Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To put Simple Machines Forum (SMF) on a new domain, you need more than the domain name: provision a PHP-capable web server, create a database and database user, point DNS to the server, upload the correct full-install package, and run SMF’s browser installer. Finish by removing installer files, enabling HTTPS, setting one canonical hostname, and establishing backups.

This guide covers an apex domain such as example.com and a subdirectory such as example.com/forum. Hosting panels, DNS providers, web servers, reverse proxies, and certificate tools use different labels, so apply the environment-specific parts through the controls supplied by your providers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you need before configuring SMF

SMF is free, open-source community-forum software. A domain is only the public address; the application still needs a server-side runtime, persistent storage, and a database connection. Prepare each item below before uploading files.

A domain and a deployment path

Choose whether the forum will occupy the domain root or a subdirectory:

  • Apex deployment: visitors use https://example.com, and the web server’s document root contains SMF.
  • Subdirectory deployment: visitors use https://example.com/forum, and SMF is extracted into a forum directory beneath the document root.

Decide this first because the path determines the upload location, installer URL, cookie scope, and links generated by the application. Changing it later is possible but requires coordinated URL, server, and database-related changes.

Hosting prerequisites

The SMF 2.1 installation guidance requires a web server that properly supports PHP and directs the administrator to create a database and database user. Check the requirements for the exact release package you select rather than copying PHP or database versions from an old tutorial.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Requirement What to verify with the host Why it matters
Web server A site or virtual host with a defined document root and PHP request handling SMF’s PHP files must execute instead of being downloaded or displayed as text.
PHP The release-specific supported PHP version and required extensions Unsupported versions or missing extensions can stop the installer or later features.
Database engine An engine supported by the chosen SMF release, plus its host name and port SMF stores accounts, permissions, posts, settings, and other forum data in the database.
Database account Permission to create or modify the SMF tables, with a dedicated username where possible The installer must authenticate and write schema data.
File access SFTP, FTP, SSH, or a hosting file manager that can upload, extract, and change ownership or modes You need to place the package and correct files that the installer reports as unwritable.
Storage and backups Enough disk space for the application, attachments, logs, and database backups Forums grow through uploads and posts; a full disk can prevent writes.
Mail delivery A host-supported way to send account confirmations, password resets, and notifications Users may not receive security and account messages without working outbound mail.

Plan DNS and the server before uploading

Identify the destination

Create the hosting site or virtual host and note its document-root path. Obtain the destination address or provider-specific target supplied by the host. Depending on the environment, this may be an IPv4 address for an A record, an IPv6 address for an AAAA record, or a hostname that the DNS provider asks you to use.

Point the domain to the host

At the authoritative DNS provider, create or update the record required for the host. Keep existing records that serve unrelated services, such as mail, unless you are intentionally moving those services. If both IPv4 and IPv6 are provided, configure the corresponding A and AAAA records as instructed by the host.

DNS changes are controlled by the registrar and DNS provider, not by SMF. The time before different networks see a new record depends on the provider’s TTL and caching behavior. Confirm that the domain resolves to the intended host before starting the installer; otherwise you may install into the wrong site or see an old web page.

Choose the final hostname and scheme

Decide whether the canonical address will use the apex name or a www name, and whether it will be HTTP or HTTPS. Configure redirects and the application so that one hostname and scheme are authoritative. Make this choice before inviting users, because mixed hostnames can create duplicate sessions, confusing links, and certificate warnings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Download the correct SMF package

The official download listing separates a full installation from a large upgrade and a patch. A new forum needs the full-install package for the release you intend to run. Do not use an upgrade or patch archive as a first installation.

The listing observed for the SMF 2.1 line included an SMF 2.1.4 full-install option. Release listings change, so verify the current full-install entry immediately before downloading and record the release number for your maintenance notes.

Release archive or development repository?

Use the official release archive for a normal production site. The development repository’s instructions require Composer version 2 or higher and a composer install step; that workflow is intended for developers working from repository source, not for the ordinary site owner seeking a stable release. Mixing repository files with a release archive can leave dependencies or directory contents inconsistent.

Validate the archive locally

Before uploading, confirm that the download completed, that you selected the full-install archive, and that the archive opens with the expected SMF directory structure. Keep an untouched copy of the archive so you can compare files or rebuild the installation if an upload is interrupted.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Upload SMF to the document root or forum directory

  1. Open the destination: Use the host’s file manager, SFTP, FTP, or SSH to enter the document root identified when you created the site.
  2. Select the path: For an apex deployment, place the package contents directly in the document root. For a subdirectory deployment, create or select a directory such as forum and place the contents there.
  3. Upload the archive: Transfer the full-install package without renaming individual files or omitting directories.
  4. Extract on the server: Use the host’s extraction function or an approved server-side method. Preserve the package’s directory structure; do not leave every file inside an extra nested directory unless that extra directory is the URL path you intend to publish.
  5. Check the browser path: If the files are in public_html/forum, the installer path should correspond to https://example.com/forum/install.php, subject to your final hostname and HTTPS configuration.

