<?php

/**

 * Application configuration — SAMPLE.

 *

 * Copy this file to `config.php` and fill in your real values:

 *

 *     cp config.sample.php config.php

 *

 * `config.php` holds secrets (database password, admin password hash) and must

 * be kept OUT of version control. This sample file is safe to commit; the real

 * `config.php` is not. On cPanel, create the DB + user in the control panel and

 * paste the credentials below.

 */

// ---- Database (PDO / MySQL) -------------------------------------------------

define('DB_HOST', 'localhost');

define('DB_NAME', 'your_database_name');

define('DB_USER', 'your_database_user');

define('DB_PASS', 'your_database_password');       // MAMP default is 'root'; change for prod

define('DB_CHARSET', 'utf8mb4');

// ---- Admin credentials (single user) ---------------------------------------

// The password is stored as a bcrypt hash, never in plaintext.

// Generate a hash with:

  // php -r "echo password_hash('your-password-here', PASSWORD_DEFAULT), PHP_EOL;"

// then paste the result below.

define('ADMIN_USER', 'admin');

// Replace the placeholder below with your own generated hash. The example value

// is NOT a working password — the app will reject logins until you set a real hash.

define('ADMIN_PASS_HASH', '$2y$12$replace_this_with_your_own_generated_bcrypt_hash_value');

// ---- Paths / routing --------------------------------------------------------

// BASE_PATH is the URL prefix the app is served under.

//   Local MAMP subfolder:  '/pgh5'

//   Production domain root: ''

define('BASE_PATH', '');

// Public origin of the site — scheme + host, no trailing slash, no BASE_PATH.

// Used to build the absolute URLs that social-share metadata requires, e.g.

// 'https://code.example.com'. Leave empty to derive it from the Host header.

define('SITE_URL', '');

// Absolute filesystem path to the uploads directory (no trailing slash).

define('UPLOAD_DIR', __DIR__ . '/uploads');

// Max upload size per file, in bytes (also bounded by php.ini upload_max_filesize).

// Also governs each individual file extracted from an uploaded zip archive.

define('MAX_FILE_SIZE', 25 * 1024 * 1024); // 25 MB

// Ceiling on the total uncompressed size of a single zip import, in bytes.

// Guards against zip bombs filling the disk during extraction.

define('MAX_ZIP_TOTAL', 200 * 1024 * 1024); // 200 MB