Travelio - Travel Agency ERP and Booking System PHP Script With Mobile App

▶ Live Demo & Documentation

Web Demo — travelio.bugbuild.com
Admin Panel — travelio.bugbuild.com/admin/login · superadmin@bugbuild.com / 12345678
Customer Portal — travelio.bugbuild.com/login · customer@bugbuild.com / 12345678
Agent Portal — travelio.bugbuild.com/login · agent@bugbuild.com / 12345678
Staff Portal — travelio.bugbuild.com/login · staff@bugbuild.com / 12345678
Vendor Portal — travelio.bugbuild.com/login · vendor@bugbuild.com / 12345678 (or tap Vendor under “Demo quick login”) · new vendors apply at travelio.bugbuild.com/become-a-vendor
Android App (APK) — Download APK · sign in as customer@bugbuild.com, agent@bugbuild.com or vendor@bugbuild.com / 12345678
Documentation — traveliodocs.bugbuild.com

One app, four roles. There is a single APK — install it once and sign in with any of the accounts above. The app reads the account’s role after login and opens the matching experience (customer, travel agent, tour guide or marketplace vendor). iOS is supported; build it with Xcode from the Flutter source included in the package.

Travelio is a complete travel agency ERP and booking system for real travel businesses — tour operators, ticketing agencies, visa consultancies, Hajj & Umrah operators and corporate travel desks.

From one Laravel backend you get a public travel website, an admin panel that runs the whole back office, self-service portals for your customers, agents and staff, and a native Flutter mobile app. One app, one login: it reads the account’s role and opens the customer, travel agent or tour guide experience, each with its own screens and navigation. Everything ships together in the main download package and connects to a single backend and database over a REST API.

Customers pay for tour, hotel and transport bookings online through bKash, SSLCOMMERZ, JazzCash and Easypaisa, or by bank transfer that your desk verifies against the uploaded receipt, from the app and the customer portal, or settle at the desk and from their wallet — every payment lands in the double-entry books automatically.

Selling tools are built in, not bolted on. Run promo codes with real limits, give customers a loyalty points balance they can spend as a discount on their next trip, and collect verified reviews that only travellers who actually paid for and took the tour can write. All three work identically on the website, in the customer portal, at the back-office desk and in the mobile app, and every discount reaches the ledger as a smaller sale — so your accounts still balance.

The platform ships with four languages out of the box — English, Bangla, Arabic and French — and supports RTL and LTR layouts across web and mobile. Add any other language from the admin panel.

What You Get

Laravel Web Backend — admin panel, public travel website, and customer / agent / staff portals.
Mobile App (Flutter) — one latest full source project for new builds and existing-app upgrades, covering Android and iOS and three roles: a travel booking experience for your customers, a sales and commission dashboard for your agents, and an assignment screen for your tour guides. Existing owners retain their environment/signing configuration, increase the build number and publish a normal store update.
Online booking payments — bKash, SSLCOMMERZ, JazzCash and Easypaisa integrated against the providers’ own APIs, plus manual bank transfer with a Payment Verification queue, all configured from the admin panel.
Optional multi-vendor marketplace — let hotels, tour operators, transport providers, Hajj/Umrah operators and visa consultants apply, list from their own Vendor Portal and request payouts; you approve vendors and listings and set the commission.
Growth toolkit — promo codes, a loyalty points programme with referrals, and verified booking reviews, working across the website, the portals and the app.
Firebase push notifications — optional, set up once; booking, payment and support updates reach customers, agents and guides on their device.
Full source code for the backend and the apps, the database, and complete documentation — all inside the main Main_Files.zip. The same latest full WebSourceCode supports both fresh installation and in-panel upgrades for existing sites.
Version 1.2.0 growth tools — AI trip planning, live Amadeus flight search, customer loyalty and referrals, WhatsApp Cloud API support, and Google/Facebook sign-in.
Version 1.3.0 — live hotel search & booking via Amadeus alongside your manual hotel catalogue, an admin-configurable default light/dark theme, round-trip fare tracking and self-service refund visibility for flights, and self-service amendment of unconfirmed hotel bookings.
Version 1.7.0 — what’s new — Stripe and PayPal with automatic currency conversion and an exchange-rate screen; two-factor sign-in with an authenticator app; partner agencies with agent groups, commission per service, credit limits, staff logins and online applications you approve; a hotel rate calendar (rate, allotment, minimum stay and stop sell per night); an Activities & Excursions module with dated slots, capacity, adult/child/group prices, languages, pickup points and QR vouchers; signed webhooks for your ERP or CRM; and Twilio SMS for international numbers — on the website, in the admin panel and in the app.
Version 1.6.0 — five website templates (Skyline, Classic Agency, Haramain for Hajj & Umrah, Luxe and Night) with four hero layouts; live chat on the website and in the app, answered from one staff inbox (works on shared hosting, no chat server); a Facebook Messenger button; 20 bundled fonts, a heading font and text size for the website, plus fonts, text size and brand colour for the admin panel; smarter website search with live hotel rates and filters; a browser installer that works on cPanel without a terminal; and a System Update that checks your server first and explains exactly what to fix.
Version 1.5.0 — Settings → Modules to switch any service off (e.g. run a Hajj & Umrah + Visa-only agency) across website, portals, admin and app; a separate agent-registration switch; live flight search across six providers (Amadeus, Sabre, Travelport, Duffel, TBO Air, Kiwi.com); Featured tour and Hajj/Umrah packages; and scheduled Promotions banners for the website and the app.
Version 1.4.0 — optional multi-vendor marketplace with vendor portal, commission and payouts; bank transfer with admin verification and company bank accounts; JazzCash and Easypaisa; separate payment and supplier status on every booking; a full-width Hero slider for the home page; customisable home sections and search widget. Upgrade straight from 1.0.0 or 1.1.0 in one jump with the built-in updater.

