Cine PE - Inscrições        release e03befb  (built 20261022)
=====================================================================

REQUIREMENTS (hosting panel)
  - PHP 8.2 or newer (8.5 is what it was tested on) with the extensions: intl, mbstring, pdo_mysql, gd
  - Apache with mod_rewrite and .htaccess allowed (AllowOverride All)
  - the existing MySQL database - there are no schema changes in this release

UPLOAD
  1. Back up the live site's files and the database.
  2. Upload and extract this archive into the application folder (use SFTP/FTPS, not plain FTP).
  3. Point the domain's DOCUMENT ROOT at the "webroot" folder (hosting panel -> domains / document root).
     If the panel does not allow that, the included root .htaccess forwards everything to webroot/, but
     the first option is strongly recommended.
  4. Create config/app_local.php (copy config/app_local.example.php) with the DB credentials and a long
     random salt, e.g.:   'Security' => ['salt' => '<output of: openssl rand -hex 32>'],
     This file is NOT in the archive on purpose. Keep it out of any public folder and never share it.
  5. Make these folders writable by the web server (permissions 775, or 777 if the host requires it):
        tmp/  tmp/cache/*  tmp/sessions/  logs/
  6. Delete any old files left from the previous version (e.g. the old src/Template, webroot/js/jquery.js).

CHECK
  - /users/login opens, an administrator can log in, /dashboard shows numbers.
  - /api/schedule returns JSON.
  - logs/error.log is empty and logs/security.log shows your login.
  - Everybody has to log in again after the upgrade (session format changed).

BEHIND A PROXY / CLOUDFLARE
  Add to config/app_local.php:  'Security' => ['trustProxy' => true, 'salt' => '...'],  so that login throttling
  and the audit log see the visitors' real IP addresses (otherwise all visitors share the proxy's address).

ROLLBACK
  Restore the files and (only if you changed data) the database backup from step 1.
