SMTP Configuration & Self-Service Recovery

Standalone Qwiki includes a zero-dependency pure PHP socket SMTP client (lib/Core/Mailer.php) so portals can dispatch self-service password resets and form submission alerts without sendmail or external Composer libraries.

Configuring Outbound SMTP

1. Open admin ▾ ➔ ⚙️ Settings ➔ 📧 Email (SMTP).
2. Check Enable Custom Socket SMTP Dispatch.
3. Enter your mail server settings:
   • SMTP Host (e.g., smtp.example.com)
   • Port (typically 587 for STARTTLS or 465 for SSL)
   • Encryption: TLS / STARTTLS (tls), SSL (Port 465) (ssl), or None (Plain) (none)
   • SMTP Username & SMTP Password (once saved, leaving the password blank on future edits retains the stored password)
   • Sender Email & Sender Name
4. Click 📨 Test Connection & Send Test Email to verify handshake, authentication, and delivery immediately.
5. Click Save Settings.

How Self-Service Password Reset Works

When a user clicks Forgot Password? in the login dialog and enters their username or verified email:

• Qwiki generates a stateless HMAC-SHA256 signed token—zero temporary reset files are written to disk.
• Because the signature incorporates the user's current password hash, changing the password automatically invalidates the token so reset links cannot be replayed.
• If SMTP is unavailable on an air-gapped server, admins can instead generate a 24-hour offline reset link directly inside 👥 Users.