Important Note About Third-Party Service Costs

Any costs related to hosting, domains, server infrastructure, payment gateways (e.g. bKash, Nagad, SSLCOMMERZ, aamarPay, Razorpay, PayU, Cashfree, Instamojo, Stripe, PayPal, Paystack, Flutterwave), SMS gateway providers (e.g. Twilio, MiM SMS), flight and hotel APIs (e.g. Amadeus), exchange-rate services, email services, Firebase / push notification services, Apple and Google developer accounts for publishing the apps, or any other third-party service are not included in the item price. Buyers must purchase and configure these services separately based on their own project requirements. You also generate your own application key and configure your own credentials during setup. Using these services may involve additional costs.

Application Features

Web — Admin Panel (Laravel)

Tour packages, categories, dated departures with seat control, tour guides and package bookings
Visa management — applications, embassy appointments, document checklists, status tracking and expiry alerts
Hajj & Umrah — packages, pilgrims, hotel and flight allocation, groups, staged payments and document verification
Hotel management — properties, room types, availability, bookings and printable vouchers
Hotel rate calendar — a rate per night, allotment, minimum stay and stop sell for each room type, set for a date range and chosen weekdays; website, app and agent bookings price night by night
Flight management — bookings with PNR, ticket issue, reissue, cancellation and refund tracking
Transport — bus, train, launch, car rental and airport transfer bookings with driver roster
Additional services — travel insurance, student consultancy, medical tourism, corporate travel, events & conference
Activities & excursions — options with adult, child and group prices; dated time slots with capacity (no double-selling the last seats); guide languages and pickup points; instant or on-request confirmation; QR vouchers emailed to the guest; bookable on the website and in the app
Marketing — promo codes with percentage or fixed value, minimum spend, usage limit, expiry and a live redemption counter; campaigns; newsletter subscribers
Promotions & Featured listings — scheduled promo banners (website, app or both) linking to a tour, Hajj/Umrah package, visa service, hotel or any URL; Featured tour and Hajj/Umrah packages listed first with a badge on the website and in the app
Modular by design — Settings → Modules switches any service off (tours, Hajj & Umrah, visa, flights, hotels, transport, agents, marketing, CRM, accounting, HR…); it disappears from the website, portals, admin and mobile app at once, nothing is deleted. Agent registration has its own switch; vendor sign-up follows the marketplace switch
Review moderation — approve, reject or publicly answer traveller reviews; only reviews written against a paid, completed booking can exist, and only approved ones count towards a tour’s rating
Loyalty programme — set what a point is worth, the minimum redemption and the largest share of a booking points may cover; referral bonuses awarded automatically
CRM — leads pipeline, activities, follow-up calendar, activity timeline, customer notes and communication history
Built-in double-entry accounting — chart of accounts, transactions, journals, cash & bank book, ledger, trial balance, profit & loss, balance sheet, invoices, receipts, refunds and tax reports
Suppliers — airlines, hotels, transport vendors, visa partners, contracts, supplier ledger and reports
Agent finance — agents, commission tracking and agent invoices
Partner agencies (B2B) — agent groups with commission per service, credit limits that stop bookings past the limit, staff logins for each agency, and online agent applications that sign in only after you approve them
Two-factor sign-in — authenticator-app codes and recovery codes for staff and agents, on the web, social sign-in and the mobile app
Webhooks — signed booking and payment events for your ERP (e.g. Odoo), CRM or automation tool, with retries and a delivery log
Currencies & exchange rates — rates typed in or refreshed daily; used by Stripe/PayPal and to show prices in the customer’s currency in the app
Task management with projects, assignments, deadlines, calendar and kanban board
Support center with tickets, announcements and a public knowledge base
Nine reports — sales, visa, package, flight, hotel, agent, customer, financial and custom — each with a date-range filter and CSV export
CMS website builder — pages, blogs, sliders, testimonials, gallery, FAQs, menus, content blocks and SEO settings
HR — staff attendance, leave requests and payslips
Role-based access control with ten preset roles and per-module read/create/update/delete permissions
Three mail drivers — SMTP, Sendmail, and a Gmail API driver that sends over HTTPS for the many shared hosts that block outbound SMTP ports
