Existing and new accounts default to 2FA off.
Registration signs users in directly.
Users can enable it under My Account.
Administrators can manage it under Users & Staff.
Verified password-only and opted-in email-code login flows.
PHP/JavaScript checks and browser console passed.
Highlights include configurable menus, specials, cart/checkout, taxes,
customer accounts with email 2FA, newsletters, analytics, refunds,
PDF/CSV exports, Square/Mailgun adapters, and optional MySQL migration.
See README.md for setup and production configuration. Verified
PHP/JavaScript syntax, responsive layouts, registration, 2FA, checkout,
dashboard workflows, settings persistence, and PDF generation.
Real Square, Mailgun, and MySQL connections require credentials/server
access. Square implementation follows the official Payments API and
Refunds API.
Ty Clifford