Initial commit: Flutter app + PHP/MySQL backend on Hostinger

Replaces Firebase with a self-hosted PHP/MySQL API served from winded.prymsolutions.com. Includes full backend (schema, auth, events, teams, brackets, suggestions, stats, media, file upload) and updated Flutter repositories and domain models. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 20:13:57 -07:00
commit b239ae3e5f
208 changed files with 19187 additions and 0 deletions
@@ -0,0 +1,66 @@
+<?php
+require_once __DIR__ . '/database.php';
+require_once __DIR__ . '/jwt.php';
+
+// Admin emails that always get admin role regardless of DB role column.
+const ADMIN_EMAILS = ['philip@theguzmanfamily.com'];
+
+function cors(): void {
+    header('Access-Control-Allow-Origin: *');
+    header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
+    header('Access-Control-Allow-Headers: Content-Type, Authorization');
+    if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+        http_response_code(204);
+        exit;
+    }
+}
+
+function json_ok(array $data, int $code = 200): void {
+    http_response_code($code);
+    header('Content-Type: application/json');
+    echo json_encode($data);
+    exit;
+}
+
+function json_err(string $msg, int $code = 400): void {
+    http_response_code($code);
+    header('Content-Type: application/json');
+    echo json_encode(['error' => $msg]);
+    exit;
+}
+
+function require_auth(): array {
+    $h = $_SERVER['HTTP_AUTHORIZATION'] ?? '';
+    if (!str_starts_with($h, 'Bearer ')) json_err('Unauthorized', 401);
+    $payload = JWT::decode(substr($h, 7));
+    if ($payload === null) json_err('Unauthorized', 401);
+    return $payload;
+}
+
+function require_admin(): array {
+    $p = require_auth();
+    if (($p['role'] ?? '') !== 'admin') json_err('Forbidden', 403);
+    return $p;
+}
+
+function require_manager_or_admin(): array {
+    $p = require_auth();
+    $r = $p['role'] ?? '';
+    if ($r !== 'admin' && $r !== 'manager') json_err('Forbidden', 403);
+    return $p;
+}
+
+function uuid(): string {
+    $b = random_bytes(16);
+    $b[6] = chr(ord($b[6]) & 0x0f | 0x40);
+    $b[8] = chr(ord($b[8]) & 0x3f | 0x80);
+    return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($b), 4));
+}
+
+function body(): array {
+    return json_decode(file_get_contents('php://input'), true) ?? [];
+}
+
+function resolve_role(string $email, string $dbRole): string {
+    return in_array(strtolower(trim($email)), ADMIN_EMAILS) ? 'admin' : $dbRole;
+}