Features & System Capabilities
Standalone Qwiki is a modern, fast, zero-database documentation web application. It combines local Markdown, rich HTML pages, embedded PDFs, and live Google Docs into a unified documentation portal.
π 1. Multi-Format Rendering Engine
A. Local Markdown Files (.md)
- Server-side GitHub-Flavored Markdown parsing via
lib/Parsedown.php. - Full online visual/code editor (
βοΈ Edit Content) for real-time document editing. - In-Editor Image Uploader & Gallery Browser: Click
π· Insert Imageto upload.png,.jpg,.svg, or.webpfiles directly touploads/images/, or click the dedicatedπΌοΈtoolbar icon to browse the full media gallery. When an editor is active, the gallery displays an "Article Editor Active" banner andβ Selectbuttons to instantly insert image Markdown tags () or HTML tags directly at your cursor position and automatically close the modal. - Auto-Embedded Playable Videos: Paste standalone video links on their own line to automatically render responsive, theme-styled video players:
- YouTube: Standard watch URLs, short
youtu.belinks, and Shorts with timestamp support (?t=1m30s), served via privacy-friendlyyoutube-nocookie.com. - Vimeo: Direct embeds with Do Not Track (
dnt=1) privacy. - Loom: Instant screencast video playback directly from share links.
- HTML5 Direct Video: Native player for
.mp4,.webm,.ogg, and.movfiles with controls and download links. - Subtitles & Captions: Add a custom title using Markdown link syntax
[Video Title](https://...)or image syntaxto display an italicized caption below the player.
- YouTube: Standard watch URLs, short
- Native Mermaid & Diagram Flowcharts: Embed responsive flowcharts, sequence diagrams, state machines, class diagrams, entity-relationship diagrams, mindmaps, and timelines directly using standard fenced code blocks (
```mermaid). Wide diagrams automatically preserve full natural legibility with responsive horizontal scrolling without shrinking into unreadable miniatures. - π Mathematical Formulas & LaTeX/KaTeX Rendering: Natively format inline math (
$x_1 + x_2$), display equation blocks ($$...$$), and convert LaTeX shorthand symbols ($to$,\to,\approx,\alpha,\le) seamlessly across both Markdown content and Mermaid diagrams with dark/light mode adaptation and responsive horizontal scrolling. - Protected Markdown + HTML Mode: Automatically detects raw HTML blocks, inline styling, CSS grids, and custom badges. Locks the editor into Markdown mode with synchronized live preview to prevent WYSIWYG tag sanitization and style loss (with refined detection allowing benign line breaks like
<br>).
B. HTML Documents (.html)
- Native sandboxed HTML embedding with interactive JavaScript execution and isolated styling.
- SunEditor WYSIWYG Editor: Create and visually format HTML documents with headings, font sizes, tables, lists, colors, links, and media.
- 1-Click Raw Code View & Auto-Sync: Seamlessly toggle between visual WYSIWYG editing and raw HTML code editing. Edits made in raw Code View mode are automatically synchronized back to the WYSIWYG editor DOM and preserved byte-for-byte upon saving.
- Hotkeys & WAF Protection: Press
Ctrl+S/Cmd+Sinside the HTML editor to save instantly. Content submissions are safely Base64-encoded to bypass restrictive Apache ModSecurity and Web Application Firewall (WAF) filters. - Asset URL Normalization: Media tags (
<img>,<video>,<audio>) with relative paths (such asuploads/images/...) automatically resolve against the wiki base URL inside sandboxed iframes. - In-Place Editing: Admins can click
βοΈ Edit HTMLdirectly from the viewer toolbar to edit and update.htmlfiles in real-time. - File Loader: Upload existing
.htmlfiles directly into the editor. - Smart Print / Save as PDF: All print buttons (toolbar, header icon, and any in-document button) delegate to the sandboxed iframe and trigger the browser print dialog. When viewed embedded in Qwiki, redundant print controls are automatically hidden β the HTML viewer toolbar button is the single entry point. In the full-tab expanded view or share mode, only the in-document button is shown.
C. Interactive Forms (.form.json)
- Native flat-file interactive forms, surveys, and event RSVPs without any SQL database.
- Visual Field Builder: Add, configure, and reorder text inputs, textareas, email fields, select dropdowns, radio buttons, and checkboxes with customized labels, placeholders, and validation rules.
