Skip to content

Install the Loader

The loader installs on the server that runs your protected code. Two ways: the CLI (recommended — it picks the right build and enables it for you) or a manual download.

Step 1 — Install the oxrion-loader CLI. This installs the CLI and nothing else — no PHP installation is touched yet:

Terminal window
curl -fsSL https://get-loader.oxrion.com | sh
Terminal window
irm https://get-loader.oxrion.com/win | iex

Step 2 — Install the loader for your PHP:

Terminal window
oxrion-loader install

That downloads the matching loader binary, verifies its checksum, installs and enables it, and verifies the result. Then restart your web server.

CommandWhat it does
oxrion-loader installonlineInstall the loader for a PHP (downloads the binary).
oxrion-loader verifyofflineCheck that the loader is active.
oxrion-loader infoofflineEnvironment and install-status report.
oxrion-loader discoverofflineList the PHP installations found in common hosting-panel locations.
oxrion-loader uninstallofflineRemove the loader from a PHP.
oxrion-loader updateonlineRefresh the CLI itself to the latest version.
oxrion-loader self-uninstallofflineRemove the loader, then remove the CLI.
oxrion-loader versionPrint the CLI version.

Without options, commands apply to the PHP on your PATH. To target a specific one:

Terminal window
OXRION_PHP=/usr/bin/php8.1 oxrion-loader install

To apply to several PHP versions at once, list them in a file (one directory or php path per line) and pass --targets:

Terminal window
oxrion-loader install --targets=php-targets.txt

Targets files also accept glob patterns, so one line can cover a whole panel:

/opt/cpanel/ea-php*/root/usr/bin/php
/opt/alt/php*/usr/bin/php

On a server with many PHP versions — cPanel, CloudLinux, Plesk, DirectAdmin, and plain Debian/Ubuntu or RHEL — let the CLI find them instead of writing a file. It scans the known locations, confirms each is a working PHP, and skips duplicates:

Terminal window
oxrion-loader discover # just list what it finds
oxrion-loader install --discover # install to all of them

discover --write=targets.txt saves the list to a file you can review and edit first. A discovery-driven install/uninstall shows the list and asks for confirmation; add --yes to skip the prompt in automation.

When OPcache is enabled on the target PHP, the loader installs as a Zend extension loaded ahead of OPcache, so protected files are compiled once and cached — they run at full speed with no per-request recompilation. Your signature, expiry, server-lock and license checks still run on every request. This is automatic; no configuration needed.

To load the classic way instead, add --classic:

Terminal window
oxrion-loader install --classic

(If opcache.file_cache is in use, the loader stays in classic mode automatically.)

Prefer to do it by hand? Download the build for your exact PHP version and enable it yourself.

  1. Go to oxrion.com/loader/download and pick your OS and PHP version.
  2. Move the file into your PHP extension directory.
  3. Add extension=oxrion to the php.ini your server uses, and restart it.

The download page has the picker, per-build files, and checksums. A manual extension=oxrion line loads the classic way; to get OPcache integration, use the CLI, which sets it up for you.

Terminal window
oxrion-loader verify

Or check directly:

Terminal window
php -m | grep oxrion # Linux
php -m | findstr oxrion # Windows

If you see oxrion, protected files will run. If not, see Verifying or Troubleshooting.