Zen Cart

This page explains the Zen Cart one-click installer in GoAdmio. It lets you install a complete Zen Cart online store on a domain in a single step — no manual file upload, no database setup, no configuration.

Location: Admin Panel → Scripts → Zen Cart
Location (User Panel): Scripts → Zen Cart (if enabled for the account)

Overview

Zen Cart is a free, open-source e-commerce platform — a shopping cart system known for its flexibility, extensive add-on ecosystem, and strong community support. It is a popular choice for small to medium online stores.

GoAdmio's one-click installer handles the entire setup:

• Downloads the latest Zen Cart release
• Creates the database and database user
• Configures Zen Cart's config files with the correct credentials
• Installs Zen Cart in the chosen directory
• Runs the installation wizard (store name, admin user, admin password)

> Note: The one-click installer is for new installations. For migrating an existing Zen Cart store, use Backup Wizard or restore from a Zen Cart backup.

What the Page Shows

| Field | Description |
|---|---|
| Domain | The domain to install Zen Cart on (e.g., example.com) |
| Directory | The installation path (e.g., /home/example.com/www) |
| Version | The Zen Cart version to install (e.g., Latest Version) |
| Database Name | The database to use — prefixed with the account username |
| Database Username | The database user — prefixed with the account username |
| Database Password | The password for the database user — you must enter a new password |
| Install | Run the installation |

> Important: The Database Password field does not auto-generate. You must enter a new password for the new database. Choose a strong password and store it securely.

Prerequisites

Before installing Zen Cart:

1. A domain is set up on the account — see Create New Account or Addon Domains.
2. DNS points to the server — the domain resolves to the GoAdmio server. See DNS Manager and Track DNS.
3. The document root exists — usually www/<domain> — see Change Document Root.
4. The domain is not suspended — see Suspend Account.
5. The account has disk space and database limits — see Show Accounts Over Quota and Add/Modify Packages.
6. PHP and MySQL are running — see Service Status.
7. PHP version is compatible — Zen Cart 1.5.8 requires PHP 7.4+ (check the Zen Cart documentation for the current minimum). See MultiPHP Manager.

How to Install Zen Cart

Step 1 — Open the installer

1. Log in to the GoAdmio Admin Panel (or User Panel).
2. Navigate to Scripts → Zen Cart.

Step 2 — Select the domain

1. Choose the Domain from the dropdown.
2. The Directory field auto-fills with the account's document root.
3. Adjust the directory if you want Zen Cart in a subdirectory (e.g., /home/example.com/www/shop).

Step 3 — Choose the version

1. Select the Version — usually Latest Version.
2. If other versions are available, choose the one you need.

Step 4 — Configure the database

1. The Database Name and Database Username are pre-filled with the account's username prefix.
2. Add a suffix if you want a specific name (e.g., shop), or leave the default.
3. Enter a new password in the Database Password field.

> Warning: The database password is not auto-generated. If you leave it blank or use a weak password, the database is at risk. Use a strong password and save it immediately.

Step 5 — Install

1. Click Install.
2. GoAdmio downloads Zen Cart, creates the database, configures the store files, and installs Zen Cart.
3. The installation may take a minute or two.
4. When complete, GoAdmio shows the Zen Cart installation wizard or a link to it.

Step 6 — Complete the Zen Cart setup

1. Open the installation wizard at https://<domain>/zc_install/ (or the URL shown).
2. Follow the wizard:

1. Click Install.
2. Delete the zc_install directory — Zen Cart requires this for security.
3. Rename the admin directory to something non-obvious (e.g., myadmin123).
4. Log in at https://<domain>/<renamed-admin>/ with the credentials you set.

> Warning: Zen Cart installs with an admin directory by default. Rename it immediately after installation — leaving it as admin makes the admin login page a prime target for automated attacks.