- Starter Templates: Rapidly initialize forms from presets including Feedback Survey, Contact Us, Event RSVP, or start from a blank canvas.
- Submission Management & Alerts: Collect visitor submissions into append-only flat-file JSON storage (
.submissions.json). Authenticated Admins can inspect submissions in a responsive data table, delete individual entries, or clear all responses. - Anti-Spam Defenses: Built-in silent honeypot fields deceive automated spam bots without impeding real visitors, paired with timestamp token verification.
- CSV Export: Export all collected responses with 1 click to Excel/UTF-8 formatted
.csvspreadsheets. - Outgoing Notifications & Webhooks: Optionally configure email alerts and webhook URLs (Slack, Discord, Zapier) to receive real-time POST payloads on every new submission.
D. Published Google Docs (gdoc)
- Embed published Google Doc URLs directly into your wiki tree.
- Automatic formatting: automatically appends
?embedded=trueif omitted. - HTML cleaning & extraction via
lib/simple_html_dom.phpto match dark/light theme styling seamlessly.
E. PDF Documents (.pdf)
- Embedded PDF viewer container with zoom, page navigation, and download links.
π§© 2. Self-Contained Extension System
- Extend Qwiki with custom page types and tools packaged in
assets/extensions/without touching core logic. - Auto-discovery via
manifest.jsonenables dynamic tab injection, custom badge rendering, backend action routing, and search text extraction. - Completely isolated and protected against 1-click core updates.
β¨ 3. Agentic Visual & Chart Generator
- Create professional vector graphics directly from natural directives:
- π Bar Charts: Metrics, quarterly reports, and comparisons.
- π Line Charts: Trends and time-series data.
- π₯§ Pie / Donut Charts: Proportions with automated color legends.
- π Process & Flow Diagrams: Multi-stage connected node workflows.
- π·οΈ Status Badges: Architecture and system status pills.
- Saves generated SVG files permanently to
uploads/and offers 1-click insertion into the Markdown editor.
ποΈ 4. Drag & Drop Navigation & Category Relocation
When logged in as an Admin, drag handles (β£Ώ) appear next to every menu item in the sidebar:
- Reorder Documents: Drag pages up or down within a section.
- Nest Items into Categories: Drag a document into a category or sub-folder. Physical files on disk are automatically moved to the new category folder without broken links.
- Reorder Categories: Drag category headers to re-arrange main sections.
- Document Relocation & Pre-filled Category Hierarchy: In
βοΈ Edit Details, administrators can change a document's parent category/folder via a hierarchical category selector (β³), or edit its slug. The document's active category is always accurately prefilledβeven when deeply nested in multi-level subfoldersβensuring folder placement is never accidentally reset when updating titles or metadata. Qwiki automatically moves the physical file on disk to the destination folder, renames it, resolves any filename clashes with numeric suffixes, and updatesqwiki.json. - Instant Backend Sync: Menu changes and physical file moves automatically save to
qwiki.json.
βοΈ 5. Resizable Sidebar Menu Width
- Drag the right edge of the sidebar to widen or narrow the navigation panel (between
200pxand550px). - Your preferred width is saved in
localStorageand remembered across sessions.
π 6. Instant Zero-Flicker Theming
- Server-side cookie sync paired with synchronous head script execution eliminates dark/light mode flashing (FOUC) when clicking between pages.
- Cascading Themes: Apply different CSS themes to the entire site, to specific categories, or to individual documents.
- Live Theme Editor: Open the Theme Editor from the Settings modal to write, edit, and save new CSS themes directly in the browser.
π₯ 7. Multi-User Access Control (RBAC)
- Lightweight user store in
users.jsonwith PHP Bcrypt password encryption. - Admin: Full creation, editing, file uploading, drag-and-drop menu reordering, and user management.
- Viewer: Read-only documentation access.
ποΈ 8. Visibility Controls & Search
- Granular Category Access: Assign visibility to categories as
Public,Logged In Users, orAdmins Only. - UI Customization: Restrict document type badges (
MD,PDF,GDOC,HTML,FORM) to admin users. - Full-Text Search: Real-time search across titles, descriptions, Markdown content, HTML documents, and interactive forms.
- Clear Search Button: A
Γclear button appears in the sidebar search bar when text is present, instantly resetting the search and restoring the pre-search navigation state. PressEscapeto achieve the same result with keyboard.
