Back to Community

Troubleshooting Common Duplicator Installer.php Issues: Blank Screens, 404s, and Code Downloads

34 threads Sep 16, 2025 PluginDuplicator

Content

If you're trying to migrate or clone a WordPress site with the Duplicator plugin, running into problems with the installer.php file can be a major roadblock. Based on common community reports, this guide covers the most frequent issues and their solutions.

Common Symptoms

Users often encounter one of the following problems when trying to run the installer:

  • Clicking the installer download button displays raw PHP code instead of downloading a file.
  • Navigating to yourdomain.com/installer.php results in a blank/white screen.
  • Accessing the installer returns a 403, 404, or 500 HTTP error.
  • The URL redirects to .../dup-installer/main.installer.php which then fails.
  • Errors about "CSRF file not found" or missing archive config files.
  • The installer downloads but is saved with a .bak extension.

Why These Issues Happen

These problems are rarely due to a flaw in the Duplicator plugin itself. Instead, they are almost always caused by server configurations and environmental factors. The most common root causes are:

  • Server Mime-Type Handling: Web servers must be configured to recognize .php files and execute them as PHP code. If they are treated as plain text, they will display their source code in the browser.
  • Mod_Security Rules: Overly aggressive security modules on Apache servers (Mod_Security) can block the installer's requests, leading to 403 errors or blank pages.
  • PHP Configuration: Certain PHP settings like short_open_tag being disabled, or low values for max_execution_time and memory_limit can prevent the installer from running correctly.
  • File Permissions: The web server user (e.g., www-data) must have read and execute permissions for all Duplicator files and the directory they are in.
  • URL Rewriting: Existing WordPress .htaccess rules or other URL rewrite rules can interfere with accessing the installer file.
  • File Corruption: In some cases, the installer file can become corrupted during download or upload, especially if the download is interrupted.

Top Solutions to Try

1. For Installer Downloading as Code or .bak File

If the installer file doesn't download or shows code, the issue is often on the server where the package was created.

  • Ensure your server is correctly configured to handle .php files. This may require checking with your hosting provider.
  • Try right-clicking the installer download button and selecting "Save link as..." to force a download.
  • Manually check the file on your server via FTP. If it's named installer.php.bak, rename it to remove the .bak extension.

2. For Blank Screens, 404, 403, and 500 Errors

This is the most common category of problem. Follow these steps to resolve it.

  • Check File Permissions: Set the permissions (CHMOD) for the installer.php file and the dup-installer directory to 755. Set file permissions within dup-installer to 644.
  • Rename .htaccess: Temporarily rename any existing .htaccess file in the root directory to .htaccess_old. This disables any rewrite rules that could be blocking access to the installer.
  • Check Mod_Security: Contact your hosting provider and ask if a Mod_Security rule is blocking the Duplicator installer. They can often whitelist the request.
  • Verify PHP Version: Confirm that the destination server meets the minimum PHP requirements for the version of Duplicator you are using.
  • Manual Extraction: In some cases, you can manually extract the archive zip file and then run the installer.php to bypass extraction-related errors.

3. For "CSRF File Not Found" Errors

This error is related to file permissions and missing security tokens.

  • Ensure the dup-installer directory and all its files were uploaded correctly and are not blocked by server security.
  • Verify that the installer.php file and the archive zip file are from the same package build. Using a mismatched pair will cause this error.
  • Temporarily set directory permissions to 755 and file permissions to 644 to ensure the web server can read the necessary CSRF token file.

4. For Errors About Missing Functions (e.g., disk_free_space())

Some hosting environments disable certain PHP functions for security reasons.

  • The error "Call to undefined function disk_free_space()" indicates this function is disabled. You must contact your hosting provider and request that they enable it, as it is required for the installer to check server storage.

Final Checklist Before You Start

  1. Always create a fresh backup package if you encounter errors, in case the original package was corrupted during build.
  2. Use a reliable FTP client to upload your files in binary transfer mode to prevent corruption.
  3. Disable any browser extensions or server-side firewalls that might interfere with the installation process as a test.
  4. If all else fails, try the installation process on a different server or local environment to isolate the problem.

Most installer issues are resolvable by adjusting server settings. If you continue to experience problems, detailing your specific error message and server environment when seeking help will lead to more targeted assistance.

Related Support Threads Support