Open-Source CMS · microweber

microweber

Microweber is a drag-and-drop CMS and website builder built on Laravel 10, designed primarily for e-commerce and small business websites. It runs on PHP 8.2+, supports multiple databases (MySQL, SQLite, PostgreSQL, SQL Server), and includes built-in shopping cart, content management, and real-time editing features.

Talk to DEV.co Discuss Implementation

Source: GitHub — github.com/microweber/microweber

3.4k

GitHub stars

935

Forks

HTML

Primary language

MIT

License (OSI-approved)

Key facts

Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.

Field	Value
Repository	microweber/microweber
Owner	microweber
Primary language	HTML
License	MIT — OSI-approved
Stars	3.4k
Forks	935
Open issues	381
Latest release	v2.0.20 (2025-08-14)
Last updated	2026-07-07
Source	https://github.com/microweber/microweber

What microweber is

Laravel 10–based PHP CMS with drag-and-drop UI, supporting HTML/JavaScript frontend and modular architecture. Requires PHP 8.2+ with specific extensions (GD, intl, curl, openssl, mbstring, bcmath, zip, fileinfo, pdo_mysql, pdo_sqlite), Apache/Nginx/IIS, and a relational or SQLite database. Primary language listed as HTML; modern CI/CD via GitHub Actions (PHPUnit, Dusk browser tests).

Quickstart

Get the microweber source

Clone the repository and explore it locally.

terminalbash

1git clone https://github.com/microweber/microweber.git2cd microweber3# follow the project's README for install & configuration

Need it deployed, integrated, or customized instead? DEV.co ships production installs.

Best use cases

Small to medium e-commerce sites

Built-in shopping cart, product management, and order handling make this suitable for new or growing online stores without heavy customization needs.

Non-technical content creator websites

Drag-and-drop interface and real-time text editing allow business owners and bloggers to manage content without coding knowledge.

Rapid prototyping and template-based deployments

75+ pre-designed layouts in the 'Dream' template and one-click marketplace deployments (DigitalOcean, Azure, Linode, Vultr) enable fast site launch.

Implementation considerations

PHP 8.2+ is mandatory; ensure all 14 listed extensions are enabled (bcmath, curl, fileinfo, GD, intl, mbstring, openssl, sodium, zip, pdo_mysql, pdo_sqlite, json, dom). Missing extensions will cause installation or runtime failures.
Choose database strategy early: SQLite for simple sites, MySQL/PostgreSQL for production multi-user scenarios. Migration between databases is not documented.
Directory permissions are critical: ensure config/, storage/, and userfiles/ are writable by the PHP process to avoid silent failures or permission errors.
Nginx requires explicit location rules to deny vendor, src, config, database, bootstrap, storage, app, routes, .git, .env—missing this creates security exposure.
Dev branch is acknowledged as unstable; plan upgrades from master releases only and test thoroughly in staging before production.

When to avoid it — and what to weigh

Complex, highly customized enterprise systems required — Microweber is optimized for standard e-commerce and content sites; deep custom business logic or legacy system integration may require extensive development.
Large-scale, high-traffic installations — No performance benchmarks, caching strategy, or horizontal scaling architecture provided; suitability for millions of concurrent users is unknown.
Strict regulatory or security compliance mandates — No security audit, penetration test, or compliance certifications (SOC2, ISO 27001) are mentioned. Requires thorough vetting before handling sensitive data.
Requirement for proprietary vendor support or SLA — Open-source community project; no commercial support contract or guaranteed response times are evident from the repository data.

License & commercial use

MIT License. Permissive OSI-approved license that allows commercial use, modification, and distribution with minimal restrictions (retain copyright and license notice).

MIT License explicitly permits commercial use, modification, and redistribution. However, the project itself is community-driven with no vendor indemnification or warranty clause. Commercial deployments should independently verify legal compliance for their jurisdiction and consider purchasing third-party support or liability insurance if mission-critical.

DEV.co evaluation signals

Editorial assessment — not user reviews. Directional, with an explicit confidence level.

Signal	Assessment
Maintenance	Active
Documentation	Adequate
License clarity	Clear
Deployment complexity	Moderate
DEV.co fit	Good
Assessment confidence	High

Security considerations

No security audit, vulnerability disclosure policy, or third-party penetration test results are published. Laravel 10 is a mature framework with active security patches, but Microweber-specific security practices are unknown. Automatic .htaccess files with Deny All directives suggest security-conscious defaults. No details on CSRF, SQL injection, XSS mitigation, authentication mechanisms (OAuth, SSO), or data encryption. Nginx configuration example includes vendor/ and sensitive paths in deny rules. Code review or third-party assessment is strongly recommended before handling payment data or user PII.

Alternatives to consider

WordPress with WooCommerce / Elementor

Mature, widely hosted, extensive plugin ecosystem, strong community support. Higher resource overhead and complexity than Microweber; steeper customization learning curve for some users.

Shopify

Fully managed SaaS, no infrastructure concerns, native payment processing, app marketplace. Proprietary, subscription-based, less control over data and customization than self-hosted Microweber.

Statamic / Craft CMS

Modern, Laravel-adjacent (Statamic built on Laravel), strong developer experience, headless-capable. Higher complexity for non-technical users; primarily developer-focused rather than drag-and-drop friendly.

Software development agency

Build on microweber with DEV.co software developers

Evaluate Microweber for your e-commerce or content project. Download, test the live demo, or deploy to a cloud marketplace. Review security and performance requirements with your team before production launch.

Talk to DEV.co

Related open-source tools

Surfaced by semantic similarity across the DEV.co open-source index.

microfeed winter sharp

Related on DEV.co

Explore the category and the services that help you build with it.

Open-Source CMS Web App Development E-commerce Development Cloud Deployment Talk to DEV.co

microweber FAQ

Can I use Microweber for a high-traffic e-commerce site?

Unknown. No performance benchmarks, caching strategy, CDN integration, or database optimization docs are provided. Start with load testing in a staging environment and consider load balancing if traffic exceeds 100+ concurrent users.

Is Microweber suitable for production payment processing?

Requires careful review. MIT license does not include liability protection. No security audit is published. Ensure PCI-DSS compliance, use tokenized payment processing (avoid storing raw card data), and conduct a security audit before launching.

What databases does Microweber support?

MySQL, SQLite, PostgreSQL, and Microsoft SQL Server via PDO drivers. SQLite is recommended for small sites; MySQL/PostgreSQL for multi-user production. Database migration tools are not mentioned.

Is commercial support available?

Not from the repository. Community support via Discord and GitHub issues is available. Third-party commercial support vendors may exist; inquire with the team directly at the official website.

Software developers & web developers for hire

Need help beyond evaluating microweber? DEV.co is a software development agency offering software development services and web development for teams of every size. Our software developers and web developers build custom software, web applications, APIs, and open-source cms integrations — and maintain them long-term.

Ready to build your next site?

Talk to DEV.co Schedule a Consultation