π 9. Navigation Hyperlinks & Tab Routing
- Sidebar Hyperlinks: Place custom links directly into the navigation tree at any levelβeither at the top level alongside category headers or nested inside any category folder.
- Smart Target Routing:
- External Links: Automatically open in a new tab (
target="_blank" rel="noopener noreferrer") and display an external link badge. - Internal Links: Same-domain and relative links open in the same tab (
target="_self") with an internal link badge.
- External Links: Automatically open in a new tab (
- Drag-and-Drop Reordering: Move links freely between top-level navigation and nested category folders with drag handles (
β£Ώ). - Search Integration: Hyperlinks are fully indexed and searchable by title and description.
π‘οΈ 10. Document Protection & Sandbox Safeguards
- UI Lock Toggle (Document & Category Locking): Lock or unlock individual documents directly from the Edit Details modal (
βοΈ) without editingqwiki.jsonby hand. Locking prevents content modifications, inline markdown edits, and deletions β the edit and delete buttons are hidden and replaced with a Protected Document badge. - Ancestor Inheritance: Documents inside a directly locked category automatically inherit read-only protection. The lock toggle in Edit Details is disabled with a notice explaining that the lock is inherited from a parent category β individual documents cannot be unlocked while their containing category is locked.
- Cascading Category Deletion Protection: Categories containing protected documents automatically inherit deletion protection at all hierarchy levels, preventing documents from being accidentally removed by deleting a parent folder.
- Visual Lock Indicators: Protected pages and categories display visual lock indicators (
π), hide inline editor actions, and suppress deletion controls. - Native Demo Mode & Auto-Updater Safeguards: Activate sandbox mode via
"demoMode": trueinqwiki.json, environment variableQWIKI_DEMO_MODE=1, or a.demomarker file. Automatically suppresses the in-app auto-updater to prevent sandboxes from being overwritten, blocks visitors from unlocking protected demo content, and surfaces theReload Demo Packagereset engine. - Multi-Instance Session Isolation: Generates unique
QWIKISESSID_<hash>session names and subfolder cookie paths derived from each installation's filesystem path, preventing session bleed across adjacent sites or nested subfolders.
π 11. Secure Full-Screen Document Sharing & Social Metadata
- Unguessable Unique Share Keys: Signed-in users with view rights (both Viewers and Administrators) can generate a secure share link for any document. Links use a cryptographically random 16-hexadecimal key (
?share=...), completely masking internal category structures, folder paths, and slugs from recipients. - Role-Agnostic Sharing from Private Portals: Viewers on private portals requiring sign-in can generate and distribute public full-screen share links, allowing recipients without accounts to view shared documents without encountering the portal login gate.
- Distraction-Free Zen Reader: Shared documents open in full-screen reader mode with the sidebar, brand header, search bar, and previous/next buttons hidden. Features a centered reading canvas and a floating glassmorphic bar with theme toggle, print/PDF button, social sharing dropdown, and an "Open in Wiki" exit link for authenticated users.
- Dynamic Social Sharing & Rich Previews: Built-in 1-click sharing to π (Twitter), LinkedIn, Facebook, WhatsApp, Telegram, and Slack from both the share modal and the floating Zen reader dropdown. Complete Open Graph (
og:title,og:description,og:image,og:url) and Twitter Card meta tag integration ensures rich link previews across social networks and messaging platforms. - Custom Social Metadata & Fallback Chain: Authors can set document-specific social descriptions and image URLs in Edit Details, with automatic fallback to site-wide social settings in Settings (
Global Social Share Description,Global Social Share Image URL), portal defaults, or article intros. - Admin Access Controls & Instant Revocation: Documents are publicly shareable by default. Administrators can disable public sharing for any document (
publicShareable: false) or click Reset Key to immediately invalidate all previously distributed links.
π 12. Subwiki Management & Collision Protection
- Single-Level Subwiki Deployments: Administrators in parent wikis can provision independent, single-level subwikis with dedicated admin accounts directly from the UI (
π Subwikis). - Bi-Directional Slug Collision Prevention: Real-time validation ensures that new subwikis cannot shadow parent categories, and parent categories cannot share names with subwiki folders or reserved system directories.
