | Use a payment gateway — reduces PCI scope |
| Monitor the store | Check for unusual admin activity |
| Store the database password securely | You will need it for direct database access |
| Follow PCI DSS | If you handle card data, compliance is mandatory |