Organic and Natural Products Website and Online Payment Script

Language note

The interface of the website and the admin panel comes in Turkish and English. You choose the site language and the panel language separately under “Site ayarları” (Site Settings), and you can also switch the panel language with the globe icon at the top right of the panel.

More languages can be added: copy the en.php file in the dil folder of the package and translate it (the steps are in dil/OKUBENI.txt). The language you add appears automatically in the language lists of the site settings, and updates do not touch your language files. Texts that are not translated appear in English; if you prefer, they can be shown in Turkish.

The content you publish (services, products, pages, blog posts and so on) is not translated; it stays in the language you write it in. Form warnings and date formats follow the selected site language; the notification e-mails sent to you are written in the panel language.

Where this page names a section of the panel or of the site, the name is given as it appears in the Turkish interface, in quotation marks, followed by its translation in parentheses; in the English interface the same sections appear under their English names.

Who it is for

Made for small businesses, producers and shops that sell natural, handmade or regional products, and for agencies that build sites for these businesses. On your own domain you group your products into categories and show them with prices, describe your services and present your team and customer reviews. If you wish, you take online payment for a product on the site itself. A visitor writes to you about products and orders with the contact form; the message is listed in your panel. The site is not a store: there is no cart, no stock count and no shipment tracking, and a visitor pays for a single product at a time.

You do not need to know how to code. The browser wizard handles the installation, and you enter your content in the admin panel.

Website features

Home page

• Welcome slider: up to 10 slides. Each slide has a small top line, a heading, a sub-heading, an optional button and an image; every slide also carries a “Bize Ulaşın” (Contact Us) link. For the button link you enter an address inside the site (for example fiyatlar) or a full address. With more than one slide the images change automatically with a soft fade; on devices set to reduce motion, there is no automatic change. A slide without an image is not shown.
• Three highlight boxes: three boxes made of a heading and a short text, placed below the slider. A box whose heading you leave empty does not appear.
• About summary: an image, the company name, the beginning of your “Hakkımızda” (About Us) text, a checklist of the first six service names, the counters and a button that leads to the “Hakkımızda” (About Us) page.
• Counters: four counters (for example 150+). You enter the value and the text yourself; when the page comes into view, the numbers appear by counting up. A counter whose value you leave empty does not appear.
• Products: up to six of the published products appear as cards with a category label, name, short description and price; the “Tüm Ürünler” (All Products) button leads to the product list.
• Services: the first six services appear as cards with an icon, an image, the name and a short description; the “Tüm Hizmetler” (All Services) button leads to the services page.
• Call banner: you enter a heading and a short text, and your phone number appears next to the text automatically. If you leave the heading empty, the banner does not appear.
• Contact section: if you upload an image or enter a phone number or a WhatsApp number, a “Do you have questions?” section appears on the home page with the phone, WhatsApp and a button that leads to the contact page. If none of the three exists, the section is not drawn.
• Team, customer reviews and latest posts: up to 12 team members and the latest 12 reviews appear in sliders and the latest three blog posts as cards. A section with no entries is not drawn on the home page at all.

Contact

• Contact form: full name, e-mail, phone, message title and message text fields (all required; the message at least 10 characters) and a required KVKK consent checkbox. KVKK is the Turkish personal data protection law. Incoming messages are listed in the “Mesajlar” (Messages) section of the panel. If you set up “E-posta ayarları” (E-mail Settings) and switch notifications on, every message also reaches you by e-mail, and when you reply to the e-mail, the reply goes to the visitor’s address. There is no appointment or quote request form.
• Contact page: information boxes with address, phone, e-mail and working hours, and a map (Google Maps or OpenStreetMap embed code). Details and map you leave empty do not appear on the site.
• KVKK consent checkbox: required on the contact and payment forms. The privacy notice link points to the page you choose in the panel; the same link also appears in the footer of the site. The text that comes with the sample content is only a sample; because customer details are personal data, you need to prepare your own privacy notice, with a legal adviser if necessary.

Services, team and reviews

• Services: for each service you enter a name, an icon, a short description, a detailed description, an image and an order. You choose the icon in the panel from a ready-made list of 12 icons such as leaf, seedling, basket, delivery, gift, shop and box. Services are listed as cards on the services page and also appear as a drop-down list in the menu. Every service has its own page, a side list of the other services and a “Do you have questions?” box that leads to the contact page.
• Team: you enter full name, title, photo, status and order. The team is shown as cards on the “Ekibimiz” (Our Team) page, in a slider on the home page and on the “Hakkımızda” (About Us) page. A member without a photo gets a person icon. A member whose status is “Taslak” (Draft) does not appear.
• Customer reviews: you enter full name, the service received (optional), the review and an optional photo. Reviews appear in a slider on the home page and on the “Hakkımızda” (About Us) page. Publish reviews only with the consent of the people who wrote them.