- Logical Dashed Grouping: Subwikis cannot deploy nested child wikis; hierarchical multi-team structures are grouped using dashed slugs (e.g.
engineering-electrical,engineering-mechanical). - Live Dynamic Parent Wiki Title: Subwikis dynamically inspect the parent wiki's
qwiki.jsonto reflect live parent wiki title renames on the sidebar "β Back to..." banner, eliminating stale names. Subwiki administrators can also configure custom parent titles and target URLs in Settings. - Automated Cascading Updates: When the parent wiki installs core updates, code changes (
lib/,assets/,api/,index.php) are automatically pushed to all child subwikis while preserving child content, uploads, and accounts. - Zero Broken Links & Image Normalization: Background migration safely flattens any legacy nested subwikis and normalizes article image references.
π 13. Multitenant Hosted Mode
For managed hosting environments where many subwikis should share a single central Qwiki core:
- Shared Core Architecture: Define
QWIKI_BASE_DIRandQWIKI_ASSETS_URLconstants before including the centralindex.php. Each subwiki gets a lightweight two-line bootstrap file instead of duplicating the entirelib/,assets/, andapi/tree. - Lightweight Subwiki Bootstraps: When provisioning a new subwiki in hosted mode, SubwikiManager generates an
index.phpbootstrap automatically pointing to the central core β no manual setup required. - Shared Extension Fallback: ExtensionManager automatically falls back to the central shared extensions directory when local per-subwiki extensions are not present, ensuring all subwikis have access to core extensions.
- Automatic Update Propagation: In hosted mode, a single core update rolls out to every subwiki simultaneously β no per-subwiki update runs needed.
- Reserved Name Expansion:
_coreandadminare added to the reserved slug list to prevent subwikis from accidentally shadowing core system paths.
π¬ 14. Editorial Postbox Document Transfer & Desktop Integration
Asynchronously transfer documents and folders across independent wikis or directly from your local workstation with non-destructive, reviewer-controlled staging:
- Peer-to-Peer & Multitenant Transfers: Copy single documents, entire categories, or bulk document sets between standalone wikis and subwikis, or across separate hosted tenants via token-authenticated webhooks.
- Zero In-Place Overwrites (Mandatory Editorial Review): Inbound transfers land safely in a
.htaccess-protected staging inbox queue. The recipient reviews the incoming document, sees category suggestions, selects the target category, customizes the title or slug, and confirms the import. - Desktop & Server CLI (
qwiki-postbox.py): Zero-dependency Python 3 CLI tool to transmit local.mdand.htmlfiles or entire folders from local computers, CI/CD pipelines, or servers directly to any Qwiki instance. - Automated Local Asset Packaging: Automatically detects and bundles referenced local images into a self-contained envelope, unpacks them to the destination
uploads/images/, and remaps Markdown and HTML links without broken paths. - Native OS File Manager Integrations:
- Linux (Nautilus, Nemo, Caja): Right-click any document or folder β
ScriptsβSend to Qwiki. - Windows (File Explorer): Right-click any document or folder β
Send toβSend to Qwiki. - macOS (Finder Quick Actions): Right-click any document or folder β
Quick ActionsβSend to Qwiki.
- Linux (Nautilus, Nemo, Caja): Right-click any document or folder β
- 1-Click Desktop Bundle Download: Download pre-configured desktop tools directly from the Postbox modal in Qwiki with pre-populated URL and access token.
π€ 15. Controlled LLM & AI Agent Access Pipeline
Standalone Qwiki provides a dedicated, key-authenticated API endpoint (api/llm.php) engineered specifically for Large Language Models, autonomous coding agents (Claude Desktop, Cursor IDE, Gemini CLI, OpenAI GPT Actions), and Retrieval-Augmented Generation (RAG) pipelines:
- Token-Authenticated API (
qwk_llm_...): Generate granular API keys from βοΈ Settings β π€ LLM & AI Agent Access or the Admin menu. Authenticate requests via standardAuthorization: Bearer <key>header or query parameter (?key=<key>). - Granular Category Scoping: Confine an agent key to a specific folder branch (with recursive subcategory access) or grant full-wiki visibility.
- Document Type Filtering: Restrict keys to Markdown only (
markdown), or permit binary and structured formats (pdf,html,text,all). - Lifecycle & Expiration Controls: Configure optional expiration dates with 1-click renewal extensions, or instantly revoke keys without deleting audit entries.
