tomtomgames-app/README.md

🎰 TomGames Platform — Setup Guide

Files Overview

tomgames/
├── includes/
│   ├── config.php       ← ⚠️ EDIT THIS FIRST
│   ├── db.php           ← Auto-creates tables
│   ├── auth.php         ← Login/register helpers
│   └── square.php       ← Square payment API
└── public_html/
    ├── index.php        ← Main mobile app
    ├── .htaccess        ← Security rules
    ├── create_admin.php ← Run once, then DELETE
    └── api/
        ├── login.php
        ├── logout.php
        ├── register.php
        ├── me.php
        ├── purchase.php
        ├── cashout.php
        └── admin.php
    └── admin/
        ├── index.php    ← Admin dashboard
        └── login.php    ← Admin login

---

STEP 1 — Get Your Square Credentials

1. Go to https://developer.squareup.com
2. Log in with your Square merchant account
3. Click "My Apps" → "Create an App" (name it TomGames)
4. From the app dashboard, copy:
   • Application ID (starts with sq0idp-)
   • Access Token (starts with EAAAl for production)
   • Location ID (under Locations tab)

For testing first, use the Sandbox tab — keys start with sandbox-sq0idp-

---

STEP 2 — Create MySQL Database in cPanel

1. Log into cPanel → MySQL Databases
2. Create database: tomgames_db
3. Create user: tomgames_user with a strong password
4. Add user to database with ALL PRIVILEGES
5. Note your password — you'll need it in Step 3

---

STEP 3 — Edit config.php

Open includes/config.php and fill in:

define('DB_PASS', 'YOUR_DATABASE_PASSWORD');

define('SQUARE_APP_ID', 'sq0idp-YOUR_APP_ID');
define('SQUARE_ACCESS_TOKEN', 'EAAAl-YOUR_TOKEN');
define('SQUARE_LOCATION_ID', 'YOUR_LOCATION_ID');
define('SQUARE_ENV', 'production'); // or 'sandbox' for testing

define('SITE_URL', 'https://yourdomain.com');
define('ADMIN_EMAIL', 'your@email.com');

---

STEP 4 — Upload Files via FTP

FTP Details:

• Host: fiber18-r.iaasdns.com
• Username: tomgames
• Password: (your FTP password)
• Port: 21

Upload structure:

Upload includes/ folder  →  one level ABOVE public_html
Upload public_html/* content  →  INTO your server's public_html/

So your server should look like:

/home/tomgames/
├── includes/          ← outside web root (secure!)
└── public_html/
    ├── index.php
    ├── .htaccess
    ├── api/
    └── admin/

⚠️ The includes/ folder must be OUTSIDE public_html so it can't be accessed via browser.

---

STEP 5 — Create Admin Account

1. In your browser, go to: https://yourdomain.com/create_admin.php
2. Enter secret key: TomGames2024Admin
3. Enter your desired admin username and password
4. Click Create Admin
5. ✅ Immediately delete create_admin.php from your server via FTP!

---

STEP 6 — Test Everything

1. Visit https://yourdomain.com — you should see the login screen
2. Register a test user account
3. Try buying tokens (use Square sandbox first)
4. Submit a cashout request
5. Log into admin at https://yourdomain.com/admin/ and approve it

---

Payment Methods

Method	How it works
Credit/Debit Card	Square processes in real-time — tokens added immediately
Venmo	Manual — user sends payment, you verify and approve tokens via admin
Chime	Manual — same as Venmo
Cash App	Manual — same as Venmo

For Venmo/Chime/Cash App, users submit the request, you verify the payment in those apps, then go to Admin → Users → Adjust Tokens to credit them.

---

Admin Panel

URL: https://yourdomain.com/admin/

Feature	Description
Dashboard	Stats + pending cashout requests
Users	View all users, adjust tokens, suspend accounts
Cashouts	Approve or reject cashout requests
Purchases	View all purchase history

---

Security Checklist

• Change FTP password after upload
• Change GitHub password (it was shared in chat)
• Delete create_admin.php from server
• Set SQUARE_ENV to 'production' when ready
• Add your domain to Square's allowed domains in the developer dashboard
• Keep includes/ folder OUTSIDE of public_html

---

Troubleshooting

Blank page or PHP errors:

• Check that DB_PASS in config.php is correct
• Verify database name and user match what you created in cPanel

Square payment not working:

• Confirm SQUARE_APP_ID and SQUARE_LOCATION_ID match exactly
• Add your domain to Square's Web Payments SDK allowed domains
• Start with sandbox mode for testing

Can't reach admin panel:

• Make sure you ran create_admin.php and the admin was created
• Go to /admin/login.php directly

FTP upload issues:

• Make sure includes/ lands at /home/tomgames/includes/ (not inside public_html)
• Upload public_html/ contents directly INTO your server's public_html/