Products and online payment

• Product list: in the panel you add product categories and, under each category, products. For each product you enter a name, a category, a price (TL), a status (Published or Draft), an order, a short description, a detailed description and an image. Under Products in the menu the categories open as a drop-down list; the products page has category tabs and cards grouped by category. Every product has its own page with an image, the price, the detail, a “Do you have questions?” box and a side list of the other products. A Draft product does not appear on the site. There is no cart, stock count or shipping field.
• Product descriptions are your responsibility: the statements in a product’s name, description and images (such as ingredients, origin, production method, certificates, or claims about health or care) are yours. Write only information you can verify and comply with the relevant regulations; the script does not check these statements, and the product descriptions in the demo are samples.
• Online payment for a single product: there is no shopping cart; a visitor pays for one product or package. The “Online Öde” (Pay Online) button on a product page appears only when the “Fiyatlar ve online ödeme” (Prices and online payment) section is on, the online payment setting is on, the details of at least one payment provider are completely entered, the product is Published and its price is between 1 TL and 99,999.99 TL. On the payment page the visitor chooses a payment method and enters full name, e-mail, phone, billing address and a note; the KVKK consent checkbox is required.
• Payment providers: PayTR (card payment; payment details are entered on PayTR’s own payment page) and Paywant (credit card, bank transfer and mobile payment channels) are supported; you can switch on one or both. Payments are collected in your own payment provider account; the account, the commission and the contract are between you and the provider. For Paywant you choose whether you or the visitor pays the commission. Card details are not stored on this site.
• Payment settings: on the “Online ödeme ayarları” (Online payment settings) page, open only to the administrator, you enter the store and API details of each provider and choose the mode (Test or Live). The page writes the notification addresses that you define in the providers’ panels (separate ones for PayTR and Paywant) according to your site address. While online payment is on and the mode is Test, a warning appears at the top of the summary, payment settings and orders pages reminding you to set the mode to Live when you go live; the e-mail subject of test orders starts with [TEST]. Secret keys are stored encrypted and are not written back into the form after saving.
• Terms of sale consent: if you add a terms of sale and refund page under “Sayfalar” (Pages) and select it in the payment settings, the payment form shows a required consent checkbox for it next to the KVKK consent. You prepare the text yourself.
• Orders: an order record is created when the payment form is submitted. In the “Siparişler” (Orders) section of the panel, seen only by the administrator, date, code, product, amount, method, customer and status (“Beklemede” (Pending), “Ödendi” (Paid), “Başarısız” (Failed)) are listed; the detail shows customer details, payment date, the provider’s payment number and the time of the KVKK consent. Test payments carry a “Test” label.
• Confirming the payment: an order becomes “Ödendi” (Paid) only through the provider’s notification whose signature has been verified; the status cannot be changed by hand in the panel. The amount is always calculated from the price you entered in the panel. A repeat of the same notification does not count the order as paid twice. When a payment arrives, the visitor receives a “Payment received” e-mail and you receive a notification e-mail (if e-mail settings are set up).

Corporate pages, blog and gallery

• “Hakkımızda” (About Us): page heading, text, mission, vision, signature line and an image. A mission or vision part you leave empty does not appear. The page also carries the team cards, the counters and the customer reviews.
• Frequently asked questions: you enter questions and answers in the panel; the answer opens when the visitor clicks a question. Once at least one question exists, its link appears in the menu under “Kurumsal” (Corporate).
• Catalogs (PDF): you upload PDF files such as a catalog or a price list from the panel (at most 10 MB per file). For each catalog you enter a link text and an order. They are listed on the “Kataloglar” (Catalogues) page with a “PDF indir” (Download PDF) button; when the visitor clicks, the file downloads as a PDF.
• Extra pages: you add as many pages as you like from the panel (for example a privacy policy, the KVKK privacy notice, terms of sale and refund). For each page you choose whether it is shown in the top menu (under “Kurumsal” (Corporate)) and in the footer of the site.
• Blog: articles with a title, status (“Yayında” (Published) or “Taslak” (Draft)), short description, image and rich text. Articles are paginated with 9 per page; the article page has a side list of the latest articles. A “Taslak” (Draft) article does not appear on the site.
• Gallery: you enter an image title, an image and an order. Clicking an image enlarges it; the previous and next buttons, the arrow keys, the swipe gesture on a phone, the close button and the Esc key all work.

