install_process.php

<?php
// install_process.php - Process installation

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    header('Location: install.php');
    exit;
}

// Get form data
$db_host = trim($_POST['db_host']);
$db_name = trim($_POST['db_name']);
$db_user = trim($_POST['db_user']);
$db_pass = $_POST['db_pass'] ?? '';
$app_name = trim($_POST['app_name']);
$app_url = rtrim(trim($_POST['app_url']), '/');
$admin_name = trim($_POST['admin_name']);
$admin_username = trim($_POST['admin_username']);
$admin_password = $_POST['admin_password'];
$import_demo = isset($_POST['import_demo']) ? true : false;

$errors = [];

// Validate inputs
if (empty($db_host) || empty($db_name) || empty($db_user)) {
    $errors[] = "Todos los campos de base de datos son obligatorios.";
}

if (empty($app_name) || empty($admin_name) || empty($admin_username) || empty($admin_password)) {
    $errors[] = "Todos los campos de configuración son obligatorios.";
}

if (!empty($errors)) {
    die("Errores de validación: " . implode(", ", $errors));
}

// Step 1: Test database connection
try {
    $pdo = new PDO(
        "mysql:host=$db_host;dbname=$db_name;charset=utf8mb4",
        $db_user,
        $db_pass,
        [PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION]
    );
} catch (PDOException $e) {
    die("Error de conexión a la base de datos: " . $e->getMessage() . "<br><br>Verifique que la base de datos existe y las credenciales son correctas.");
}

// Step 2: Write config file
$config_template = <<<PHP
<?php
// config/config.php

// Database Credentials
define('DB_HOST', '$db_host');
define('DB_NAME', '$db_name');
define('DB_USER', '$db_user');
define('DB_PASS', '$db_pass');
define('DB_CHARSET', 'utf8mb4');

// App Settings
define('APP_NAME', '$app_name');
define('APP_URL', '$app_url');
define('APP_VERSION', '1.0.0');

// Monetary Settings
define('CURRENCY_SYMBOL', '\$');

// PRODUCTION: Adjust error reporting
error_reporting(E_ALL);
ini_set('display_errors', 1); // Set to 0 in production
ini_set('log_errors', 1);
ini_set('error_log', __DIR__ . '/../logs/php_errors.log');

// Timezone
date_default_timezone_set('America/Mexico_City');

// Session Security
ini_set('session.cookie_httponly', 1);
ini_set('session.use_strict_mode', 1);
ini_set('session.cookie_samesite', 'Strict');
ini_set('session.use_only_cookies', 1);
ini_set('session.name', 'AGUAMAP_SESSION');

PHP;

if (!file_put_contents(__DIR__ . '/config/config.php', $config_template)) {
    die("Error al escribir el archivo de configuración. Verifique los permisos de escritura.");
}

// Step 3: Create logs directory
if (!is_dir(__DIR__ . '/logs')) {
    mkdir(__DIR__ . '/logs', 0755, true);
}

// Step 4: Run schema.sql
$schema = file_get_contents(__DIR__ . '/database/schema.sql');
if (!$schema) {
    die("No se pudo leer el archivo schema.sql");
}

// Execute SQL statements
$statements = array_filter(array_map('trim', explode(';', $schema)));
foreach ($statements as $statement) {
    if (!empty($statement) && !preg_match('/^--/', $statement)) {
        try {
            $pdo->exec($statement);
        } catch (PDOException $e) {
            // Some statements might fail if already exist
        }
    }
}

// Step 5: Create admin user
$password_hash = password_hash($admin_password, PASSWORD_DEFAULT);

try {
    // First create a default cash register
    $pdo->exec("INSERT INTO cash_registers (name, location, active) VALUES ('Caja Principal', 'Ventanilla 1', 1)");
    $cash_register_id = $pdo->lastInsertId();
    
    // Create admin user
    $stmt = $pdo->prepare("INSERT INTO users (username, password_hash, full_name, role, default_cash_register_id, active) VALUES (?, ?, ?, 'admin', ?, 1)");
    $stmt->execute([$admin_username, $password_hash, $admin_name, $cash_register_id]);
    
} catch (PDOException $e) {
    die("Error al crear usuario administrador: " . $e->getMessage());
}

// Step 6: Import demo data if requested
if ($import_demo) {
    $demo_sql = file_get_contents(__DIR__ . '/database/demo_data.sql');
    if ($demo_sql) {
        $demo_statements = array_filter(array_map('trim', explode(';', $demo_sql)));
        foreach ($demo_statements as $statement) {
            if (!empty($statement) && !preg_match('/^--/', $statement)) {
                try {
                    $pdo->exec($statement);
                } catch (PDOException $e) {
                    // Log but don't fail
                }
            }
        }
    }
}

// Step 7: Insert app name into settings
try {
    $stmt = $pdo->prepare("INSERT INTO settings (setting_key, setting_value) VALUES ('app_name', ?) ON DUPLICATE KEY UPDATE setting_value = ?");
    $stmt->execute([$app_name, $app_name]);
} catch (PDOException $e) {
    // Non-critical
}

// Success! Show completion page
?>
<!DOCTYPE html>
<html lang="es">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Instalación Completa - AguaMap</title>
    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css" rel="stylesheet">
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
    <style>
        body {
            background: linear-gradient(135deg, #11998e 0%, #38ef7d 100%);
            min-height: 100vh;
            display: flex;
            align-items: center;
            justify-content: center;
        }
        .success-card {
            background: white;
            border-radius: 20px;
            box-shadow: 0 20px 60px rgba(0,0,0,0.3);
            max-width: 600px;
            padding: 50px;
            text-align: center;
        }
        .success-icon {
            color: #38ef7d;
            font-size: 5rem;
            margin-bottom: 20px;
        }
    </style>
</head>
<body>
    <div class="success-card">
        <i class="fas fa-check-circle success-icon"></i>
        <h1 class="mb-4">¡Instalación Exitosa!</h1>
        <p class="lead mb-4">AguaMap v1.0 ha sido instalado correctamente.</p>
        
        <div class="alert alert-info text-start">
            <strong>Credenciales de acceso:</strong><br>
            <i class="fas fa-user me-2"></i>Usuario: <code><?php echo htmlspecialchars($admin_username); ?></code><br>
            <i class="fas fa-lock me-2"></i>Contraseña: <em>(la que ingresaste)</em>
        </div>
        
        <?php if ($import_demo): ?>
        <div class="alert alert-success text-start">
            <i class="fas fa-database me-2"></i>Se importaron 15 clientes de demostración exitosamente.
        </div>
        <?php endif; ?>
        
        <a href="index.php" class="btn btn-primary btn-lg mt-3">
            <i class="fas fa-sign-in-alt me-2"></i>Ir al Sistema
        </a>
        
        <hr class="my-4">
        
        <small class="text-muted">
            <i class="fas fa-exclamation-triangle me-2"></i>
            Por seguridad, elimina o renombra <code>install.php</code> y <code>install_process.php</code>
        </small>
    </div>
</body>
</html>