# SIYAM FX — Login URLs & Test Accounts

Local base URL: **http://localhost/siyamfx.com** (see `APP_URL` in `config.php` / `config.local.php`).

> **Security:** These are development/QA credentials. Do not commit real production passwords to a public repository.

---

## Quick links

| Portal | URL |
|--------|-----|
| **Website (home)** | http://localhost/siyamfx.com/ |
| **Client login** | http://localhost/siyamfx.com/login.php |
| **Client dashboard** | http://localhost/siyamfx.com/dashboard.php |
| **IB login** | http://localhost/siyamfx.com/ib-login.php |
| **IB dashboard** | http://localhost/siyamfx.com/ib-dashboard.php |
| **Admin login** | http://localhost/siyamfx.com/admin/login.php |
| **Admin dashboard** | http://localhost/siyamfx.com/admin/dashboard.php |

---

## Test accounts

### Admin panel

| Field | Value |
|-------|--------|
| **Login URL** | [admin/login.php](http://localhost/siyamfx.com/admin/login.php) |
| **Email** | `admin@siyamfx.com` |
| **Username** | `admin` (either username or email works) |
| **Password** | `A0914137` |

After login → Admin dashboard, KYC, users, IB management, brand settings, etc.

**Notes**

- If `ADMIN_2FA_REQUIRED` is enabled, Super Admin may be prompted to set up 2FA on first login.
- Rate limiting applies after repeated failed attempts.

---

### Client (user portal)

| Field | Value |
|-------|--------|
| **Login URL** | [login.php](http://localhost/siyamfx.com/login.php) |
| **Email** | `user@siyamfx.com` |
| **Password** | `A0914137` |

After login → Client dashboard, deposits, trading accounts, profile, etc.

**Notes**

- Account must be **Active** and **email verified** (setup script sets both).
- If 2FA is enabled on the user, you will be sent to `2fa-verify.php`.

---

### IB (Introducing Broker)

| Field | Value |
|-------|--------|
| **Login URL** | [ib-login.php](http://localhost/siyamfx.com/ib-login.php) |
| **Email** | `Ib@siyamfx.com` |
| **Password** | `A0914137` |

Uses the same `login.php` API as the client portal, then redirects to **IB dashboard**.

**Notes**

- User must have an **Active** row in `ib_partners` (created by setup script).
- If not an approved IB, you may be redirected to `ib-apply.php`.

---

## Setup & verify (CLI)

Create or reset all three accounts to the passwords above:

```bash
php scripts/setup-qa-accounts.php
```

Verify database passwords and IB partner status:

```bash
php scripts/verify-login-access.php
```

---

## Cross-navigation

- From **admin login** → links to website, client login, IB login (footer).
- From **client login** → IB login, admin (if linked in page footer).
- From **IB login** → client login, website home.

---

## Production

Replace `localhost` with your live domain and use strong unique passwords. Remove or gitignore this file on production deployments if it contains real credentials.