A commerce platform with no CMS and no plugins
A hand-built commerce platform on a custom PHP stack — multiple live payment gateways, a specification-driven catalogue across five business divisions, and division-aware checkout logic enforced in code.
smartmartglobaltrade.com ↗- Plugin vulnerabilities
- Zero — no plugins
- PageSpeed (mobile)
- 95+
- Payment gateways
- Square, Revolut standby
The problem
The business sells a catalogue of precisely-specified digital products and services across five divisions — automation scripts, research reports, operational resources, audits, and quoted enterprise work — at fixed, published prices.
Every listing has to state exactly what the buyer receives: files, format, version, size, license terms, support period. This is a specification catalogue, not a conventional product grid.
A standard CMS build fights that requirement at every turn. The checkout logic also differs by division: some items are instant self-checkout, others are quoted and invoiced separately and must never present a payment button. Layering that onto a generic e-commerce theme means fighting the theme's assumptions on every page and hoping nobody misconfigures a product.
What I built
A custom platform in PHP with hand-written HTML and CSS. No CMS, no plugin surface, no builder output — every byte on the page is there because it was put there deliberately.
Custom over CMS, because the product model is specification-driven rather than a product grid. Every listing exposes structured technical detail — SKU, version, deliverable format, file size, license, support window — as first-class data rather than free text someone remembered to fill in.
Division-aware checkout logic, so self-checkout items and quote-only enterprise services follow genuinely different paths. Enterprise engagements never render a live payment button. That's a business rule enforced in code, not a matter of editorial discipline — which means it can't be broken by someone adding a product incorrectly.
Square as the live gateway, with Revolut integrated as a standby. Running a second gateway that's already wired and tested means a processor outage or an account issue is a configuration change rather than an emergency — which matters more for a business whose entire revenue runs through self-checkout.
Hosted checkout, so card details never touch the platform and PCI scope stays minimal.
The result
- PageSpeed mobile score: consistently above 95
- Payment processing: Square live, Revolut integrated and ready as a fallback
- Plugin vulnerabilities to patch: zero, because there are no plugins
- Running in production since mid-2026 without incident
The maintenance profile is the quiet win. There is no plugin update treadmill, no theme compatibility to worry about, and no monthly security patching cycle — because there is no third-party code in the stack to patch.
Working on something similar?
Get in touch