Rental Manager
3× faster transaction processing after full stack rewrite and UX overhaul.
Read case study
Themes And Plugins is a full-stack web platform where developers and designers discover, browse, and download premium WordPress themes, plugins, and HTML templates — completely free. The entire system runs on custom PHP 8 MVC architecture with zero framework dependencies, deployed on shared Apache hosting.
| PHP 8 Core language | 13 Database tables | 11 Controllers | 0 Frameworks used |
Themes And Plugins homepage mockup showing hero, category strip, and product grid
FREE DOWNLOADS — NO CREDIT CARD
Premium Themes & Plugins
— Always Free
Download professional WordPress themes, plugins, and HTML templates.
Register once, download everything.
100+
Products
4,800+
Downloads
48
WP Themes
62
Plugins
All Items
WP Themes
WP Plugins
HTML Templates
eCommerce
Portfolio
THEMEFREE🎨
Aegis Business Pro
Business / Corporate
★★★★★⬇ 2,100
PLUGINFREE⚡
SwiftCache Pro
Performance
★★★★★⬇ 5,400
THEMEFREE🌟
Lumina Portfolio
Portfolio / Creative
★★★★★⬇ 1,800
HTMLFREE🌐
Orbit Landing Page
Landing Page
★★★★☆⬇ 890
Homepage — dark hero, stats bar, category strip, featured product grid
The Problem
The WordPress ecosystem locks premium themes and plugins behind expensive subscriptions on platforms like ThemeForest. Developers on tight budgets — especially in emerging markets — face a painful choice: pay $200+/year for legitimate access, or risk pirated downloads from insecure sites.
| The Insight What if there was a platform giving everyone free, legitimate access to quality WordPress resources — with proper accounts, download tracking, and version management built in? |
The Solution
System architecture diagram for Themes And Plugins platform
Frontend (browser)
Vanilla HTML/CSS/JS
No frameworks, no build tools
Sora + Inter fonts
Google Fonts CDN
TinyMCE editor
Blog post rich text
↕
Application layer (PHP 8)
Custom MVC Router
Clean URL dispatch, regex params
11 Controllers
Auth, Products, Blog, Tickets, Admin…
TOTP Auth
Google Authenticator, passwordless
File Streaming
Chunked ZIP delivery, permanent URLs
JSON-LD Generator
Auto SEO schema per blog post
↕
Data layer
MySQL via PDO
13 tables: users, products, blog, tickets…
File Storage
uploads/ — ZIPs, images, blog media
↕
Infrastructure
Apache + cPanel
Shared hosting, .htaccess routing
SMTP Mailer
SSL port 465, transactional email
Razorpay (ready)
₹500 one-time, signature verified
A purpose-built marketplace with zero framework dependencies. Every line — routing, authentication, file delivery, admin panel — written from scratch in PHP 8.
| 🎨 Product Catalogue | WordPress themes, plugins, and HTML templates with search, filters, ratings, and version history |
| 🔐 Passwordless Auth | Google Authenticator TOTP — users scan a QR code once and never need a password again |
| ⬇️ Smart Downloads | Permanent URLs that always serve the latest version — CI pipelines never break |
| 📝 Blog System | Full CMS with TinyMCE, sticky TOC sidebar, SEO fields, and auto-generated JSON-LD schema |
| 🎫 Support Tickets | Chat-style system with categories, priorities, and admin reply dashboard |
| 💳 Payment Ready | Razorpay integration — ₹500 one-time fee, server-side signature verification |
| 🌙 Dark/Light Mode | CSS variable theming, no flash on load, persisted to localStorage |
| 🛠️ Full Admin Panel | Products, users, blog, tickets, payments, contact page, about page — all editable |
Technology Stack
Avoiding frameworks was a deliberate choice. With no Laravel, no React — every performance characteristic is predictable and every security concern explicit.
