FIXED-SURE RENTAL MANAGER — INITIAL DEPLOYMENT

This package contains:
- MySQL schema: database/install.sql
- Password-protected PHP administrator login
- One-time administrator setup
- Inventory dashboard
- Asset list
- Add/edit asset
- Barcode lookup/scanning (keyboard-emulating USB/Bluetooth scanners)
- Asset photo upload
- Initial rental product catalog in install.sql

INSTALLATION
1. Create an empty MySQL/MariaDB database and database user at your hosting provider.
2. Import database/install.sql into that database.
3. Edit public_html/config/config.php:
   db_host, db_name, db_user, db_pass, base_url.
4. FTP the CONTENTS of public_html/ into the web directory where you want the application.
   If Fixed-Sure already has a public website, do NOT overwrite it blindly. You can first
   deploy this package to a test subdirectory such as /rental-manager/.
5. Confirm HTTPS is active.
6. Visit /setup/ and create the first administrator.
   Setup automatically refuses to create another administrator once a user exists.
7. Sign in at /admin/login.php.
8. Add your first physical asset, scan/type its preprinted barcode, and upload a photo.

SECURITY
- Passwords are stored using PHP password_hash().
- Admin pages require server-side PHP sessions.
- Forms use CSRF tokens.
- Config/includes are blocked from direct web access using .htaccess.
- Uploaded PHP-like files are blocked in the equipment upload folder.
- Credit-card numbers and CVVs MUST NOT be stored here. Stripe integration should store only processor references.
- Driver-license data is included in the database design but the UI for collecting it is not included in this first admin package.

NOT YET INCLUDED
- Rental checkout/check-in transaction workflow
- Customer management UI
- Date-aware reservations
- Public live inventory storefront
- Stripe Checkout/subscriptions/webhooks
- Rental agreement/signature UI
- Camera-based barcode scanning; current scan page works with keyboard-emulating barcode scanners
- Role-management UI

Those are intended as the next application layer after confirming database connectivity and basic asset management on the host.