- Multiple Operational Retrieval Modes:
- Document Tree Mode (
/api/llm.php?mode=tree): Returns structured document catalog including document titles, URL slugs, byte sizes, word counts, token estimates, and API retrieval endpoints. Supports standard llms.txt Markdown format (format=llms.txt). - Document Content Mode (
/api/llm.php?mode=doc&slug=<slug>): Retrieves clean document content with absolute canonical link and image rewriting, word counts, token estimation, and byte-range truncation (max_bytes) for context window management. - Live Search Mode (
/api/llm.php?mode=search&q=<query>): Fast keyword and semantic relevance search across authorized documents with calculated scoring and contextual excerpts. - OpenAPI 3.0 Schema (
/api/llm.php?mode=schema): Provides an auto-generated OpenAPI 3.0 specification for 1-click import into OpenAI Custom GPT Actions, LangChain, or Claude Custom Tools.
- Document Tree Mode (
β¨ 16. Native Gemini AI Assistant Extension & Two-Tier BYOK
Standalone Qwiki bundles a native AI assistant utility extension (tool-gemini-assistant) powered by Google's Gemini models (gemini-2.5-flash, gemini-2.5-pro, gemini-3.5-flash, or custom models) with real-time model auto-detection and a flexible two-tier Bring-Your-Own-Key (BYOK) architecture:
- Automated Metadata & SEO Synthesis: Analyzes active document content with 1 click to generate concise meta descriptions and relevant topic tags.
- Live OpenGraph / Social Share Simulator: Renders an interactive social preview card showing how the title, generated description, URL, and tag pills will unfurl when shared on social networks or messaging apps.
- 1-Click Metadata Application: Apply generated descriptions and tags directly to the active document in
qwiki.jsonwithout leaving the viewer (restricted to administrators). - Two-Tier BYOK Key Architecture:
- Tier 2: Site Default Key: Site administrators can configure a shared Gemini API key (via
qwiki.jsonor server environment variableGEMINI_API_KEY) and default model for immediate site-wide team access. - Tier 1: Personal User Key Override: Any signed-in user (Viewers and Admins) can provide their own personal Gemini API key and preferred model in the Assistant settings, stored securely in
users.json. When set, personal keys take immediate precedence over the site default. Users can revert to the site key at any time with 1 click. - Free & Paid Tier Coexistence: Allows experimental, hobbyist, or community installations to let users bring their own free-tier API keys without overburdening the shared site key, while professional installations can provide a single paid site-wide key.
- Tier 2: Site Default Key: Site administrators can configure a shared Gemini API key (via
- Role-Based Permissions & Safeguards: Signed-in viewers can launch the assistant from the header utility bar to summarize content, test models, and inspect social preview cards using either the site key or their personal key. Direct document updates and site configuration changes remain strictly restricted to administrators.
- Interactive Model Discovery & Key Management: Query Google's API to auto-detect active models supported by your API key, or choose from high-performance presets with automated version fallback and connection testing. Keys are securely stored and masked in the UI; in demo mode, simulated responses are provided safely.
π 17. Upload Conflict Resolution & In-Place Document Replacement
Intelligent conflict detection and in-place replacement safeguards streamline document uploads and media asset maintenance:
- Automated Collision Detection: When uploading a Markdown, HTML, PDF, or media file whose identifier already exists in the wiki, Qwiki detects the collision and displays an interactive resolution modal.
- Option 1: In-Place Document Replacement: Overwrites physical file contents on disk with the uploaded version while preserving the document's URL slug, parent category, custom CSS themes, read-only protection status, and public share keys.
- Option 2: Upload as Copy (Auto-Incremented Slug): Automatically increments numeric suffixes (
my-doc-1,my-doc-2) or accepts a custom slug, verifying uniqueness against both the navigation tree and physical files on disk before saving. - Direct "Replace File" Action: In the document toolbar (
btn-replace-document) and document properties modal (βοΈ Edit Details), administrators can upload a new file directly to replace the active document without deleting or recreating the navigation node.
