ATLASPLAST EMAIL SIGNATURE STAFF PORTAL — PRODUCTION PACKAGE
=======================================================

DEPLOYMENT REQUIREMENT: An HTTPS web host with PHP 8+ (Apache/cPanel recommended).
The password protection is SERVER-SIDE PHP, not JavaScript. The login page is not accessible without the password.

1) Upload CONTENTS of staff-signature/ into:
   public_html/staff-signature/
   This includes .htaccess, index.php, generator.view.php, auth-config.php and config.js.
   Ensure hidden .htaccess is uploaded.

2) Upload CONTENTS of email-signature-assets/ into:
   public_html/email-signature-assets/
   Keep these files PUBLIC so email recipients can load logos. NEVER password-protect this folder.

3) In a private/incognito browser window check:
   https://atlasplast.iq/email-signature-assets/atlasplast-logo.png
   It must load without a login prompt.

4) Open https://atlasplast.iq/staff-signature/ . A password screen should appear.
   Find the first login password in ADMIN_INITIAL_PASSWORD.txt. DO NOT upload that file.
   To CHANGE PASSWORD, generate a new PHP bcrypt hash on a computer with PHP:
     php -r 'echo password_hash("YOUR_NEW_PASSWORD_HERE", PASSWORD_BCRYPT), PHP_EOL;'
   Replace the quoted value of ATLAS_PASSWORD_HASH inside staff-signature/auth-config.php.
   Use a long unique password. Do not share the admin file or password publicly.
   For stronger individual staff accounts, use your organization's SSO or server directory authentication.

5) For staff: Sign in, enter name, job title, and phone. Concept 2 is the default.
   Click Copy full signature and paste into Gmail/Outlook. Use short signature for replies.
   The fixed Customer Service line is 6779. All 20 brand logos appear in the requested order.

IMPORTANT:
- Never password-lock email-signature-assets. Signed emails reference publicly available image URLs.
- If deploying to a different domain/path, edit assetBaseUrl in staff-signature/config.js.
- PHP source files are denied direct web access via .htaccess, which requires Apache 2.4.
- Deploy only over HTTPS. This PHP login is NOT designed as an enterprise SSO replacement.
- ISO 9001 badge and 50+ years statement require company verification. The ISO badge is NOT an official ISO logo.
- The AtlasPlast logo says Since 1990. Confirm how the 50+ years statement is substantiated.
- For best compatibility, test the copied signature in Outlook Windows, Outlook Web, and Gmail.

Logo list and order: see brand-order.csv. TOPSAN was added from your latest upload.
