WahPress CMS.
PHP · MySQL. Drop it in. Done.
WahPress is a professional content platform built for teams that ship. One zip package. Drop it into any public directory on any PHP host. The installer runs in two steps. You have a website with posts, pages, media, users, themes, and a RESTful master API that any control plane can talk to. No bloat. No plugin directory. No update ecosystem.
Six production modules. All of them work on day one.
Six admin sections, twelve REST endpoints, five user roles, one capability matrix, and one double-gated master API.
Admin Dashboard
4 KPI cards · Site Connectivity token card
- +Published Posts, Pages, Media, Active Users counters
- +Recent Content table with Edit + View actions
- +Site Connectivity card: Instance URL, API Base, Master Bearer Token
- +Active Theme preview with screenshot + version badge
- +Recent Users 5-row users with Role and Status badges
- +Quick Links: Settings, Invite User, JSON Feed, Sitemap
Posts & Pages
Draft, Pending Review, Published workflow
- +Posts and Pages as independent post types with separate routing
- +Status flow: Draft, Pending Review, Published
- +Media uploads handled as attachment post type (64MB max)
- +Author, date, permalink slug routed front-end
Theme System
WordPress-compatible style.css headers
- +Theme directory requires style.css + screenshot.png
- +Zip install via file upload or direct URL fetch
- +Activate, Delete UI with nonce protection
- +Full hierarchy: home, single, page, 404, searchform, sidebar, header, footer, functions.php
Users & Roles
5 roles with capability matrix
- +Administrator, Editor, Author, Contributor, Subscriber
- +bcrypt cost-12 passwords with session tokens
- +Role bitfield + suspended user_status flag
- +HMAC-SHA256 per-action nonce salts
Settings & Options
Key/value autoload store
- +Site name, description, admin email, posts per page
- +Active theme persisted via options
- +Mixed-type serialization for arrays and objects
- +wah_kses_post() HTML tag whitelist sanitizer
- +Single key get/set + bulk access
Master REST API v1
Bearer token + IP/CIDR whitelist double-gated
- +6 resources: Site, Posts, Pages, Users, Themes, Options
- +/wah-api/v1 full CRUD GET POST PUT DELETE
- +hash_equals constant-time token comparison
- +Debug mode with response payloads, CORS preflight
- +Theme install: zip_b64 push OR zip_url TLS-validated pull
How it looks once installed.
Three real screens from the shipped admin dashboard. Drop in, install, you have exactly this.
Admin Dashboard
4 KPI cards + Recent Content
Site Connectivity
Master-slave integration card
Appearance Gallery
Installed, Active, Library
Runs on any PHP host. Any.
WahPress runs on every PHP stack known to exist. Shared, VPS, dedicated, cPanel, Plesk, or LAMP.
- Extract and upload to public_html or any subdirectory
- Visit the URL, installer redirects to install.php automatically
Every WahPress install connects back.
Manage every instance from websiteandhost.com. Posts, Pages, Users, Themes, Options — six resources, twelve authenticated endpoints. Push content across all your installs in one stroke. Bearer tokens plus IP and CIDR whitelist. No surprises.
Download WahPress today.
One package. PHP and MySQL. Two steps. No account, no activation key, no lock-in. When you outgrow a single host, connect it back to websiteandhost.com and scale from there.