FALAKATA USHA ACADEMY SECURE PORTAL - REVIEWED BUILD

STRUCTURE
---------
/admin/dashboard.php
/admin/students/{index,create,view,edit,sections}.php
/editor/dashboard.php
/assets/admin.css
/includes/{session,auth,layout}.php
/config/database.example.php
/login.php
/logout.php
/index.php

IMPORTANT DEPLOYMENT NOTES
--------------------------
1. This package intentionally does NOT contain config/database.php, so extracting it over your
   current portal will not overwrite your working database credentials.
2. On a fresh installation, copy config/database.example.php to config/database.php and fill in
   the database values.
3. There is NO create_admin_hash.php in this reviewed build. Do not restore it after the admin
   account has been created.
4. Admin and Editor may manage student records. Only Admin sees Admin-only navigation items.
5. Sessions expire after 30 minutes of inactivity. Cookies are Secure, HttpOnly and SameSite=Lax.
6. Directory indexing is disabled and /config is denied to direct web requests.
7. Do not put production student data on ordinary shared hosting if your policy requires private
   VPS/cloud storage.

DATABASE PREREQUISITES
----------------------
The Stage 1 MariaDB schema must already exist. Ensure exactly one academic_years row is marked
is_current=1 for the current year.

Example initial data (run only if not already present):
INSERT INTO academic_years(name,start_date,end_date,is_current)
VALUES('2026-27','2026-04-01','2027-03-31',1);

Classes should already exist in the classes table.

AFTER UPLOAD
------------
- Clear browser cache / Ctrl+F5.
- Login as Admin.
- Confirm /admin/dashboard.php shows styled cards.
- Open /admin/students/index.php.
- Add ONE test student first.
- Confirm create/update entries appear in audit_logs.
- Test an Editor account if one exists.
