PSP SMART - UNIVERSAL INSTALLER V2 (STAGING ONLY)
Website: https://mfgsecuritytest.mdcall.in
Exact site code: mfgsecuritytest

STATUS: NOT ACTIVE. NO LIVE CREDENTIALS INCLUDED.

SAFE PROCEDURE
1. Back up website files, .htaccess and database, and keep rollback copies outside the web root.
2. Test only on an isolated clone with its own URL and site registration. Do NOT extract over a working site.
3. Confirm PHP ZIP/cURL/session support and verify existing .htaccess, routing and cron behavior.
4. The config contains an EMPTY bridge secret. Do not paste secrets into chat or distribute them in a ZIP.
5. This version uses the EXISTING shared-secret bridge. Per-site credentials require central endpoint upgrades BEFORE production rollout.
6. Head Office must register the test site and assign the selected computer.
7. In device_test.php choose the actual registered Device ID, then generate and verify a pairing code.
8. Test issue/check authorisation, successful access on approved computer, and denied access in an unpaired browser.
9. Only after successful tests, activate the guard manually via a hosting-compatible auto_prepend_file setting.
10. Test rollback and check logs. Do not expose configuration files or secrets publicly.

DO NOT OVERWRITE working stage4b_config.php, device_test.php, psp-security files or .htaccess.
No application/database files are included. No server changes occur when this ZIP is downloaded.
