PHARMAPRO FULL UPGRADE

New admin pages
- admin/design.php: front-page content, brand logo, admin logo/favicon, colours,
  font and email/webhook notification delivery.
- admin/refunds.php: review and update customer refund requests.
- admin/translations.php: MySQL language management, Google-generated private
  drafts (optional), manual editing, review and publishing. Customers see only
  published translations; English remains the source language.

Multilingual URLs and SEO
- Upload the included .htaccess file. English keeps normal URLs such as
  /home.php; active translations use clean paths such as /de/home/ and
  /fr/home/. Your Apache host must allow .htaccess rewrite
  rules (mod_rewrite / AllowOverride FileInfo).
- The first visit uses the browser or phone language when that language is
  enabled. The header has no public language selector; direct language URLs
  set the selected language instead. `/admin/` is always excluded from the
  language router and cannot be sent to the public homepage.
- Each enabled language automatically receives canonical, hreflang, Open Graph
  and page-specific SEO metadata. Edit its wording and SEO in Translations.
- The full footer is used only on index.php. Customer pages use the compact
  footer line at the bottom.

New customer page
- refund.php: customers can submit a verified refund request with their order
  number and checkout email.

Payments
- Pending customer payments now appear on the Payments page.
- Automatic payment methods support hosted checkout URLs with these variables:
  {{order_id}}, {{amount}}, {{currency}}, {{return_url}}
- Gateway API configuration is stored for each automatic method. Do not put
  a secret key in the admin panel; put it in hosting environment variables and
  enter only its variable name. Direct API charging needs a provider-specific
  adapter because gateways use different authentication and response formats.

SQL users only
- For an existing MySQL database, run database/upgrade-seo-refunds.sql once.
- Also run database/upgrade-localization.sql once before enabling translations.
- The optional Google draft generator reads GOOGLE_TRANSLATE_API_KEY from your
  hosting environment. Never enter this key in the admin panel.
- Fresh SQL installs should use database/schema.sql.

Safety
- Back up the live site and database before uploading the complete package.
- Configure email alerts only after your hosting account has PHP mail enabled.