Email verification codes for signup and password reset — one six-digit code, one email and one screen across the website, the portals and the app, so no paid SMS gateway is needed to go live
Optional API security — a shared app key the mobile app sends, generated and rotated from the admin panel
App branding from the admin panel — upload your logo once and it appears across the website, the admin panel and the mobile app, with optional app-specific artwork
Activity and login logs, branches and multi-language management
AI Trip Planner powered by your own OpenAI API key, available in the customer portal and mobile API
Live flight-offer search across six providers — Amadeus, Sabre, Travelport, Duffel, TBO Air and Kiwi.com — searched together, merged, de-duplicated and sorted by price, on the public website and in the app (one provider failing never stops the others)
Customer loyalty points for paid bookings, unique referral codes and configurable referral bonuses
WhatsApp Cloud API messaging with encrypted credentials managed from the admin panel
Google and Facebook customer sign-in with secure provider-account linking
Social Links manager with custom name, icon, URL, active status and display ordering for the website header and footer
Correct LTR/RTL language-direction handling across the public website, authentication screens and admin panel
Safe in-panel system updater that accepts the latest full WebSourceCode, with release validation, automatic backups, protected customer files, maintenance mode, database migrations, a cPanel fallback, a ready-to-copy rsync command for SSH users, and a server check that tests PHP, extensions, upload size, time and memory limits, folder permissions and disk space before anything is changed
Live Amadeus hotel search & booking on the public website and mobile API, alongside the manual hotel catalogue — payment is collected only after the stay is confirmed with the hotel
Admin-configurable default light/dark theme for the public website and the admin panel, set independently from Settings → Appearance
Five website templates — Skyline, Classic Agency, Haramain (Hajj & Umrah), Luxe and Night (always dark) — with preview before applying, plus Classic, Centered, Photo and Split hero layouts
Appearance without code — 20 self-hosted fonts (including Bangla, Arabic and Hebrew faces), a separate heading font and a 14–18 px text size for the website; fonts, text size and an optional brand colour for the admin panel and every portal
Live chat inbox — website and app chats in one place, with assignment, open/closed status, online/away and email replies to guests

Multi-Vendor Marketplace (optional)

On for a fresh install and switched off from Settings → General for a single-agency site; every public vendor page returns 404 while it is off
Public vendor registration, vendor directory and vendor profile pages, with “Sold by” labels on listings
Vendor Portal — dashboard, profile, bookings, earnings, payout requests and their own tours, hotels, transport services, Hajj & Umrah packages and visa services
Back-office Marketplace — approve or suspend vendors, approve or reject each listing, set a commission per vendor, review earnings and approve, pay or reject payouts
Earnings and payouts post to the double-entry books (Vendor Payable, Vendor Cost of Sales, Vendor TDS Payable and VAT Payable)
Commission rules, all optional — a default %, a rate per service type, a rate or flat fee per vendor and a minimum commission; optional VAT on commission (vendors can be exempt)
Settlement controls — a holding period before a share can be withdrawn, tax withheld from payouts, a minimum payout, balance adjustments (penalties, bonuses) and a re-check of the balance before any payout is paid
Automatic weekly or monthly payout requests, with optional auto-approve and auto-”paid” for agencies whose bank pays on a schedule, plus a bank-file CSV of approved payouts. The system books the payment; it does not transfer money
Settlement report for the agency and a printable, CSV-exportable statement for each vendor; refunds shrink a vendor’s share automatically
Vendor notifications, a review reply box and booking confirm/decline, on the web and in the app
Vendors use the normal sign-in page; “Become a Vendor” links appear in the site header, footer and sign-in page while the marketplace is on and hide themselves when it is off. The demo has a one-click Vendor login
Admin-style vendor lists — Add button top-right, searchable and filterable tables, status tabs with counts — and the vendor’s logo as their avatar
Visa billing — invoice and receipt per case, customer payment from the portal and the app, and visa vendors earn on the service fee only
Built-in “How it works” help on every marketplace page; every money rule is a setting that is off by default

