# Mail templates

Included templates:

- `welcome.php`
- `verify-email.php`
- `password-reset.php`

Each template returns HTML and escapes user-controlled display names. Generate all verification and reset links on `https://instantaivirtuals.com`, store only token hashes in the database, and keep the raw token in the one-time email URL.

Do not enable mail until `.env` contains valid SMTP settings and a test message succeeds.