What the Installer Creates

| Item | Created? | Notes |
|---|---|---|
| Zen Cart files | ✅ Yes | In the chosen directory |
| Database | ✅ Yes | With the account's username prefix |
| Database user | ✅ Yes | With the account's username prefix |
| Config files | ✅ Yes | With the database credentials |
| Zen Cart admin user | ⚠️ Via the wizard | You set it in step 6 |
| Store name | ⚠️ Via the wizard | You set it in step 6 |
| SSL certificate | ❌ No | Install separately — see Install Free SSL Certificate |
| Caching | ❌ No | Zen Cart has built-in caching — enable it in the admin |
| Security module | ❌ No | Recommended: built-in security features |

> Note: The installer creates a working store, but a production e-commerce site also needs:
> - SSL — mandatory for e-commerce (protects payment data) — see Install Free SSL Certificate
> - Caching — Zen Cart's built-in cache
> - Backups — see Backup Wizard
> - Security hardening — see the recommendations below

After Installing

| Task | Why |
|---|---|
| Complete the Zen Cart wizard | Set store name, admin user, and admin email |
| Delete the zc_install directory | Critical security step |
| Rename the admin directory | Critical security step — reduces brute-force risk |
| Log in to the admin | Confirm the store works |
| Install an SSL certificate | Mandatory for e-commerce — see Install Free SSL Certificate |
| Redirect HTTP to HTTPS | Mandatory for e-commerce — see Redirect HTTP to HTTPS |
| Configure email | Zen Cart sends order confirmations and password resets — see Email Accounts |
| Enable Zen Cart caching | Admin → Configuration → Cache |
| Set up backups | E-commerce sites need daily backups — see Backup Wizard |
| Update Zen Cart | Security and performance |
| Configure payment gateways | Zen Cart supports multiple gateways |
| Configure shipping | Set up shipping zones and methods |
| Add products | Begin adding your catalog |

> Warning: The zc_install directory must be deleted after installation, and the admin directory must be renamed. Leaving either in place is a serious security risk.

> Warning: SSL is mandatory for e-commerce. Without HTTPS, customer payment data is transmitted in plaintext — a PCI compliance violation and a serious security risk.

Common Scenarios

"The installation succeeded but the store does not load"

1. Check DNS — does the domain resolve to the server? See Track DNS.
2. Check the document root — is Zen Cart in the right directory? See File Manager.
3. Check the web server — is it running? See Service Status.
4. Check the SSL certificate — if HTTPS is enforced but no certificate, the site will not load.

"The installation fails with a database error"

1. Check the database password — it must be filled in.
2. Check the database limit — the account may have reached its database quota. See Add/Modify Packages.
3. Check MySQL — is it running? See Service Status.
4. Check disk space — the account may be over quota. See Show Accounts Over Quota.

"Zen Cart email is not working"

Zen Cart uses PHP's mail() function by default, which is often unreliable — especially for order confirmations.

1. Create a mailbox — see Email Accounts.
2. In the Zen Cart admin, go to Configuration → E-Mail Options.
3. Set E-Mail Transport Method to SMTPAUTH.
4. Enter:

1. Save and test.

"I want Zen Cart in a subdirectory (e.g., /shop)"

1. In the Directory field, append /shop to the document root.
2. Complete the installation.
3. The store is now at https://example.com/shop/.

"The customer's Zen Cart store was compromised"

1. Reset the Zen Cart admin password via the admin or database.
2. Review the Zen Cart users list for unauthorized admins.
3. Scan for malware — see ClamAV Antivirus.
4. Update Zen Cart — the most common compromise vector.
5. Check config files for injected code.
6. Review logs — see FTP Logs and Apache Status.
7. Check for card-skimming code — e-commerce sites are targeted for payment data.
8. Consider restoring from a clean backup — see Restore Full Backup.

Security Recommendations

| Practice | Why |
|---|---|
| Delete the zc_install directory | Critical — otherwise the store can be reinstalled |
| Rename the admin directory | Critical — reduces brute-force attacks |
| Install SSL immediately | Mandatory for e-commerce — protects payment data |
| Redirect HTTP to HTTPS | Mandatory for e-commerce |
| Use a strong admin username | admin is the most targeted username |
| Use a strong admin password | Admin accounts are brute-force targets |
| Enable 2FA on the admin | Zen Cart supports 2FA via add-ons |
| Keep Zen Cart updated | Outdated versions are the top compromise vector |
| Keep add-ons updated | Same reason |
| Remove unused add-ons | Every add-on is a potential vulnerability |
| Use a security add-on | Check the Zen Cart marketplace |
| Back up daily | E-commerce sites need regular backups |
| Limit admin users | Fewer admins means fewer targets |
| Use file permissions | See Fix Permissions |
| Monitor the store | Check for unusual admin activity |
| PCI compliance | If you handle card data, follow PCI DSS requirements |
| Use a payment gateway | Do not store card data on the server |