Uploading through a browser file manager is convenient for small archives, while SFTP or SSH gives clearer transfer status and ownership controls. Whichever method you use, verify that the web server account can read the PHP files and that the URL reaches this installation rather than a default host page.

Create a dedicated database and user

Use the hosting control panel or database administration tool to create a database and a database user for this forum. Record the values exactly as the host displays them:

  • Database name
  • Database username
  • Database password
  • Database host name
  • Database port, if the host does not use its default

Grant the privileges required for the installer to create and alter SMF tables. A dedicated database and user make revocation, auditing, and backup restoration safer than sharing broad credentials with unrelated applications. If policy or resource limits require a shared database, use a unique table prefix for SMF so its tables cannot collide with another application.

Do not paste database credentials into public posts, support tickets, screenshots, or files that the web server can serve directly. Store the values in your password manager and enter them only in the installer or the host’s protected configuration interface.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run the browser installer

Once DNS reaches the correct site, files are in place, and the database exists, open the installer URL that matches the deployment path. For example, a subdirectory installation uses https://example.com/forum/install.php; an apex installation uses the equivalent https://example.com/install.php.

  1. Open install.php: Use the final hostname and path you selected. If the page is downloaded instead of executed, stop and correct PHP handling on the web server.
  2. Enter database details: Supply the database type offered by the selected SMF release, server host, port where requested, database name, username, and password. A connection error usually means one of these values or the database user’s privileges is wrong.
  3. Choose the table prefix: Keep the default for a dedicated database, or enter a distinctive prefix when sharing a database with another application.
  4. Set forum identity: Enter the forum name, administrator account, administrator password, and the email address used for administration and system messages. Use a unique, high-entropy administrator password that you do not reuse elsewhere.
  5. Review the proposed settings: Confirm the hostname, URL path, database target, and administrator email before allowing the installer to create tables.
  6. Complete installation: Let SMF write its configuration and schema. Do not close the browser or delete files while the process is running.

Field names and optional choices can vary by SMF release and host. Follow the labels displayed by the package you downloaded, while keeping the deployment path and database values consistent with the records you prepared.

Resolve file-permission and ownership prompts

SMF may report that a file or directory is not writable when it needs to create configuration data, cache files, attachments, or other writable content. The correct fix depends on the hosting layout and the account that runs PHP.

When you have SFTP, FTP, or a file manager

  1. Copy the exact path shown in the installer or error message.
  2. Use the host’s permissions or ownership controls on that path rather than changing the entire account indiscriminately.
  3. Ensure the PHP/web-server account can perform the operation SMF requested while keeping unrelated files protected from public writing.
  4. Reload the installer or administrator page and verify that the warning is gone.

When you have SSH access

Use the ownership and mode conventions documented by your host or managed-server provider. Do not apply a blanket world-writable setting as a shortcut; it can expose configuration files or allow unauthorized changes. If the host’s PHP process runs under a different account than your SSH user, ask the host which ownership model it supports.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When SMF asks for FTP details

The installation guide allows the installer to request FTP credentials when it cannot change permissions itself. Enter those credentials only over the protected connection supplied by the host, and remove or rotate them if the host’s policy requires temporary access. If the prompt loops, correct the underlying ownership or path instead of repeatedly submitting credentials.

Finish the installation and remove setup files

  1. Sign in to the administrator area using the account created by the installer.
  2. Verify the forum URL, selected hostname, path, administrator email, and time-related settings.
  3. Open the public forum in a separate browser session and test registration or another permitted user flow.
  4. Remove install.php and any other installation or setup files that SMF instructs you to remove.
  5. Confirm that revisiting the installer URL no longer exposes an installation form.

Leaving installer files accessible is a security risk because an unattended installer can expose setup functions or invite accidental reconfiguration. Treat removal as part of installation, not as an optional cleanup task.

Enable HTTPS and enforce one canonical address

HTTPS is configured through the certificate and web-server tooling supplied by your hosting stack, reverse proxy, or certificate provider; SMF does not determine which registrar, proxy, or certificate method you use. Issue a certificate covering the hostname users will visit, then configure the web server or proxy to serve that certificate.

Apply the scheme consistently

  • Make the HTTPS virtual host serve the SMF document root.
  • Redirect HTTP requests to HTTPS after confirming the certificate works.
  • Choose one canonical hostname, such as the apex name or its www variant, and redirect the other variant.
  • Update the forum’s configured URL and cookie-related settings so links and sessions use the canonical address.
  • Test login, logout, registration, password reset, attachments, and administrator pages in a private browser window.