Online Payments

bKash (Tokenized Checkout), SSLCOMMERZ, JazzCash and Easypaisa for tour, hotel and transport bookings; every return is verified with the provider before a booking is marked paid
Stripe (cards, Apple Pay, Google Pay) and PayPal — each with its own charge currency, converted from your agency currency at your exchange rate; bookings, invoices and accounts stay in your currency
Bank transfer with verification — the customer uploads the reference and receipt (JPG, PNG or PDF), your desk approves or rejects it in the Payment Verification queue, and approval settles the invoice, issues the receipt and creates the agent commission
Company Bank Accounts screen — the accounts customers see when they choose Bank
Payment status (unpaid, pending verification, paid, rejected) and supplier status (not required, pending, confirmed, failed) tracked separately from the booking status
Credentials and sandbox switch in Settings → Payment Gateways — no redeploy to go live
Every payment is re-validated with the provider before the booking is marked paid; invoice and receipt are raised automatically
Desk payments (cash, bank, card, mobile banking) and customer wallet settlement, all in the same ledger
Admin-configurable cancellation window and penalty for customer self-service cancellations
Promo codes and loyalty points come off the price before payment, so the invoice, the receipt and the ledger all bill the discounted sale — cancelling a booking returns the coupon use and the points automatically

Public Website & Self-Service Portals

Travel website with home slider, tour packages, flight, hotel and transport booking
Visa services, visa tracking, Hajj & Umrah packages and booking tracking
Become-a-Travel-Agent application, careers and job applications
Blog, photo gallery, testimonials, FAQ, support center and editable policy pages
Live chat button on every page, plus WhatsApp and Facebook Messenger buttons
Search filters — live hotel rates, tour budget and trip length, Hajj & Umrah budget and open seats, transport by type
Tour pages show verified traveller reviews with a star rating, and a promo code box on the booking form
Customer Portal — bookings, flight tickets, visa applications, travelers, passports, documents, invoices, payments, wallet and support tickets
Customer Portal extras — book a tour with a promo code and loyalty points applied live before you commit, a points & referrals page, and a My Reviews page that prompts for a review once a trip is over
Agent Portal — bookings, customers, commissions, transactions, invoices, wallet and reports
Staff Portal — tasks, attendance, payslips and leave applications

Mobile App — Customer Experience (Flutter)

Browse tour packages, destinations and offers with search and category filters
Package details with itinerary, inclusions and gallery, then book straight from the app
Search and book flights, hotels and transport — bus, train, launch, car rental and airport transfer
Visa services, visa applications and live visa tracking by reference number
Hajj & Umrah packages with registration, documents and payment progress
Apply a promo code and redeem loyalty points right in the booking sheet — the price updates live, priced by the server so what you are shown is what you are charged
Star ratings on tour cards and verified traveller reviews on the tour page, with the agency’s public reply
Review a trip from My Bookings once it is over, and see your points balance, what it is worth and your referral code
My Bookings — booked flights, hotels and transport, each with status and documents
Profile, travelers and passports, notifications, support tickets, help & FAQ and contact
Live chat with the agency, with a push notice when staff reply, and Messenger on the Contact screen
Firebase push notifications for booking, payment and support updates (optional — configure your own Firebase project)
Apply to become a travel agent directly from the app — with a password, the partner account signs in once the agency approves it
Activities & excursions with live dates and places left, language and pickup choice, and a QR voucher
Show prices in your own currency, and two-factor sign-in for accounts that use it
Multi-language (RTL ready), connected to the backend over REST API

