# কুঞ্জবন — Phase 3 Admin Panel

## What is included
- Secure session-based admin login
- One-time admin account setup
- Dashboard statistics
- Order list/search/filter
- Order details + payment screenshot view
- Order status management
- Product CRUD
- Coupon CRUD
- Customer list
- CSRF protection on admin writes
- Password hashing with `password_hash()`
- Phase 3 MySQL migration

## Install
1. Upload the full project.
2. Import `database/kunjobon_phase2.sql`.
3. Import `database/kunjobon_phase3.sql` into the same `kunjobon` database.
4. Update `config/config.php` with real MySQL credentials.
5. Open `/admin/setup.php`.
6. Create the first admin username/password.
7. Immediately delete or rename `admin/setup.php`.
8. Login at `/admin/login.php`.

## Important
- Do not use a weak admin password.
- Keep `config/config.php` outside public web root if your hosting architecture allows it; otherwise keep server-side PHP access protected.
- Payment screenshot files are under `uploads/payments/`.
- Phase 3 product/coupon management is database-backed. The existing landing page's hardcoded product catalog still needs the Phase 3.1 catalog API integration before product edits automatically change every frontend card/price.