SixPreflight documentation

SixPreflight reads a server and tells you whether 6amMart will actually run on it — and exactly what to change where it will not. These pages cover what it checks, how to read the report, and how to fix each finding. It is free, and it needs nothing but PHP.

1. 01What SixPreflight isWhat it is · What it costs you to skip it · The three ways it runs · Does it actually work
2. 02Install SixPreflightWhere the folder goes · Set a password on the first screen · Your first scan · Restrict access by IP (optional)
3. 03What it checksThe ten steps · Why no single scan shows all 169 · What is not part of the 169 · What comes next
4. 04Reading the reportThe verdict comes first, not a number · What the colours mean · How the score is built · Grades
5. 05The "What to fix" pageWhat to change · What your server needs, and what it has · Keys and credentials · The tuning catalog behind it
6. 06Server and configuration guideThe recommended stack · Sizing the server · PHP · Database
7. 07Which PHP, database and OS versionWhat to install · Everything, ranked · PHP — 8.3 vs 8.4 vs 8.5 · Database — all five engines
8. 08What the setup script doesWhat it is · The four modes · The three safety rules · The seven layers
9. 09The .env checkWhy it does not compare against .env.example · Four kinds of problem, not just one · Two problems nothing else surfaces · Where to go next
10. 10Running inside SixPanelSixPanel is two runtimes, and neither one is assumed · What it scores on a SixPanel server · Two customers, two different pages · How it knows which mode it is in
11. 11Speed and sizingFour benchmarks, one button each · What "traffic" actually means · Reading the scores · Is it safe to run on a live shop?
12. 12Live delivery trackingWhat it actually powers · What it costs to run · The 15 checks · The live test
13. 13Machine-readable findingsWhy it never starts a scan itself · Authentication · The response shape · Where to go next
14. 14Security and privacyThe password gate · Saved scans cannot be read over the web · What the shipped .htaccess does, and its real limit · Restricting by IP address (optional)
15. 15Verify and historyEvery scan is kept · Why files, not a database table · Two comparisons it deliberately refuses to make · Exporting a run
16. 16TroubleshootingThe scan stops partway through with a PHP error · "Set a password first" will not go away · "Could not create preflight/config.php" · The page 404s
17. 17LimitationsThe short version · It cannot see what the server will not show it · What a confined PHP cannot read · Where being hardened produces a wrong answer, not a blank one