Mobile App — Vendor Experience (Flutter)

The same app, signed in with a vendor account (shown only while the marketplace is switched on):

Dashboard with earned, held and withdrawable balances, and listings awaiting approval
Add, edit and remove tours, hotels, transport, Hajj & Umrah and visa listings — with photos — from forms built from the server’s field definitions
Confirm or decline bookings, read and reply to reviews
Earnings ledger, tax withheld, balance adjustments and payout requests prefilled from the saved payout account
Admin can add a vendor by hand; vendors upload private documents (trade licence, tax certificate); approval and payout notices are emailed when Settings → Mail is set up
Business profile with logo and payout account; screens in English, Bangla and Arabic
Customers see “Sold by”, a vendors list and vendor storefronts, and can pay a visa fee from the app

Mobile App — Agent Experience (Flutter)

The same app, signed in with an agent account:

Agent dashboard with sales, commission and wallet balance at a glance
Credit used against the agency’s limit and the commission earned per service
Team — the agency’s main account adds staff logins who book for the agency
Bookings created by the agent, with customer, value and status
Customers registered under the agent
Finance — wallet, commission, transactions and invoices in one place
Agent reports over any period
Profile editing, settings, notifications and support tickets
Firebase push notifications for new bookings, commission and wallet activity (optional)
Server-side scoping — an agent can only ever see their own data

Technologies Used

Laravel (PHP) Backend
MySQL Database
REST API
Flutter
Dart
Laravel Sanctum token authentication for the mobile API
Firebase Cloud Messaging (FCM HTTP v1) for push notifications
Gmail API (OAuth2) as an SMTP-free mail transport
bKash, SSLCOMMERZ, JazzCash and Easypaisa payment gateways via their official APIs (no third-party SDK packages)

System Requirements

Laravel Backend Requirements

PHP Version: 8.3 or higher
Laravel Version: 13.x
MySQL Version: 8.0 or higher (MariaDB 10.4+)
Web server (Apache or Nginx) with Composer, Node.js and NPM

Required PHP Extensions

MySQLi
GD
cURL
allow_url_fopen
OpenSSL
PDO
BCMath
Ctype
Fileinfo
Mbstring
Tokenizer
XML
JSON
Zip

Mobile App Requirements

Mobile App (Flutter)

Tested with Flutter SDK 3.44.0 on the stable channel
Dart SDK 3.12.0, bundled with Flutter 3.44.0
DevTools 2.57.0, included with the Flutter SDK
Project Dart SDK constraint: ^3.12.0
Minimum Flutter dependency support: >=3.44.0

Tooling

Android Studio or VS Code with Flutter setup
Android device/emulator or iOS device/simulator for testing
Xcode, required only for iOS builds

Note: Dart SDK and DevTools are included with the Flutter SDK, so no separate Dart installation is required.

Changelog

Version 1.7.0

Stripe and PayPal — hosted checkouts with their own charge currency, converted from the agency currency; the payment keeps the amount, currency and rate it was charged at
Currencies & exchange rates — per-currency rates, typed in or refreshed daily from a free feed; new currencies can be added
Two-factor sign-in — authenticator app with recovery codes, on the web, Google/Facebook sign-in and the app
Partner agencies — agent groups with commission per service, credit limits, staff logins (Team) and online applications approved by the desk
Hotel rate calendar — rate, allotment, minimum stay and stop sell per night
Activities & excursions — options, dated slots with capacity, adult/child/group prices, languages, pickup points, QR vouchers, website and app booking
Webhooks — signed booking and payment events with retries and a delivery log
Twilio SMS for international numbers
Extra live-hotel suppliers can be plugged in next to Amadeus and are merged cheapest first
An online payment in a currency without a rate is refused before checkout
Mobile app 1.7.0 — two-factor step, display currency, agent credit and Team, partner application with password, Activities