Look, mobile and search engines

• Color: you pick two colors in the panel. The main color is applied to the menu, buttons and active items; the accent color is applied to sub-headings and decorations. The dark background of the footer and the page title is derived from the main color. Text on top of the colors turns dark or white automatically, depending on whether the color is light or dark.
• Logo, site icon and images: you upload your logo and your site icon (favicon); if there is no logo, the company name appears as text. The logo is shown on a white background in the header and inside a white box in the footer, so a dark or colored logo that reads well on a light background is suitable. You can upload images for the title band at the top of the inner pages and for the contact section on the home page; if you do not upload a title band image, the band appears in the dark color.
• Top bar, header and footer: the top bar shows the address, e-mail and social media icons; the header shows the phone number, working hours and, if you entered it, a WhatsApp link; the menu has a “Ürünleri İncele” (Browse Products) button (on phone screens the top bar and the header details are hidden). The footer shows your short introduction text, links, the first six services, your contact details and the copyright line. Details you do not enter are not drawn.
• Social media: your Facebook, X (Twitter), Instagram, LinkedIn and YouTube links appear as icons; an icon you do not enter is not drawn. If you enter your WhatsApp number, a WhatsApp icon appears in the header.
• Switch sections on/off: from a single page you switch the Services, Team, Blog, Gallery, Catalogs, Frequently asked questions, Customer reviews and Products and online payment sections on or off. A section you switch off disappears from the menu and the home page, and its page address does not open either. The menu link of a section with no entries does not appear either.
• Mobile friendly: on small screens the menu turns into a mobile menu that opens on tap; the page layout adapts to the screen width.
• Page-specific title and description: every page carries its own title (“Page | Company”), description and social sharing (Open Graph) tags. On service, product and blog post pages the sharing image is taken from the item’s own image. The payment and order pages are closed to search engines. You enter the site title, description and keywords under “Site ayarları” (Site Settings).
• Footer credit: you can change or remove the “TiklaWeb tarafından geliştirildi” (Developed by TiklaWeb) line at the bottom of the site.
• 404 page: for an address that does not exist, a switched-off section and an article that is not published, an error page with a button back to the home page is shown.

Admin panel

• “Özet” (Summary): the numbers of unread messages, published products, paid orders (test payments are not counted), services and published blog posts, plus the latest five messages. The side menu shows the number of unread messages as a badge.
• “Mesajlar” (Messages): you read the messages from the contact form with name, e-mail, phone, subject, date, the time of the KVKK consent and the text, and you can delete them; unread messages are marked.
• Services, products and blog: you add, edit and delete entries. The lists have search and sorting.
• Pages, gallery and catalogs: you manage the extra pages, the gallery images and the PDF catalogs.
• “Siparişler” (Orders): you list the online payment orders, read their details and delete them (administrator only).
• Site content: “Ana sayfa kaydırıcısı” (Home Page Slider), “Ana sayfa kutuları, çağrı bandı ve sayaçlar” (Home Page Boxes, Call Banner and Counters), “Hakkımızda” (About Us), “Yorumlar” (Reviews), “Sık sorulan sorular” (Frequently Asked Questions), “Site görselleri” (Site Images), “Sosyal medya bağlantıları” (Social Media Links) and “Bölümleri aç/kapat” (Switch Sections On/Off). The Summernote editor is used in rich text fields.
• “Online ödeme ayarları” (Online payment settings): the payment providers’ details, the Test or Live mode, the terms of sale page and the notification addresses (administrator only).
• E-mail settings: once you enter your SMTP details and switch notifications on, the contact and payment e-mails work. You test the settings with the “Deneme e-postası gönder” (Send test e-mail) button.
• “Site ayarları” (Site Settings): site title, company name, description and keywords, phone, WhatsApp number, e-mail, working hours, address, the short introduction text shown in the footer, copyright line, main color, accent color, KVKK privacy page, map, logo, site icon, site language and panel language.
• Users and permissions: you add administrator and editor accounts. The editor manages the content sections and the contact messages; Orders, Online payment settings, “Site ayarları” (Site Settings), “E-posta ayarları” (E-mail Settings) and “Kullanıcılar” (Users) are open only to the administrator. Permissions are checked on the server. Every user changes their own name and password on the “Profil ve şifre” (Profile and Password) page.
• Forgot password: the link on the panel login page resets the password by e-mail (if “E-posta ayarları” (E-mail Settings) is set up). The reset link is valid for 1 hour and can be used once.
• Custom code: under “Site ayarları” (Site Settings) you add your own code (for example a statistics script) to the top and bottom of the site. These fields are open only to the administrator.