π 18. Federated Remote Documents & Cross-Wiki Transclusion
Standalone Qwiki enables multiple independent wikis to federate and transclude documents across separate domains and instances while maintaining strict Single Source of Truth authority:
- Single Source of Truth Architecture: Link and transclude documents hosted on other Qwiki instances using public
?share=...sharelinks (type: "remote"). Remote documents are rendered natively with standard wiki typography while remaining locked against local modifications to prevent content divergence. - Machine-Readable Content Negotiation: Sharelinks support clean JSON content negotiation (
?format=jsonorAccept: application/json), serving structured document JSON (title,slug,type,description,content,origin,lastModified,readOnly: true). - Resilient Caching Engine & Offline Fallback: Real-time fetching paired with filesystem caching (
RemoteContentManager::fetchRemoteDocument), configurable cache TTL (default 1 hour), stale cache fallback with advisory warning banners when the origin wiki is unreachable, and a 1-click adminπ Refreshbutton in the document header. - Enterprise SSRF Protection:
RemoteContentManager::validateUrlSafetyguards against Server-Side Request Forgery by blocking IPv4 loopback (127.0.0.1), link-local and cloud metadata endpoints (169.254.169.254), RFC 1918 private subnets (10.0.0.0/8,172.16.0.0/12,192.168.0.0/16), local domains (.local), and unauthorized protocols. - Dynamic Relative Asset & Image URL Rewriting: Automatically rewrites relative image paths in Markdown (
) and HTML (<img src="...">) to point to the origin wiki's canonical base URL. - Provenance & Status Banners: Displays origin wiki links, live sync timestamps, and Single Source of Truth indicators directly in the reading interface.
- Unified Search Integration & Eager Cache Warming: Search indexer warms remote document caches and extracts plain text for full-text search discovery.
- Dedicated Admin UI Tab: Added
π Remote Sharelinktab to the New Document modal for 1-click document federation.
π 19. Headless HTML & Markdown Publishing API with Automated Share Keys
External automation pipelines, CI/CD runners, and reporting systems can publish self-contained dossiers, reports, and guides directly into Qwiki without manual web UI interaction:
- Headless Publishing Endpoint (
api/publish.php): Programmatically publish self-contained HTML dossiers, grower guides, and Markdown articles viaPOSTrequests authenticated withHTTP_X_API_KEY. - HTML Sanitization & Style Preservation:
Config::sanitizeHtmlsafely preserves<style>,@media print,<meta>, SVG graphics, tables, and custom styling while stripping active executable vectors (<script>, inline event handlers,javascript:,data:text/html). - Automated Cryptographic Share Key Generation: Generates 16-character cryptographic tokens and returns working
shareUrlandshareKeyimmediately upon document creation (across bothapi/publish.phpandassets/extensions/page-html/handler.php), eliminating manual web UI interactions for external pipelines. - OpenGraph & Metadata Auto-Extraction: Automatically extracts
<meta name="description">and<meta property="og:image">tags intoqwiki.jsonnode metadata.
π 20. Self-Service Password Reset & Two-Factor Authentication (2FA)
Comprehensive account security and self-service recovery engineered without external databases or third-party Composer dependencies:
- Self-Service Password Reset: Users with a verified email address can request secure password reset links directly from the login dialog.
- Stateless HMAC-SHA256 Token Design: Password reset links use mathematically signed stateless HMAC tokens that incorporate a cryptographic slice of the user's password hash. This ensures 0 disk writes during request generation and immediate, automatic invalidation once a password is changed.
- Air-Gapped & Offline Fallback: In environments without outbound email or SMTP, administrators can click
π Reset Linknext to any user in theπ₯ Usersmanagement modal to copy a 24-hour offline reset link directly to their clipboard. - Native RFC 6238 TOTP (Two-Factor Authentication): Full standard Time-Based One-Time Password support compatible with Google Authenticator, Bitwarden, 1Password, Microsoft Authenticator, and Aegis.
- Offline Client-Side QR Codes: Secret keys render as pure SVG vector graphics generated locally in the browser (
assets/js/qrcode.min.js), ensuring zero data leaks to third-party image generation APIs. - 8 Emergency Recovery Codes: Users receive eight single-use 10-character recovery codes upon enrollment. Codes are BCrypt-hashed in
users.jsonand consumed on first use. - Wiki-Wide 2FA Policies: Configurable in
βοΈ Site Settings(Optional,Required for Admins,Required for All, orDisabled). - Emergency CLI Recovery Tool: Administrators who lose access to both their authenticator device and recovery codes can instantly reset 2FA via the server terminal (
php bin/reset-2fa.php <username>). - Pure Socket Outbound SMTP Client: Standalone Qwiki includes a lightweight socket SMTP client supporting STARTTLS (port 587) and SSL (port 465) with a built-in connection testing tool and native PHP
mail()fallback.