BookSlot - Universal Appointment Booking System

BookSlot is a self-contained appointment booking system built in plain PHP and MySQL, ready to run on any shared host in minutes. Visitors pick a service, choose a staff member (or let the system pick anyone available), and instantly see real open time slots calculated from that staff member's working hours, existing bookings, and blocked-out time, so double-booking simply can't happen. A clean, secure admin dashboard lets the business owner manage services, staff, weekly schedules, and appointments without touching a line of code. There's no Composer, no Node build step, and no third-party API dependency required to run it: unzip, import one SQL file, edit one config file, and it works.

Features:

- Accurate, conflict-free slot engine: available times are computed live from working hours minus bookings minus blocked-out time minus service duration, so there's no double-booking, ever

- Full public booking flow: service, then staff (or "any available"), then date and time, then contact details, then confirmation page

- Admin-managed services (name, duration, price) and staff (name, which services each one offers)

- Per-staff weekly working hours, including split shifts, plus one-off blocked-out dates/times for holidays and time off

- Admin dashboard with at-a-glance stats and a day view of today's bookings

- Appointments screen filterable by date and staff, with one-click confirm/cancel

- Server-side double-booking protection: slot availability is re-validated inside a database transaction immediately before every booking is saved

- Secure by default: PDO prepared statements throughout, hashed admin passwords, CSRF-protected forms, fully escaped output

- No framework, no Composer, no build step: plain PHP files and one MySQL schema, works on standard shared hosting

- Clean, modern, mobile-responsive UI built with plain CSS and progressively-enhanced vanilla JavaScript

New in version 2:

- Recurring appointments (weekly or every 2 weeks) with per-visit or whole-series cancellation

- A customer self-service page for rescheduling or cancelling a booking from a private emailed link, no login needed

- An admin month calendar view alongside the existing day and list views

- A reporting page with appointment counts and revenue by staff member and by service, including CSV export

- CSRF protection and rate limiting added to the public booking form, login, and the new self-service link

- New database indexes and pagination on the appointments list for larger installs

Existing v1 customers can upgrade their database in place using the upgrade guide included with the download.

Requirements

PHP 8.1 or newer MySQL 5.7+ or MariaDB 10.3+ Apache or Nginx with mod_rewrite

Compatibility

PHP 8.1 - 8.3, MySQL/MariaDB, Apache/Nginx