Prepared statements only
Every database query is parameterized. No query anywhere is built from a string, so there is no room for injection.
Green Submissions carries a literary magazine from open call to final decision — the slush pile, blind reading, contest fees, volunteer readers, and revisions. It runs on your own server, the software is free, and every manuscript stays on hardware you control.
A submission follows the same path every magazine already uses. Green Submissions just holds all of it in one place, so nothing lives in a shared inbox or a spreadsheet.
Start a reading window or a fee-based contest, with its own guidelines and deadline.
Authors send work through their own account and pay any contest fee straight to your PayPal.
Staff and volunteer readers work the slush pile blind, leaving notes and scores.
Accept, decline, or ask for a revision — the writer sees each change in their dashboard.
Accepted work moves into your contributor directory, ready for the issue.
Writers get a clear place to submit and follow their work. Your editors get a full reading room. Both come with the software — there is nothing to bolt on.
Writers trust you with unpublished work. These protections ship switched on, and there is nothing to configure to get them.
Every database query is parameterized. No query anywhere is built from a string, so there is no room for injection.
Passwords are hashed with bcrypt and are not recoverable — not by an attacker, and not by you.
A CSRF token sits on every form, and sessions are regenerated at login to defeat fixation.
Login, signup, and password reset are gated by Cloudflare Turnstile or an image captcha.
The attachments folder refuses to execute any script. A manuscript can only ever be downloaded.
The files holding your database and PayPal credentials are blocked from direct access.
None of this is a setting. It is how the software is written, so it protects you from the first day.
Green Submissions installs on ordinary PHP and MySQL hosting. There is no subscription and no charge per submission. Contest fees go to your own PayPal account, and every file lives on your server.
| Green Submissions | Hosted services | |
|---|---|---|
| Where submissions live | Your own server | The vendor's cloud |
| Cost of the software | Free | Monthly or annual subscription |
| Per-submission fees | None | Common, and often passed to writers |
| Contest fees paid to | Your PayPal account | The platform, then to you |
| Who holds your data | You do | The provider |
| Source you can read | Yours, in plain PHP | Closed |
Download the files, point them at a fresh database, and open your site. A guided installer checks the server, builds the tables, and creates your first administrator.
PHP and MySQL — the standard shared-hosting stack. SMTP details to send mail, and a PayPal account if you plan to charge for a contest. Both are optional and can wait.
Every new magazine has to pick somewhere to run it. InstantAccess.net knows Green Submissions better than any general host — plenty of literary journals already run it there — so it installs cleanly, and their support desk can actually answer questions about the software, not only the server.
Running a new magazine on this software? InstantAccess is the host that already knows it inside out, so help is there when a question comes up.
Host with InstantAccessThe software stays free to download above — this is simply the best place to run it.
Free to run, free to share, and built by people who read slush themselves. Download it, or read exactly how it works first.