Self-hosted school attendance

Secure installation

Creates one independent school instance, protected role templates, a restricted runtime database identity, independent secrets, recovery codes, and a permanent filesystem lock.

Server requirements

Pass — PHP 8.2 or newer (detected 8.2.33)
Pass — PHP extension: ctype
Pass — PHP extension: json
Pass — PHP extension: mbstring
Pass — PHP extension: openssl
Pass — PHP extension: pdo
Pass — PHP extension: pdo_mysql
Pass — Writable private directory: config
Pass — Writable private directory: storage/private
Pass — Writable private directory: storage/private/sessions
Pass — Writable private directory: storage/logs
Pass — HTTPS is mandatory outside localhost
Pass — Only public/ is exposed, or the parent root has an explicit deny rule

School and protected owner School name Timezone Owner display name Owner email (optional)

Passkey relying party RP ID (domain only) Exact origin

Use the public HTTPS origin users will actually visit, for example the HTTPS origin for attendance.school.example. Only localhost may use HTTP.

Database installation connection

Database host Port

Existing empty database name Privileged installer username Privileged installer password

These privileged credentials exist only for this request and are never written to configuration.

Restricted runtime database identity Runtime username Runtime password MySQL account host Create and grant this runtime user using the installer account

On restricted cPanel hosting, leave this unchecked and pre-create the account with the documented grants. Installation still refuses any account that has DELETE, DDL, trigger, event, grant, or administrative privileges.

RFID choice: Common MIFARE Classic 1K/S50-compatible cards are inexpensive but cloneable. They are permanently labeled low assurance; UID-only fallback is not accepted for production records.