# TripTale v0.1

Mobile-first travel companion for PHP/MySQL hosting such as 1&1/IONOS or STRATO.

This is the initial technical foundation:
- standalone PHP application
- configurable table prefix
- installer foundation
- MySQL schema
- German/English language-file structure
- protected configuration/storage structure

This version is intentionally a foundation, not the finished application.

## Installation concept

1. Upload the TripTale folder to the webspace.
2. Open `/install/`.
3. Enter MySQL credentials and a table prefix such as `travel_1_`.
4. Create the Main Admin account.
5. The installer creates the database tables.
6. The installation lock prevents a second installation.

## Security principles

- passwords are stored only as password hashes
- magic-link tokens are stored hashed
- CSRF protection will be used for state-changing forms
- prepared PDO statements will be used for database access
- sessions will use secure cookie settings
- upload validation will be enforced server-side
- installation will be locked after completion

## Current scope

Database and installation foundation only. The application modules will be implemented incrementally and tested after each stage.
