Upload accounts.zip into public_html in cPanel File Manager and extract it.
The resulting folder must be public_html/accounts/ (avoid accounts/accounts/).
Enable Show Hidden Files and confirm accounts/.htaccess exists.

1. Use PHP 8.2+ with pdo_mysql, fileinfo, gd, dom, openssl and session.
2. Enable HTTPS for the domain.
3. Create a MySQL database and dedicated user; grant that user database privileges.
4. Edit accounts/.env: replace yourdomain.com with your actual domain and set
   DB_DATABASE, DB_USERNAME and DB_PASSWORD to the full cPanel database values.
   APP_URL must be https://tesgrowthplans.online/accounts (no /public).
5. No Terminal is required. In cPanel open phpMyAdmin:
   a. Select your new application database in the left sidebar.
   b. Open Import, choose accounts/database/schema.sql from your computer,
      then click Import/Go. This creates the tables, plans and default admin.
   c. If you already imported the older schema, import only
      accounts/database/create-default-admin.sql instead.
   d. Check accounts/.env has the matching database credentials and APP_URL.
   e. Open https://tesgrowthplans.online/accounts/admin/ and sign in using the email
      and password in accounts-admin-login.txt on your computer.
      That credentials file is separate from the upload ZIP. Do not upload it.
   f. Change the password under Profile settings immediately after signing in.

   Existing accounts with the default email are never overwritten or reset.
   Private PIN storage initializes when first needed; keep storage/private
   writable by PHP. promote-admin.sql is an optional alternative for an
   account you registered yourself and is not needed for the default admin.
6. Ensure PHP can write storage/private, storage/logs and storage/sessions.
   Do not use 777 permissions.
7. Set upload_max_filesize=5M and post_max_size=12M or higher.

If the main site has a WordPress/catchall rewrite, add these lines before its
existing rewrite block in public_html/.htaccess:
RewriteEngine On
RewriteRule ^accounts(?:/|$) - [L]

Login: https://tesgrowthplans.online/accounts/index.php?page=signin
Admin: https://tesgrowthplans.online/accounts/admin/

Verify /accounts/.env and /accounts/storage/private/.pin-key are denied,
and /accounts/dashboard.html cannot be opened directly. Test CSS/images,
login, admin and the existing homepage.

This is a fresh installation package. Local database records, uploads, encryption keys, logs and sessions are not
included. The generated admin password is stored only as a hash in the SQL.
