Stripe Digital Seller Kit (PHP)

Selling a template, an e-book or a pack of files and want the payment and delivery on your own website, without a marketplace cut? This kit is a small, readable PHP shop that runs on the ordinary web hosting you probably already pay for: upload it by FTP, fill in one settings file, connect Stripe.

What it handles for you

• Payments through Stripe Checkout, with prices taken from a simple products.json. Nothing to set up in the Stripe Dashboard except the webhook.
• Verified webhooks: every Stripe event is checked against its signature and the raw body, with protection against replays.
• No double orders: Stripe retries webhooks, and both the webhook and the thank-you page can report a payment; each payment becomes exactly one order and one e-mail, even with simultaneous requests.
• Instant delivery: a signed download link that expires and has a download limit, on the thank-you page and by e-mail (your hosting's own mail, Resend or Postmark).
• Refunds and disputes stop further downloads.
• No database: orders are kept in a plain file you can read and back up. Product files, orders and settings are blocked for visitors, or kept outside public_html.

Made for ordinary hosting

PHP 8.1 or newer with cURL, which nearly every host has. No Composer, no command line, no cron jobs. Links work with or without URL rewriting, and an installation check page tells you if anything is missing (PHP version, writable folders, keys) without showing secrets.

What you get

The complete source (about 450 lines in a few files), a step-by-step guide for cPanel-style hosting, notes for Nginx hosts, a go-live checklist, honest security notes, an example product and tests that run against a fake Stripe API.

Honest notes

It is a starter, not a hosted service: one product per checkout, no customer accounts, no tax or invoice setup, and no ongoing support. You need to be comfortable editing a settings file and uploading files. The free sample contains two real files from the kit: the webhook verifier and the download-link signer. Exi's own store runs on a different, internal system; this kit was written separately to be read, changed and run by you.