README

Sylius is an Open Source eCommerce framework on top of Symfony. 

The highest quality of code, strong testing culture, built-in Agile (BDD) workflow and exceptional flexibility make it the best solution for applications tailored to your business requirements. 
Powerful REST API allows for easy integrations and creating unique customer experience on any device.

We're using full-stack Behavior-Driven-Development, with PHPUnit and Behat.

Enjoy being an eCommerce Developer again!



⚙️ Installation
--------------

Install Sylius with Composer (see requirements details).

Follow the Getting started with Sylius tutorial!

📖 Documentation
----------------
 
Documentation is available at docs.sylius.com.

➕ Sylius Plus
--------------


    


Sylius Plus offers modular features like OnePageCheckout and a B2B suite, alongside advanced capabilities such as 
multi-store management, partial order fulfillment, smooth returns handling, a loyalty system and multi-source inventory. 
Pick and choose the modules you need to supercharge your eCommerce projects effortlessly.

🤝 Community
------------

Get Sylius support on Slack or Stack Overflow
or get professional SLA-backed support and Project Success Assistance with Sylius Plus license! Learn more.

Stay updated by following our Twitter and Facebook.

Would like to help us and build the most developer-friendly eCommerce framework? Start from reading our Contributing Guide!

👮 Security issues
------------------

If you think that you have found a security issue in Sylius, please do not use the issue tracker and do not post it publicly. 
Instead, all security issues must be sent to [email protected].

📦 Plugins and Extensions: Sylius Store
---------------------------------------


    

   
You can find Sylius plugins on our Sylius Store which is a Marketplace with Sylius extensions. 

Or search for packages marked as sylius-plugin on Packagist.

📃 License
----------

Sylius is completely free and released under the MIT License.

✍️ Authors
---------

Sylius was originally created by Paweł Jędrzejewski.

Kudos to all Sylius contributors 🙏
































































































... and others!


See the full list of contributors from our awesome community.

Top issues

Discussions

Latest release

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

- Percent-encoded API path bypasses shop API ownership filters, exposing and modifying other customers' data
- A disabled API stays reachable through a percent-encoded path
- Host header injection in the shop password reset e-mail link when the channel has no hostname
- Unpublished product reviews disclosed through the Shop API item endpoint
- Promotion and coupon usage limit bypass via race condition in Sylius 2.3
- Channel-based payment method restriction bypass on shop payment request API endpoint

 Wha