PANDAMART COMPLETE — INFINITYFREE DEPLOYMENT
============================================

IMPORTANT: This ZIP contains the PROJECT FILES at its root. Upload the CONTENTS directly
into your domain's htdocs/public_html folder. Do not create another pandamart_work2 folder.

1) CREATE DATABASE
------------------
Create the MySQL database in the InfinityFree control panel. Open phpMyAdmin for that exact
account/database.

2) CONFIGURE DATABASE
---------------------
Edit config/config.php and replace:

DB_HOST = the exact MySQL hostname shown by InfinityFree
DB_PORT = leave empty unless the host explicitly provides a port
DB_NAME = your full database name
DB_USER = your full database username
DB_PASS = your database password

Do NOT use localhost/127.0.0.1 unless InfinityFree explicitly tells you to.

3) FRESH INSTALL
----------------
Import sql/pandamart.sql into the selected database.
The SQL file does NOT contain CREATE DATABASE or USE commands.

4) EXISTING PANDAMART
---------------------
BACK UP YOUR DATABASE FIRST.
Upload the project files, then sign in as an administrator and open:
/admin/upgrade.php
Run the Safe PandaMart Upgrade.

The updater checks for existing columns/tables before creating them and does not drop
customer/order data. It avoids stored procedures/delimiters so it is suitable for
phpMyAdmin/shared hosting.

5) ADMIN INSTALL
-----------------
For a brand-new database, open /admin/install.php and create the administrator account.
After successful installation, DELETE admin/install.php.

For an existing installation, prefer /admin/upgrade.php and keep your existing admin users.

6) BANNERS
----------
Admin → Homepage Banners
- Maximum 4 banner records total.
- Add/edit/delete/enable/disable.
- Upload JPG/PNG/WEBP/GIF.
- Banner appears before the homepage hero content.
- Button URL supports internal paths or safe http/https URLs.

7) PARTNERS
-----------
Admin → Partners
- Add/edit/delete/enable/disable.
- Upload partner logo.
- Add safe http/https website URL.
- Logos appear in the storefront footer.
- Clicking a logo opens the configured partner website in a new tab.

8) VERIFIED REVIEWS
-------------------
Only a logged-in user with an eligible Delivered/Completed PandaMart order containing the
product can submit a review. Admin/editor accounts cannot create customer reviews.
The backend checks customer ID + order ID + product ID + order status and blocks duplicates.

9) FRAUD CONTROL
----------------
Orders receive an internal risk score based on signals such as repeated IP/phone/email/
address activity, high order value and previous cancellations. High-risk orders receive a
manual_required verification state for admin review. The system does not automatically
reject genuine customers solely from one signal.

10) EMAIL
---------
PandaMart stores customer/admin messages even if PHP mail() is unavailable. The admin can
see whether mail() reported success. InfinityFree may restrict outgoing mail; reliable
transactional email may require an external SMTP service if permitted by the host.

11) SECURITY
------------
Keep config/config.php private. Do not upload database credentials publicly. Do not keep
admin/install.php after installation. Back up the database before migrations.

12) SEO
-------
Product SEO title/description can be managed in Admin → Products. Product pages include
canonical/description/Open Graph metadata and verified-review structured data. Dynamic
sitemap is available at /sitemap.php.
