GRAPHIC STUDIO PVT LTD — SIMPLE BUSINESS MANAGEMENT SYSTEM
Version: Starter MVP for cPanel (PHP 8.1+ / MySQL 5.7+ or MariaDB)

INCLUDED MODULES
- Admin login
- Dashboard: active projects, open leads, content awaiting approval, indicative outstanding project balances
- Clients
- Leads and follow-up dates
- Projects and deadlines
- Monthly social media content calendar / approval / publishing statuses
- Freelancer register
- Expenses
- Payments received

IMPORTANT LIMITATIONS
- This is a simple starter system, not a full accounting package or multi-user agency ERP.
- Outstanding balance shown on the dashboard is an estimate based on project quote minus the advance field. For full payment reconciliation, keep payment records and project values updated carefully.
- It does not send emails/SMS, publish social media posts, or connect to payment gateways automatically.
- It does not include client-facing logins or freelancer logins.
- Back up your database regularly. Do not store payment card details or sensitive passwords in notes.

CPANEL INSTALLATION
1. In cPanel > MySQL Database Wizard, create a database and a database user. Add the user to the database with ALL PRIVILEGES.
2. In the downloaded package, copy config.example.php to config.php.
3. Edit config.php and fill in db_name, db_user and db_pass exactly as cPanel shows them. On many cPanel accounts the database/user names include your cPanel username prefix.
4. Upload the files to a private subdomain/folder, e.g. admin.yourdomain.lk. Prefer a subdomain protected by HTTPS/SSL. Do not upload this into a public folder with unrelated site files.
5. Confirm the hosting runs PHP 8.1 or later and PDO MySQL is enabled.
6. Open https://your-subdomain/setup.php. Create an admin username (4+ characters) and a strong password (12+ characters, ideally longer and unique).
7. After setup, DELETE setup.php and schema.sql from hosting. Keep config.php private. The .htaccess blocks direct requests to configuration/schema files on Apache, but still remove setup.php and schema.sql.
8. Open https://your-subdomain/login.php and sign in.
9. Test creating one client, lead, project and content item before entering all real data.
10. Enable/verify SSL, keep PHP updated, and arrange regular database + files backups.

SECURITY NOTES
- Use HTTPS only.
- Do not share the admin password. Use a password manager.
- Restrict cPanel access and keep backups in a separate secure location.
- If the app is installed under a subfolder, protect the folder from public indexing and use a strong admin password.
- The included login has basic session-based throttling, CSRF tokens, password hashing, PDO prepared statements and output escaping. A production deployment should also add server-level rate limiting, audit logging, backup restore testing, and stricter operational monitoring.

DAILY WORKFLOW
1. Add every new prospect in Leads and set a follow-up date.
2. When a prospect confirms, add the client under Clients.
3. Add each confirmed job under Projects and set a due date/status.
4. Add each social post under Social Media Content, then update design, approval and publishing statuses.
5. Add freelancers under Freelancers and track the assigned task in the related project notes until a dedicated assignment module is added.
6. Record received payments under Payments Received and business spending under Expenses.
7. Check the dashboard each morning for due projects and follow-ups.
