Hilsa-Technical-Institution-Consultancy — CPANEL DEPLOYMENT INSTRUCTIONS

1. Back up existing hosting files first. Use a new clean cPanel site or preserve a backup of the current public_html directory.
2. In cPanel > MultiPHP Manager, choose PHP 8.0 or newer (8.2+ recommended). Enable fileinfo and GD where supported. Ensure Apache mod_rewrite and .htaccess rules are enabled.
3. Upload ONLY Hilsa-Technical-Institution-Consultancy-FINAL-CPANEL-PACKAGE.zip into the site's public_html/ document root. Extract in place. The archive has no extra enclosing folder.
4. Do NOT upload this handover/credentials TXT file, the outer handover ZIP, or any other private notes into public_html.
5. Ensure the public_html/private directory and public_html/uploads/media directory are writable by PHP. Normal owner-writable permissions usually suffice (folders 755 and files 644); do not set 777.
6. Visit https://YOUR-DOMAIN/ and check the approved V2 homepage. Visit service pages such as /services.html and /electrical-services.html. Existing .html URLs are internally rewritten to PHP; do not rename them.
7. Visit https://YOUR-DOMAIN/admin/ and use the private credentials from Hilsa-Technical-Institution-Consultancy-ADMIN-CREDENTIALS.txt. Immediately change the temporary password under Password.
8. To add images: Admin > Add / delete gallery > choose a page > upload a JPEG, PNG or WebP image > enter caption and ALT > Add to gallery. To delete, choose the same page and click Delete image.
9. To replace existing hero/service images: Admin > Manage images > choose page > image slot > upload/replace > Save. The default can be restored at any time. Optional original gallery photos can be removed and restored.
10. Admin > Background photos controls section backgrounds; Logo & branding controls independent logos and sizes. Business & contact controls public WhatsApp, telephone, email, address, social links and hours.
11. Set the final HTTPS canonical domain in Admin > Business & contact when the domain is active. Check /sitemap.xml and /robots.txt afterwards.
12. SECURITY GATE: Open https://YOUR-DOMAIN/private/settings.json and /private/admin-users.json in an incognito browser; both MUST return HTTP 403 (not reveal data). If not blocked, fix Apache rewrite/.htaccess before exposing the site.
13. TEST: Check desktop and mobile breakpoints 360/375/390/430/768/1024/1440; test mobile hamburger, desktop Services menu, all cards, images, contact form and WhatsApp.
14. The current Google connector area supports manual IDs and explicitly does not report connected status. Automatic Google APIs must be configured and tested through the Tarjeeh central OAuth service separately.
15. If Apache returns 500 after extraction, check cPanel error log, PHP version, and .htaccess handling. If upload does not generate WebP derivatives, enable GD (imagick optional) and verify PHP image settings. Uploaded original images still display when GD is absent, but file size may be larger.

This is a custom PHP admin site, NOT a WordPress installation. It does not require installing WordPress or purchasing a database.
