# Exams.fit 3.1 prompt coverage

This release is a lightweight custom PHP 8.2/MySQL application for the root of `https://exams.fit/`. It uses no external content API, framework, Composer, Node runtime or paid service.

## Import and automation

- Universal ZIP validation, database-aware preview, create/update/skip/replace modes, import logs, quality scoring, checksums, MIME/rights checks and one-time package rollback.
- Importable content, categories, homepage sections, menus, redirects, feeds, SEO settings, images and owned/licensed PDFs.
- Template center covering school, college, exam, notes, practice, PDF, video, news, admissions, jobs, profiles, a dedicated Study Blog and safe declarative Student Tools; includes AI instructions and validated bulk example packages.
- Admin System Updater for trusted versioned core ZIPs with compatibility/checksum/path preflight, protected data paths, automatic SQL and file backups, maintenance mode, additive migrations, health checks, audit history and file rollback.
- Safe add-on ZIP lifecycle with manifest/version/core checks, enable/disable, updates, rollback, uninstall, template downloads and reversible migrations.
- Feed fetcher with HTTPS host allowlist, public-IP checks, no redirects, timeout/size limits, attribution, health logs and noindex-by-default feed pages.
- Tokenized, overlap-locked cron jobs for scheduled publishing, import queue, feeds, sitemap state, cache, analytics aggregation/retention, links, feed health, backups, optimization and freshness reports.

## Study experience

- Responsive light/dark/sepia design; text sizing, contrast, line spacing, reading width, focus mode, reading progress, estimated reading time, table of contents and browser read-aloud.
- Server-scored timed practice for single/multiple choice, true/false, fill-blank, matching and passage questions; randomization, navigation, review marks, topic score, explanations and retry incorrect. Correct answers are withheld until submission.
- Local bundled PDF.js viewer with page controls, thumbnails, zoom, rotate, full screen, search, saved page and permission-controlled print/download.
- Privacy-enhanced, click-to-load YouTube player with playlist support, theater mode, duration, chapters, transcript and study notes.
- PWA manifest/service worker, install prompt, offline fallback and explicit offline lesson saves. Reading and practice progress remain in the browser without student accounts.

## Search, trust and revenue controls

- Server-rendered permanent URLs, titles/descriptions, canonical/noindex controls, breadcrumbs, Article/BlogPosting/FAQ/SoftwareApplication/Course/Quiz/Question/VideoObject/WebSite/Organization JSON-LD, separate blog/all-content RSS and 15 segmented XML sitemap groups including blog, tools and images.
- Google/Bing verification settings, robots.txt and ads.txt endpoints, redirects, metadata diagnostics and Search Console documentation. No crawl/index/ranking guarantee is made.
- Global, slot, category, content-type, exact-page, device and scheduled ad targeting; per-page ad-free override; ads globally disabled by default.
- About, editorial, privacy and contact pages; author/reviewer and review dates; primary source links; reader correction/copyright/accessibility reports; thin/orphan/duplicate/missing-metadata and broken-link reports.
- Privacy-conscious first-party analytics for page views, sessions, engagement, scroll, searches, practice, video, PDF and downloads with 7/30/90-day dashboards and retention control.

## Operations and security

- Browser installer with PHP extension/writability checks, exact domain guard, empty-database guard, cPanel-prefixed credential support and automatic installer lock.
- CSRF-protected admin actions, hardened sessions, login throttling, prepared statements, output escaping, HTML allowlisting, upload path/MIME validation, protected private directories, security headers, audit logs, SQL backups and guarded v2→v3 migration.
- cPanel root installation, cron, Search Console, import, backup/upgrade and database-error documentation are included in `docs/`.

Content quality, legal rights, consent configuration, search indexing, AdSense acceptance and ad revenue remain the site owner's responsibility; no software can guarantee them or make the risk literally zero.