Version 1.6.0

Website templates — Skyline, Classic Agency, Haramain, Luxe and Night, each with its own styling and recommended colours and fonts; preview before applying
Hero layouts — Classic, Centered, Photo and Split, or Auto to follow the template
Live chat — a chat button on the website and a Live Chat screen in the app, answered from one staff inbox with assignment, open/closed status, online/away and email replies to guests; runs on ordinary hosting with no chat server
Facebook Messenger button next to WhatsApp, in the footer, on the Support page and in the app
Appearance — 20 bundled fonts, a heading font and text size for the website; a new Admin Panel Appearance section (fonts, text size, brand colour)
Website search — live hotel rates, tour and Hajj & Umrah filters (budget, length, open seats), transport search, visa document lists
cPanel without a terminal — documented step by step; the site can live in public_html and still update in one click
The installer creates your administrator, installs only into an empty database and locks itself afterwards
System Update server check — PHP version and extensions, upload size, execution and input time, memory, writable folders and free disk space are checked before a ZIP is accepted; a red item blocks the update with the exact setting to change, and an oversized or interrupted upload is explained instead of failing silently
Security: uploads checked by their content, deactivated accounts signed out at once, email verification enforced in the app, activity log escaped
Mobile app 1.6.0 — live chat with push notices, Messenger, and a smoother sign-in for unverified emails
Requires PHP 8.3 or newer

Version 1.5.0

Modules — new Settings → Modules: switch Tour packages, Hajj & Umrah, Visa, Flights, Hotels, Transport, Additional services, Agents, Marketing, CRM, Accounting, HR, Tasks, Support or Reports off; the website, portals, admin menu and mobile app all follow, and nothing is deleted
Agent registration switch — close “Become an agent” while existing agents keep working; vendor sign-up follows the marketplace switch
Six flight APIs — Amadeus, Sabre, Travelport, Duffel, TBO Air and Kiwi.com, searched together with the provider shown on every offer
Featured packages for tours and Hajj/Umrah, and Promotions (scheduled promo banners for the website and the app)
New home sections: Promotions and a Hajj & Umrah package rail
Mobile app 1.5.0 — follows the module switches, Special Offers carousel, Hajj & Umrah rail, Featured badges and Live fares
Fixed: saving a settings page with a secret field left blank no longer erases the saved secret

Version 1.4.0

Multi-vendor marketplace (optional, on for a fresh install, switch off for single-agency) — vendor registration, Vendor Portal and Vendor mobile screens, listing approval with photos, commission by vendor or service (or a flat fee), optional VAT on commission, holding period, tax withheld, automatic payout requests, balance adjustments, settlement report and vendor statements, with new Vendor Payable, Vendor Cost of Sales and Vendor TDS Payable accounts. Vendors sign in through the normal sign-in page; “Become a Vendor” links appear in the menus and sign-in page while it is on, and the demo has a one-click Vendor login. A fresh install has it on; an upgrade keeps it off until you switch it on
Vendor tools — add a vendor by hand from Marketplace → Vendors, vendors upload private documents (trade licence, tax certificate), and vendor and desk notices are also emailed when Settings → Mail is set up
Visa billing — each visa case has its own payment status, an invoice and receipt, and customers can pay the fee from the portal and the app; marketplace visa vendors earn on the service fee only
Bank transfer with verification — receipt upload from the portal and app, a Payment Verification queue for staff, and a Bank Accounts screen; receipts are stored privately
Payment status and supplier status are separate from booking status, with a supplier and supplier reference on package bookings
JazzCash and Easypaisa gateways (Pakistan), configured in Settings → Payment Gateways
Hero slider — a new home-page section: a full-width fading slider built from your active Sliders, with the search widget optionally on top. Add it under Home Page Sections, make Hero + search widget inactive and drag it to the top. The original hero is unchanged
Search Widget Tabs, Traveler Options and Home Sections managers for the home page and the app’s home screen
Mobile app 1.4.0 — bank-transfer sheet, JazzCash and Easypaisa, payment and supplier badges, a visa Pay button, and a vendor experience (dashboard, listings with photos, bookings, earnings, payouts) in English, Bangla and Arabic
The documentation now includes a full Statuses & Workflows reference and a developer API reference

Version 1.3.0

Live hotel search & booking via Amadeus, alongside the existing manually-catalogued hotels — reuses the same Amadeus credentials already configured for live flights. Booking re-confirms the offer’s price/availability, reserves it directly with the hotel, and payment is collected our own way (bKash/SSLCOMMERZ/desk) only afterward, so a customer is never charged for a stay that failed to book
Admin-configurable default light/dark theme for the public website and admin panel — Settings → Appearance → Default Mode
Round-trip fare split and tracking per leg on flight bookings; customer cancellations now surface the refund amount, penalty and status note in the app/API
Customers can now amend a still-tentative hotel booking themselves; once the desk has confirmed it, amendments go through the desk
Manual update’s cPanel path now has an SSH alternative: a ready-to-copy rsync command right on the System Update page