Reverse proxies can add another layer of scheme and host headers. Follow the proxy and web-server documentation for forwarding the original HTTPS state; otherwise the application may generate HTTP links or redirect in a loop.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Production safeguards after the first login

Back up the database and files together

Schedule backups for both the database and the uploaded/application files. A database-only backup cannot restore attachments and other file-based content, while a file-only copy cannot restore posts, accounts, or settings. Keep at least one backup outside the live account and periodically verify that a restore is possible.

Limit administrative exposure

Use a unique administrator password, restrict administrator access through the controls available on your host or network, and remove unused administrator accounts. Review file-manager, SFTP, FTP, database, and hosting-panel credentials separately from forum credentials.

Keep the core and extensions current

Monitor SMF release announcements and update the core and installed extensions through their supported procedures. Test updates on a copy when your host permits it, and take a current database-and-files backup before changing production code.

Confirm email delivery

Send a test registration or password-reset message and inspect both the recipient mailbox and the host’s mail logs if available. Configure the host’s approved outbound-mail method rather than assuming that PHP’s default mail behavior will work.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Compare hosting implementations before committing

If you can choose between several hosting arrangements, evaluate the dimensions that affect an SMF deployment rather than comparing brand names alone.

Decision axis Questions to ask Warning signs
PHP and database compatibility Does the service support the selected SMF release, required PHP extensions, and a supported database engine? The provider cannot state supported versions or prevents you from changing an incompatible runtime.
DNS and HTTPS control Can you manage A/AAAA or provider-specific records, certificates, redirects, and the canonical hostname? You cannot point the domain, install a certificate, or control redirects without opening a support ticket.
File permissions Can you use SFTP/SSH or a file manager to extract files and correct ownership or modes? The service offers only a restricted upload form and gives no way to resolve unwritable paths.
Backups Can you schedule and download backups of both the database and forum files? Backups are undocumented, inaccessible, or limited to a snapshot that cannot be restored independently.
Database capacity What storage, connection, and performance limits apply as posts and attachments grow? Small fixed limits could be reached before you have a migration plan.
Traffic and mail support Does the plan handle expected concurrent visitors and provide reliable account-notification delivery? Outbound mail is blocked or traffic limits are unclear.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot common first-install failures

The domain shows a parking page or the wrong site

Check that the A, AAAA, or provider-specific record points to the intended host, that the host has a site or virtual host for the exact hostname, and that the files are in that site’s document root. DNS caches can retain an earlier destination; verify from more than one network before changing application files.

The installer downloads PHP files

PHP is not being passed to the server’s PHP handler. Confirm that PHP is enabled for this virtual host, that the selected version is supported by the SMF release, and that the web server and reverse proxy are forwarding PHP requests correctly. Do not continue while source code is downloadable.

The installer cannot connect to the database

Re-enter the database host, port, name, username, and password exactly as supplied by the host. Confirm that the database user has the privileges required to create tables and that remote connections are allowed when the database is on another server. A database name that includes a hosting-account prefix is a common source of transcription errors.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

SMF reports missing extensions or an unsupported PHP version

Compare the installer message with the requirements for the exact release archive. Enable the missing extension or select a supported PHP runtime through the host’s control panel. If the host cannot provide the required runtime, move the site to an implementation that can rather than forcing an untested version.

A writable-file warning will not clear

Use the path in the warning to inspect ownership and modes. The PHP process may run under a different account from your file-transfer account, or the path may be on a read-only or quota-limited filesystem. Correct the specific path through the host’s documented method and check available disk space.

The forum redirects between HTTP and HTTPS

Inspect redirects at both the reverse proxy/web server and SMF configuration. Make sure the proxy forwards the original scheme, the application is configured for the HTTPS canonical URL, and only one layer performs the main HTTP-to-HTTPS redirect.

Users do not receive registration or reset email

Confirm the administrator email and forum notification settings, then check the host’s outbound-mail restrictions and logs. Test with a second mailbox and verify that the message is not being filtered. If the host requires authenticated SMTP or another mail service, configure that method according to its instructions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Operational checklist

  • Domain path selected: apex or a named subdirectory.
  • Hosting site or virtual host created with a known document root.
  • DNS records point to the intended host and the hostname resolves correctly.
  • Release-specific PHP, database, extension, storage, and permission requirements confirmed.
  • Full-install archive selected instead of an upgrade or patch.
  • Archive uploaded and extracted without an unintended nested directory.
  • Dedicated database and user created; credentials and port recorded securely.
  • Installer opened at the URL matching the actual deployment path.
  • Forum administrator account and email verified.
  • Permission prompts resolved using the host’s ownership and mode model.
  • Installer and setup files removed after completion.
  • HTTPS certificate installed; HTTP and alternate-hostname redirects tested.
  • Database-plus-files backups scheduled and a restore process documented.
  • Mail delivery, login, registration, password reset, attachments, and administrator access tested.
  • SMF core and extensions included in a regular update and backup routine.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.