# SAHRI v4 — complete website and lightweight administration

## Important
This is a complete deployable code package, built from the previously delivered v3 source. The official logo artwork is retained; only its blank margins are cropped for display. The favicon is a crop of the original logo cross. Example photographs and articles are illustrative and must not be presented as real SAHRI activities.

## Existing cPanel installation
1. Back up `public_html`, the private `sahri-app` directory and the MySQL database.
2. Test this release in staging first.
3. **Keep your existing private `sahri-app/app/config.php` and users table.** Do not overwrite them.
4. Upload the contents of this package's `public_html` into your site's document root, and `sahri-app` beside it, outside the web root. Do not copy the example config over your actual config.
5. Existing v3 schema remains compatible. No database reset is needed. Import sample content only on a fresh empty database, never blindly into production.
6. Clear browser cache and verify the homepage and admin.

## Fresh installation
1. Create MySQL/MariaDB database; import `sahri-app/database/schema.sql`.
2. Copy `sahri-app/app/config.example.php` to `config.php`, set database connection and `base_url`.
3. Create your first admin user securely using a password hash generated on your server, e.g. `php -r "echo password_hash(trim(fgets(STDIN)), PASSWORD_DEFAULT), PHP_EOL;"` and insert into the users table following schema.sql. Do not use the old published temporary password from v3.
4. Open `/admin/login` and change your password if it is temporary.

## Content editing
`/admin/settings`: headings, focus areas, hero buttons, images, commitment section, contact details and social URLs. `/admin/media`: upload images and copy URL. `/admin?type=...`: articles, projects, publications, team and partners.

## Limits and verification
This is an improved lightweight PHP site, not a full CMS or a guaranteed visual clone of any other website. PHP lint checks are performed. No automated real-browser screenshots or live-server integration test have been completed in this environment. Check responsive rendering and production security before public launch.