Setup and updates

• Five-step setup wizard: requirements, license, database, site and administrator details, finish. The wizard checks your server itself.
• Setup language: in the wizard, choose Turkish or English at the top right. With an English installation, the starting and sample content is in English too.
• Sample content or empty setup: start filled in like the demo and edit from there, or enter your content from scratch. The message and order lists start empty in both cases; the payment provider keys come empty with the package.
• Update from the panel: download the zip package of the new version from your tiklaweb.net customer area and upload it on the “Güncelleme ve lisans” (Updates and License) page of the admin panel. Files and database are backed up first. If an error occurs, the site returns to its previous state. Your uploaded images and PDF documents, settings and content are kept.
• Verified packages: the signature of the update package is checked; only packages downloaded from tiklaweb.net are installed.

A detailed setup guide comes in the package you download as the KURULUM.html file. The guide contains the rules that come ready for Apache and LiteSpeed, the rules you need to add for Nginx and IIS, and the step-by-step opening of online payment.

License

Each license is for the single domain name you specify when ordering. A domain name change is a paid service and is handled through a support request. The license cannot be transferred free of charge. The site does not open on an unlicensed domain and the visitor is redirected to a license warning page. A separate license is required to use it on another domain.

Technical details

• PHP 8.2 or higher, MySQL or MariaDB
• Framework: PHP (PDO), its own router and Twig 3 templates. Page addresses are readable (for example /hizmetler/3-ornek-hizmet); this needs URL rewriting on the server. On Apache and LiteSpeed the .htaccess file that comes in the package does this; for Nginx and IIS the rules are in the KURULUM.html file
• Site: Bootstrap 5 styles, Swiper and Font Awesome Free 6; the Montserrat and Niconne fonts come with the package and are not loaded from an external server. Panel: DataTables and the Summernote content editor
• E-mail is sent with PHPMailer 6.9; the SMTP password is stored encrypted. A form entry is saved to the database first; if the server supports it, the e-mail is sent after the visitor has received the response
• Interface texts are kept in the language files in the package (Turkish and English included, a new language can be added)
• Signed form token, a hidden trap field and a limit of 8 submissions per IP in 10 minutes on the contact and payment forms; a contact message must be at least 10 characters
• Online payment: the amount is determined on the server only from the product price in the database, and no price is taken from the visitor; the order code is generated randomly; the connection to the payment provider is made from the server with SSL verification; an order becomes paid only through a notification whose signature is verified, and a repeat of the same notification has no effect; the payment provider keys are stored encrypted and are empty in the package
• CSRF verification on panel actions; a temporary block after 5 failed attempts in 15 minutes on panel login, and the session closes after 2 hours of inactivity
• The type of images uploaded from the panel is verified from content (JPG, PNG, WebP; at most 8 MB) and, if the GD extension is on, they are converted to WebP; PHP does not run in the upload folder
• A PDF document is accepted only if it carries the PDF signature and an end-of-file marker (at most 10 MB). The documents folder cannot be accessed directly; the file is downloaded as an attachment through the site
• The panel’s rich text fields are filtered on the server when saved (HTMLPurifier); the admin panel sends a Content Security Policy (CSP) header; administrator passwords are stored hashed
• The map area accepts only Google Maps and OpenStreetMap embed addresses
• Database details and backups are kept in a folder outside the web root if your hosting allows it
• A security audit made of code review and live attack tests was carried out before sale

Demo

Explore the site and admin panel in the read-only demo. The demo is installed in Turkish; in the admin panel you can switch the panel language to English with the globe icon at the top right. The company name (“Örnek Yeşil Pazar” (Sample Green Market)), services, products and prices, team, reviews, gallery images, PDF catalogs and the counter values on the home page in the demo are samples (the counter labels end with “(örnek)”, meaning sample). In the demo panel you see a few sample records in the “Mesajlar” (Messages) and “Siparişler” (Orders) lists. In the demo, the online payment button and the payment form are shown on product pages; no payment is started. WhatsApp, social media links and the map are left empty in the demo; once you fill them in the panel, they appear on the site.

• Site: https://036.tiklaweb.net
• Admin panel: https://036.tiklaweb.net/admin/
• Demo e-mail: demo@tiklaweb.net
• Demo password: demo1234

Changes cannot be saved in the demo; the contact form does not save records or send e-mails. The demo is reset every night. Sensitive pages such as e-mail settings, online payment settings, users and password forms cannot be viewed in demo mode, and “Forgot password” is switched off in the demo. These login details are for the demo site only. In the installation you purchase, you set the administrator account yourself.

Support

If you get stuck, open a support ticket from your tiklaweb.net customer area or write to destek@tiklaweb.net.