Installation & Administration

CardIQ Installation Guide

Install CardIQ using repository-verified PHP, database, Apache, storage, security and validation guidance.

System requirements

System requirements

Use a currently supported PHP release compatible with the deployed CardIQ release and hosting environment. CardIQ uses PDO with a MySQL-compatible database; the repository does not define exact PHP or MySQL minimum versions. Required capabilities evidenced by code include PDO MySQL, sessions, JSON, hashing, file uploads and common image handling. HTTPS is the production expectation.

Application files and database

Application files and database

Deploy an authorized release package into the web document root. Create a dedicated database and least-privileged application user, import install/database.sql for a new environment, then apply the versioned install/update_v*.sql migrations required by that release in the documented order. Review each script before execution, take a verified database backup before migrations and do not assume every migration is repeat-safe.

Configuration and writable storage

Configuration and writable storage

Copy config.example.php to the hosting-only config.php and replace placeholders there. Configure database, APP_URL, APP_SECRET, storage, support email and production HTTPS/error settings in the hosting environment. Keep config.php outside source control. Grant the web-server identity only the write access needed for configured upload and backup paths; never use broad world-write permissions.

Apache and other servers

Apache and other servers

The supplied .htaccess is part of the documented deployment path and requires Apache overrides where those rules are used. Nginx deployment is not currently validated by the CardIQ repository and may require custom web-server configuration; no official Nginx recipe is provided.

First launch and validation

First launch and validation

There is no documented default administrator password or automatic bootstrap wizard. Provision authorized Super Admin access through the approved deployment process, then validate HTTPS, database access, Super Admin and Company Admin login, public employee and company profiles, uploads, QR generation, configured email, entitled API authentication, lifecycle restrictions and private PHP error logging.

Control how employees represent your company externally

Explore the CardIQ platform or review the workflow from verification through identity deactivation.

See how CardIQ works View pricing