SCANZAA SECURITY-PATCHED DEPLOYMENT PACKAGE
===========================================

This package contains the complete patched public_html tree plus the required database migration.

DEPLOYMENT
----------
1. Back up the current website files and database.
2. Upload/extract the CONTENTS of the public_html folder over the live public_html folder, replacing existing files.
3. Delete the obsolete files listed below from the live server if they still exist (the patched package intentionally omits them):
   admin/1.php
   admin/test.php
   admin/modules/administrators/1administrators.php
   admin/modules/ajax/profile.php
   admin/modules/codes/codes1.php
   admin/modules/codes/scan.php
   admin/modules/myservices/old/
   includes/1.php
   includes/1db.class.php
4. Import scanzaa_security_group_prev_migration.sql into the existing Scanzaa database ONCE.
5. Configure the required server environment variables from SECURE_ENVIRONMENT.example.
   At minimum, SCANZAA_DB_USER and SCANZAA_DB_PASSWORD must be set or the application intentionally refuses to connect.
6. Rotate the previous database password and the old Modash cookie because both existed in the old source code.
7. Log in again. Existing administrator sessions are intentionally invalidated by the migration/security changes.

IMPORTANT
---------
Do NOT import scanzaa_security_group_prev_migration.sql repeatedly.
Do NOT restore the removed legacy PHP files after deployment; several were duplicate/insecure entry points.
Do NOT put real passwords/tokens into SECURE_ENVIRONMENT.example and publish it.

VALIDATION PERFORMED
--------------------
All PHP files in this package were checked with `php -l` and returned no syntax errors.
