Support

Site Restoration

#42569 kickstart.php 9.01 does not work

Posted in ‘Site restoration’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

PHP version
8.4
CMS Type
Joomla!
CMS Version
6.0.1
Backup Tool Version
10.2.1
Kickstart version
9.0.1

Latest post by stavrosz on Friday, 19 December 2025 06:17 CST

stavrosz

Though the kickstart.php version 8 works fine, the kickstart.php version 9.0.1 does not work and the browsers (Chrome and Opera) display the following error message

 

This page isn’t working
<domain name> is currently unable to handle this request.

HTTP ERROR 500

 

Firefox just displays a blank page.

 

The following PHP error is logged:

[19-Dec-2025 10:28:25 UTC] PHP Warning: include(phar:///home/abbeygateclaims/public_html/kickstart.php/src/includes/preamble.php): Failed to open stream: phar &quot;/home/abbeygateclaims/public_html/kickstart.php&quot; SHA256 signature could not be verified: broken signature in /home/abbeygateclaims/public_html/kickstart.php on line 121
[19-Dec-2025 10:28:25 UTC] PHP Warning: include(): Failed opening 'phar:///home/abbeygateclaims/public_html/kickstart.php/src/includes/preamble.php' for inclusion (include_path='.:/opt/cpanel/ea-php84/root/usr/share/pear') in /home/abbeygateclaims/public_html/kickstart.php on line 121
[19-Dec-2025 10:28:25 UTC] PHP Fatal error: Uncaught PharException: phar "/home/abbeygateclaims/public_html/kickstart.php" SHA256 signature could not be verified: broken signature in /home/abbeygateclaims/public_html/kickstart.php:122

Stack trace:
#0 /home/abbeygateclaims/public_html/kickstart.php(122): Phar::webPhar(NULL, 'src/kickstart_w...', NULL, Array, Object(Closure))
#1 /home/abbeygateclaims/public_html/kickstart.php(126): {closure:/home/abbeygateclaims/public_html/kickstart.php:81}()
#2 {main}
thrown in /home/abbeygateclaims/public_html/kickstart.php on line 122

 

A pre-emptive answer to a question I've seen in another relevant posting - Yes the phar extension is enabled.

I tried to execute the kickstart.php 9.0.1 on my windows 10 localhost (WAMP 3.3.8) and I got a warning of "Insecure setup detected" providing to me two options to follow: (1) using a password, and (2) renaming the kickstart file.

So, it seems the kickstart.php 9.0.1 must be working O.K. on my Windows localhost but it does not on my online Linux.

nicholas
Akeeba Staff
Manager

This says that your Kickstart file is broken. Typically, this happens if you upload by FTP in Auto or ASCII mode which will corrupt the file. This is especially true since you are using a Windows computer.

Technical info on what's going on: Windows uses CRLF (two bytes) to terminate a line string, whereas Linux and macOS use LF (one byte). Using Auto mode, the default transfer mode for PHP files in most FTP applications when you are on Windows is telling the FTP client to automatically convert CRLF to LF on files uploaded from your computer to the server, and convert LF on files downloaded from the server to your computer back to CRLF. This was necessary in old versions of Windows (we're talking 20+ years ago…) which couldn't open files with LF line endings. Windows 10 and 11 never had that problem. Either way, your FTP client tries to convert CRLF bytes (0d0a in hex) to a single LF byte (0a in hex) present anywhere in the file being uploaded. Since Kickstart is actually a binary PHAR archive file with only a small executable "stub" in front to let it "run", this conversion breaks the archive. It's also the same reason we tell you never to use Auto or ASCII mode when transferring backup archives to and from your site. The conversion modifies the file, breaks it, and invalidates its signature which consists of a simple SHA-256 checksum of the archive contents. Therefore, PHP correctly complains that the file's signature is broken and refuses to proceed any further.

Download Kickstart again. Make sure you are downloading version 9.0.1.

Extract the ZIP archive on your computer.

Rename the kickstart_pro.php file to something different that does not include the terms akeeba, kickstart, or ks. Let's say uh4Q8yhfsYKzKZ4m.php (randomly generated filenames are better for security; please read the documentation for more information).

Upload the file to your site. If you are using FTP / FTPS you must explicitly use the Binary transfer mode in your FTP client. Better yet, use SFTP or your host's file manager which do that automatically (no explicit configuration required).

Let me know how that works for you.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

nicholas
Akeeba Staff
Manager

Ah, I forgot the simplest alternative. Upload Kickstart's ZIP archive and extract it on the server using your hosting control panel's file manager. ZIP files transferred in Auto mode are actually uploaded as if you had explicitly selected Binary mode, therefore they don't break. That's why this method will work.

Another alternative is to rename kickstart_pro.php to kickstart.bin and upload it, then rename it back to a filename with a .php extension. This also works because it tricks your FTP client into using implicit Binary mode even though it's set up to use Auto mode.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

stavrosz

Yes, the simplest working alternative is having the file renamed to something like kickme.bin and once uploaded having the extension renamed back to .php.

This worked excellently.

Thank you Nicholas

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!