MEGASHOP-TR BOX — 0.16.0

SELF-HOSTED PHP MARKETPLACE
This is a new clean installation, not a copy of the owner's running shop.
No customer database, administrator password or payment credentials are included.
Commercial offering: USD 80, perpetual use by one company on one canonical domain (including www).
Updates, services and support entitlement are supplied by the seller separately.

REQUIREMENTS
PHP 8.2+, PDO with pdo_mysql/MariaDB or pdo_sqlite, sessions, OpenSSL, Sodium.
HTTPS and a domain are needed for production and bank callbacks.
Use a private storage directory outside public_html, writable by this site's PHP user.
No Composer or Node.js is required for the installed PHP application.

INSTALL
1. Create a separate hosting account and empty site. Extract this ZIP into its public_html.
2. Keep the installer private until setup is completed. In Nginx add the persistent
   location ^~ /app/ { return 404; } rule from nginx-audit.conf.example.
   Do this in a persistent Hestia custom template, not a generated vhost.
   Apache rules are included in .htaccess and app/.htaccess. They do not configure Nginx.
3. Open license.php. It displays your domain and installation ID.
4. Obtain your signed TRZ1 key from the software provider for your company and domain.
   The key may additionally be bound to the installation ID.
5. Activate the key. Continue to install.php and set YOUR administrator email/password and database.
6. Replace demo products/images, branding, canonical URL, contact and legal text with your own.
   Original operator identity is removed; indexing starts disabled until you enable it in SEO settings.
7. Connect your own delivery services and activated payment merchants. No real payments are configured in this box.

LICENSING
The key is verified locally with the included Ed25519 public key. No issuer private key is distributed.
Perpetual licences have expiresAt=null; timed licences have an explicit ISO expiry.
Installed-site activation is administrator-only with session authentication and CSRF protection.
The licence and installation ID are stored outside webroot. Do not publish your token.
After expiry, new orders and catalogue/admin content changes are paused. Existing data,
owner activation, login/password-change workflows, export/backup, existing-order fulfilment
and signed payment callbacks remain available. Expiry never deletes your database.
An offline licence cannot be instantly revoked without an additional online validation policy.
Source code is provided and can be modified by the server owner; this is not unbreakable DRM.

ANDROID
The APK for megashop-tr.com is intentionally excluded. An Android application for your
own domain is a separate branded build, not included in this generic self-hosted box.

UPDATES
Use licensed box updates from your provider. Back up files, private storage and database first.
Do not replace app/config.php, private licence storage, uploaded files or the database.
The original application's older unlicensed update ZIPs are not updates for this fork.

LANGUAGES AND SCOPE
Storefront and account interfaces support Ukrainian, Russian and English.
Initial commercial model is Ukraine/UAH; country, currency and tax localisation for
other markets require separate work. Seed products and supplier images are examples.
See INSTALL.md for the underlying marketplace's deployment and integration instructions.