Backend
- PHP 8 — Custom MVC with hand-built regex router and controller dispatch
- MySQL via PDO — 13 tables, prepared statements throughout, no ORM overhead
- TOTP Library — RFC 6238 time-based one-time passwords, custom implementation
- SMTP Mailer — SSL port 465, transactional email for verification and contact forms
Frontend
- Vanilla HTML/CSS/JS — zero npm, zero build step, zero node_modules
- CSS Custom Properties — full dark/light theming with 60+ design tokens
- Sora + Inter — Google Fonts, loaded with font-display: swap
- TinyMCE 6 — Rich text editor for blog posts, CDN-loaded
Infrastructure
- Apache on cPanel shared hosting — .htaccess for clean URL routing
- Razorpay — Payment gateway, order creation and signature verification
- Google Authenticator — TOTP-based passwordless login
Key Features Deep Dive
User journey from registration to download on Themes And Plugins
User journey
1
Register
Enter email + username
2
Scan QR
Google Authenticator setup
3
Enter OTP
6-digit TOTP code
4
Browse
Search & filter products
5
Download
Instant ZIP delivery
Platform features
Support tickets
Chat-style thread, priority levels, admin reply
Blog system
TinyMCE editor, TOC sidebar, JSON-LD SEO
Reviews
Star ratings, admin moderation
Dark/light mode
System-aware, persisted in localStorage
Admin dashboard
Products, users, payments, analytics
Permanent URLs
Download link never changes across versions
Passwordless Authentication
Instead of storing passwords, the platform uses Google Authenticator TOTP. On registration, a QR code is generated that users scan with their authenticator app. Every login requires a fresh 6-digit code — impossible to phish, impossible to brute-force.
| Security benefit No password database means no password database breach. Even if an attacker gains read access to the database, there are no credentials to steal. |
Permanent Download URLs
Every product has a permanent URL at /download/product-slug. When a new version is uploaded, the URL stays the same but delivers the newest file. Critical for developers automating WordPress deployments — their scripts never need updating.
Blog with Auto JSON-LD
Every published blog post automatically generates a JSON-LD structured data file AND injects it inline in the page head. This gives Google rich indexing signals without any SEO plugin dependency.
Dark / Light Mode
A tiny inline script in the <head> reads localStorage before the page renders — eliminating the flash of wrong theme that plagues most dark mode implementations. The toggle button switches themes instantly via CSS custom properties.
Admin Panel
The admin panel gives full control over every aspect of the platform without touching code. Built as a separate layout with a dark sidebar navigation:
| 📦 Products | Upload ZIPs, manage versions, add screenshots, write descriptions with TinyMCE |
| 👥 Users | View all registered users, verify or ban accounts, see download history |
| 📝 Blog | Full CMS — create, edit, publish posts with SEO fields and featured images |
| 🎫 Tickets | View all tickets, reply, change status and priority, delete |
| 💰 Payments | Revenue dashboard with all Razorpay transaction records |
| ⚙️ Settings | SMTP config, site logo and favicon upload |
| ℹ️ About Page | Edit all sections — headings, value cards, CTA — from the admin |
Design Philosophy
The design draws inspiration from ThemeForest. A dark hero with gradient background, product cards with hover overlays, star ratings, download counts, and a sticky category strip give the platform a credible, premium feel.
| Design choices Sora font — geometric, modern headingsInter — maximum readability for body#1fca72 green — trust and call-to-action4-column product grid at desktopHover overlays reveal quick action buttonsFeatured bar gradient: amber to orange | Pages built Home — hero, stats, how it works, blogProduct listing — filters, sort, searchProduct detail — tabs, download, reviewsBlog — 9-up grid with AJAX load moreSingle post — TOC sidebar, related postsAbout Us — fully editable from adminContact — SMTP form with editable FAQsSupport Tickets — user and admin viewsPrivacy, Terms, Cookies — legal pages |
Outcome & Impact
| A complete marketplace platform — no frameworks, no shortcuts. |
| 2,000+ Lines of PHP | 363 Lines of CSS | 200+ Lines of JS | 0 npm packages |
The platform launched at themesandplugins.xyz with a feature set that rivals platforms built on Laravel or Next.js — but with a fraction of the dependency overhead. Every feature is purpose-built, making the codebase easy to audit, extend, and deploy on any shared hosting environment.
What makes it stand out
- No framework tax — the entire app loads in milliseconds on shared hosting
- Passwordless login — a genuine security improvement over most commercial platforms
- Permanent download URLs — a developer-first feature no major marketplace offers
- Auto JSON-LD — SEO structured data generated automatically, no plugin needed
- Fully editable admin — every public-facing page editable without touching code
Conclusion
Themes And Plugins proves that you don’t need a framework to build a production-ready, feature-rich web platform. By writing every component from scratch — router, auth, file delivery, payment integration, CMS — the team gained complete control over performance, security, and maintainability.
The platform is live, functional, and ready to scale. When the Razorpay integration goes live, it will process ₹500 one-time payments and automatically grant lifetime access — creating a sustainable revenue model without subscriptions.
| Visit the platform themesandplugins.xyz — Free WordPress themes, plugins, and HTML templates. Register once, download everything. |
