PKO @ 50 : deployment checklist for cPanel
==========================================

Everything in this archive goes into public_html.
Work through the five steps in order. Nothing else is needed.


STEP 1 : CREATE THE DATABASE
----------------------------
cPanel > MySQL Databases

  a. Create a database.               Suggested name: pko50
  b. Create a user with a strong password.
  c. Add the user to the database, tick ALL PRIVILEGES.

Write down the three values cPanel gives you. They are prefixed with your
account name, for example:

  database   pkouser_pko50
  user       pkouser_pko
  password   the one you just chose


STEP 2 : CREATE THE TABLES
--------------------------
cPanel > phpMyAdmin

  a. Select the database you just made in the left hand column.
  b. Import tab.
  c. Choose the file sql/schema.sql from this archive.
  d. Go.

You should end up with three tables: rsvps, submit_log, login_attempts.


STEP 3 : FILL IN THE CREDENTIALS
--------------------------------
Open includes/config.php and replace the three CHANGE_ME values on lines
9, 10 and 11 with what you noted in step 1.

  define('DB_NAME', 'pkouser_pko50');
  define('DB_USER', 'pkouser_pko');
  define('DB_PASS', 'your password');

Nothing else in that file has to change to go live.


STEP 4 : UPLOAD
---------------
cPanel > File Manager > public_html > Upload, then extract the archive there.

Check that the files sit directly in public_html and not inside an extra
folder. index.php must be at public_html/index.php.


STEP 5 : TURN ON HTTPS
----------------------
cPanel > SSL/TLS Status > Run AutoSSL.

The .htaccess file already sends http to https. If the certificate is not
issued yet and the site will not load, open .htaccess and put a # in front of
these three lines, then remove them once the certificate is active:

  RewriteCond %{HTTPS} off
  RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]


THEN TEST
---------
  Invitation   https://your-domain/
  Admin        https://your-domain/admin/

Send yourself a test answer, check it appears in the dashboard, then delete
that row with the Delete button so the guest list starts clean.


IMPORTANT, BEFORE SENDING THE INVITATIONS
-----------------------------------------
Change the admin password. It is currently birthday / Oct@08 and that pair has
been written down in a few places, so treat it as public.

See the section "Admin dashboard" in README.md for how to generate a new one.


WHAT TO ADJUST LATER
--------------------
includes/config.php   event date, enquiry numbers, timezone,
                      the automatic scroll delay, the rate limits
includes/i18n.php     every word shown on the page, French and English
assets/img/           the poster
