# SixPreflight documentation

> Source: https://www.allsweb.com/sixpreflight/docs
> Markdown for agents: https://www.allsweb.com/sixpreflight/docs.md
> Publisher: AllsWeb (www.allsweb.com)

SixPreflight reads a server and tells you whether 6amMart will actually run on it — and exactly what to change where it will not. These pages cover what it checks, how to read the report, and how to fix each finding. It is free, and it needs nothing but PHP.

## Pages, in reading order

1. [What SixPreflight is](https://www.allsweb.com/sixpreflight/docs/start-here) — markdown: https://www.allsweb.com/sixpreflight/docs/start-here.md
   - What it is · What it costs you to skip it · The three ways it runs · Does it actually work · What it never does · Where to go next
2. [Install SixPreflight](https://www.allsweb.com/sixpreflight/docs/install) — markdown: https://www.allsweb.com/sixpreflight/docs/install.md
   - Where the folder goes · Set a password on the first screen · Your first scan · Restrict access by IP (optional) · Next: run it, then read the result
3. [What it checks](https://www.allsweb.com/sixpreflight/docs/what-it-checks) — markdown: https://www.allsweb.com/sixpreflight/docs/what-it-checks.md
   - The ten steps · Why no single scan shows all 169 · What is not part of the 169 · What comes next
4. [Reading the report](https://www.allsweb.com/sixpreflight/docs/reading-the-report) — markdown: https://www.allsweb.com/sixpreflight/docs/reading-the-report.md
   - The verdict comes first, not a number · What the colours mean · How the score is built · Grades · One red row caps the score at 88, so read the rows · Blockers cap it harder · Anatomy of a finding · Why order matters · Where to go next
5. [The "What to fix" page](https://www.allsweb.com/sixpreflight/docs/what-to-fix) — markdown: https://www.allsweb.com/sixpreflight/docs/what-to-fix.md
   - What to change · What your server needs, and what it has · Keys and credentials · The tuning catalog behind it · Where to go next
6. [Server and configuration guide](https://www.allsweb.com/sixpreflight/docs/requirements) — markdown: https://www.allsweb.com/sixpreflight/docs/requirements.md
   - The recommended stack · Sizing the server · PHP · Database · Cron & queue worker · The .env file · Google Maps · Firebase · Payments · Email · SMS & OTP · Storage — Cloudflare R2 · Cloudflare · Backups · Go-live checklist · Where to go next
7. [Which PHP, database and OS version](https://www.allsweb.com/sixpreflight/docs/versions) — markdown: https://www.allsweb.com/sixpreflight/docs/versions.md
   - What to install · Everything, ranked · PHP — 8.3 vs 8.4 vs 8.5 · Database — all five engines · Operating system — the three supported releases · How this was measured · When to run this again
8. [What the setup script does](https://www.allsweb.com/sixpreflight/docs/setup-script) — markdown: https://www.allsweb.com/sixpreflight/docs/setup-script.md
   - What it is · The four modes · The three safety rules · The seven layers · The queue worker and scheduler · What it will never do · Undoing a run · Reading the summary
9. [The .env check](https://www.allsweb.com/sixpreflight/docs/env-check) — markdown: https://www.allsweb.com/sixpreflight/docs/env-check.md
   - Why it does not compare against .env.example · Four kinds of problem, not just one · Two problems nothing else surfaces · Where to go next
10. [Running inside SixPanel](https://www.allsweb.com/sixpreflight/docs/inside-sixpanel) — markdown: https://www.allsweb.com/sixpreflight/docs/inside-sixpanel.md
   - SixPanel is two runtimes, and neither one is assumed · What it scores on a SixPanel server · Two customers, two different pages · How it knows which mode it is in · The panel is doing its own supervision underneath · Where to go next
11. [Speed and sizing](https://www.allsweb.com/sixpreflight/docs/speed-and-sizing) — markdown: https://www.allsweb.com/sixpreflight/docs/speed-and-sizing.md
   - Four benchmarks, one button each · What "traffic" actually means · Reading the scores · Is it safe to run on a live shop? · Comparing two servers before you rent one · Where to go next
12. [Live delivery tracking](https://www.allsweb.com/sixpreflight/docs/live-tracking) — markdown: https://www.allsweb.com/sixpreflight/docs/live-tracking.md
   - What it actually powers · What it costs to run · The 15 checks · The live test · The step most setups miss · Where to go next
13. [Machine-readable findings](https://www.allsweb.com/sixpreflight/docs/findings-api) — markdown: https://www.allsweb.com/sixpreflight/docs/findings-api.md
   - Why it never starts a scan itself · Authentication · The response shape · Where to go next
14. [Security and privacy](https://www.allsweb.com/sixpreflight/docs/security-and-privacy) — markdown: https://www.allsweb.com/sixpreflight/docs/security-and-privacy.md
   - The password gate · Saved scans cannot be read over the web · What the shipped .htaccess does, and its real limit · Restricting by IP address (optional) · The session cookie is scoped narrowly on purpose · What a confined PHP hides, and why that is not a fault · tests/smoke.php must never be reachable over the web · What it never does · Removing it when you are done
15. [Verify and history](https://www.allsweb.com/sixpreflight/docs/verify-and-history) — markdown: https://www.allsweb.com/sixpreflight/docs/verify-and-history.md
   - Every scan is kept · Why files, not a database table · Two comparisons it deliberately refuses to make · Exporting a run · Where to go next
16. [Troubleshooting](https://www.allsweb.com/sixpreflight/docs/troubleshooting) — markdown: https://www.allsweb.com/sixpreflight/docs/troubleshooting.md
   - The scan stops partway through with a PHP error · "Set a password first" will not go away · "Could not create preflight/config.php" · The page 404s · "Not allowed from this address" · "Could not read .env" · Exposure tests say "not tested" · A panel or section is empty · A finding looks wrong · Removing it
17. [Limitations](https://www.allsweb.com/sixpreflight/docs/limitations) — markdown: https://www.allsweb.com/sixpreflight/docs/limitations.md
   - The short version · It cannot see what the server will not show it · What a confined PHP cannot read · Where being hardened produces a wrong answer, not a blank one · A disabled PHP function used to end the whole scan · A quick check cannot see everything a deeper one can · The tool disagrees with itself on free disk space · It reports what the server says, not what is actually in effect · The exposure step is not a penetration test · One credential genuinely cannot be verified from a server · The benchmarks measure this machine, right now · Row counts are estimates, not exact figures · It is a checker first · Where to go next