Version 1.2.0

Promo codes now apply at checkout — a code can be entered when booking from the mobile app, the customer portal, the public website and the back-office form. Minimum spend, usage limit and expiry are enforced, and the redemption counter is visible in the admin list
Loyalty points can be spent — points are redeemed as a discount on a tour booking, bounded by three new settings: the value of a point, the minimum redemption and the largest share of a booking points may cover. Referral bonuses unchanged
Verified booking reviews — a new Reviews module. A customer may only review a tour they paid for and have travelled on, so the “Verified booking” badge is a property of the record. Moderated by default, with an optional publish-immediately switch; staff can reply publicly but cannot edit what the customer wrote
Star ratings from approved reviews appear on the public tour page, the portal catalogue, and the app’s tour cards and tour detail
New API endpoints: live booking quote, public tour reviews, own reviews, and write a review
Points are now earned on the amount actually paid, and a booking that stops being paid has its reward reversed — a cancelled, refunded trip no longer pays out rewards
Cancelling a booking returns the coupon use and the redeemed points; reinstating it takes them again
Fixed: the Coupons form emitted broken markup for required-field markers and number inputs
Added AI Trip Planner for the customer portal and mobile API
Added live Amadeus flight search for web and mobile
Added customer loyalty points, referral codes and referral rewards
Added WhatsApp Cloud API messaging integration
Added complete Google and Facebook social sign-in with secure account linking
Added a dedicated Social Links CRUD manager; active, ordered links now power the website header, footer and structured data
Resolved language-direction issues so each language’s configured LTR or RTL layout is applied consistently
Added an admin System Update workflow: use the same full WebSourceCode for fresh installs and existing-site upgrades, with version checks, automatic backups, protected environment/uploads, migrations, permission refresh and cPanel fallback
Moved OpenAI, Amadeus, WhatsApp and loyalty configuration from .env to separate focused settings pages; secrets are encrypted and blank edits retain the saved value
Added a dedicated CMS & Website Appearance page with a dynamic palette whose icon shades and gradients follow the selected colors

Version 1.1.0

Wallet security: top-up endpoint removed; balance checks run in a locked database transaction
Visa and customer documents moved to private storage, served only through authenticated routes
Admin-configurable booking cancellation window and penalty
Wallet balance and dashboard totals computed in SQL for large data volumes
Android release builds refuse to run unsigned; R8 shrinking enabled; debug logging removed from the app
Upload hardening: SVG no longer accepted for logo/favicon, explicit image-type whitelist
Dependency cleanup: Inertia/Vue layer and Breeze removed, intervention/image 3.x, single jQuery and Select2 build
Fixed default app API key so the mobile app connects to a fresh install with no setup
Offline documentation is fully self-contained; changelog added to the package

Version 1.0.0

Initial Release
Tour packages, categories, schedules, guides and package bookings
Visa management with appointments, documents, status tracking and expiry management
Hajj & Umrah with pilgrims, hotel/flight allocation, groups, payments and document verification
Hotel, flight and transport booking modules with vouchers, ticketing, reissue, cancellation and refunds
Additional services — travel insurance, student consultancy, medical tourism, corporate travel and events
CRM with leads, activities, follow-up calendar, notes and communication history
Double-entry accounting with full statements, invoices, receipts, refunds and tax reports
Suppliers, contracts, supplier ledger and agent commission with agent invoices
Task management, support center, knowledge base and nine exportable reports
CMS website builder, SEO settings, HR module and role-based access control
Customer, Agent and Staff self-service portals
Flutter mobile app for Android and iOS — customer, agent and tour guide experiences from one role-based codebase, connected via REST API
Firebase push notifications (FCM HTTP v1) for the mobile app, switched on from the admin panel
Gmail API mail driver for hosts that block outbound SMTP ports, alongside SMTP and Sendmail
Optional shared app key (X-App-Key) for the mobile API, generated and rotated from the admin panel
App Branding — optional app-specific logos, with the mobile app taking its logo from the admin panel rather than a bundled image
Guided web installer with a system check, database test and one-click install, plus full command-line and manual-migration paths
Unified email verification codes across web and mobile, with expiry and rate limiting on every authentication endpoint
Four languages out of the box — English, Bangla, Arabic and French — with RTL/LTR support

Travelio – Travel Agency ERP with Laravel Admin, Multi-Vendor Booking & Flutter App