> Warning: A newly installed Zen Cart store is not automatically secure. The zc_install directory, the admin directory, default admin credentials, and outdated add-ons are common compromise vectors. E-commerce sites have additional legal and compliance requirements — especially if they handle payment card data.

Related Commands

| Command | Purpose |
|---|---|
| /go/conf | Rebuild web server config |
| /go/ssl domain.com | Install SSL for the site |
| /go/repair | Repair the Zen Cart database if needed |

See Command Reference for the full CLI list.

Related Pages

• Scripts — other one-click installers (WordPress, Joomla, Drupal, phpBB, myBB, MediaWiki, LiteCart, osCommerce)
• MySQL Databases — manage the Zen Cart database
• Install Free SSL Certificate — mandatory for e-commerce
• Redirect HTTP to HTTPS — mandatory for e-commerce
• Email Accounts — SMTP mailbox for order confirmations
• SPF / DKIM — email authentication
• File Manager — inspect Zen Cart files, rename the admin directory
• Backup Wizard — back up the store
• ClamAV Antivirus — scan for malware
• Cache Website — full-page caching for performance
• MultiPHP Manager — PHP version for the site
• PHP Disable Functions — restrict dangerous functions
• Fix Permissions — repair file ownership
• Change Document Root — if Zen Cart is in a subdirectory

Troubleshooting

| Problem | Likely cause | Solution |
|---|---|---|
| Installation fails with "database error" | Wrong password, database limit reached, or MySQL down | Verify the password; check limits; check Service Status |
| Site does not load after install | DNS not pointing to the server, or wrong document root | Check Track DNS; verify the directory |
| "The zc_install directory still exists" | The installer did not remove it | Delete it manually via File Manager |
| Zen Cart wizard does not appear | Installation incomplete, or wrong URL | Check the install log; try https://domain/zc_install/ |
| Cannot log in to the admin | Wrong credentials, or the admin directory was renamed and the URL is wrong | Verify the admin directory name; reset the password via the database |
| Email not working | Zen Cart uses mail() by default | Configure SMTP in the admin — see Email Accounts |
| Site shows a blank page | PHP error suppressed | Enable display_errors temporarily in PHP Configuration; check the error log |
| Add-ons cannot be installed | File permissions, or PHP limits | Check Fix Permissions and PHP Configuration |
| Store is slow | No caching, or PHP version too old | Enable Zen Cart cache; use PHP 8.x — see MultiPHP Manager |
| Payment gateway not working | Wrong API credentials, or SSL missing | Verify the gateway settings; install SSL |
| Zen Cart is in the wrong directory | Installation path was set incorrectly | Delete and reinstall in the correct directory |

Best Practices

| Practice | Why |
|---|---|
| Use the latest Zen Cart version | Security and performance |
| Delete the zc_install directory | Critical security step |
| Rename the admin directory | Critical security step — reduces brute-force attacks |
| Install SSL immediately | Mandatory for e-commerce |
| Redirect HTTP to HTTPS | Mandatory for e-commerce |
| Use a non-default admin username | admin is the most targeted |
| Use a strong admin password | Brute-force protection |
| Enable 2FA on the admin | Adds a layer beyond the password |
| Configure SMTP for email | Reliable order confirmations |
| Enable Zen Cart caching | Improve performance |
| Back up daily | E-commerce sites are high-value targets |
| Keep everything updated | Outdated add-ons are the top compromise vector |
| Remove unused add-ons | Every add-on is a potential vulnerability |
| Do not store card data | Use a payment gateway — reduces PCI scope |
| Monitor the store | Check for unusual admin activity |
| Store the database password securely | You will need it for direct database access |
| Follow PCI DSS | If you handle card data, compliance is mandatory |