Every upload gets a direct, hotlinkable URL. Directories are sealed: no index, no listing, no traversal. Only the file answers.
PHP 8 · MySQL · installs into one folder under public_html
Accounts are created by the administrator. There is no sign-up.
Two-factor is required once paired. 5 bad attempts blocks your IP for 15 minutes.