JYNX WHATSAPP - TELEGRAM BOT (PHP + MYSQL / CPANEL)
=================================================

Included:
- Telegram webhook bot
- Main menu: Whatsapp SMS, Deposit, Profile, Help
- Manual deposits with payment reference and optional screenshot
- Admin approve/reject buttons inside Telegram
- Wallet balance and ledger credit on approval
- Admin /pending command
- PDO prepared statements and Telegram webhook secret validation

SMS SERVICE SAFETY:
This starter build does not sell disposable/temporary numbers or retrieve third-party
account verification codes. The SMS menu is a placeholder for an authorized business
messaging service using sender IDs/numbers you control and recipients who have consented.
Do not use it to bypass platform verification or account-security controls.

REQUIREMENTS:
- PHP 8.0+ (8.1+ recommended)
- cURL extension
- PDO MySQL extension
- HTTPS domain
- Telegram bot token from BotFather
- MySQL database

INSTALLATION:
1. Create a MySQL database and database user in cPanel. Grant the user ALL PRIVILEGES.
2. Upload and extract this ZIP into your public_html/jynxbot folder (or your chosen folder).
3. Import schema.sql using phpMyAdmin into the database you created.
4. Copy config.example.php to config.php.
5. Edit config.php:
   - bot_token: your Telegram bot token
   - webhook_secret: long random string, at least 32 characters
   - webhook_setup_key: separate long random browser setup key
   - admin_ids: your numeric Telegram ID(s)
   - support_username: your support Telegram username, without @
   - database host/name/user/password
6. Confirm the folder is accessible over HTTPS.
7. Browser setup (no Terminal required): open
   https://YOURDOMAIN.COM/jynxbot/set_webhook.php?key=YOUR_WEBHOOK_SETUP_KEY
   Use the exact webhook_setup_key from config.php. On success, delete
   set_webhook.php immediately using cPanel File Manager.
8. Send /start to your bot.
9. Test a small deposit request. Approve/reject it from the admin Telegram account.
10. Keep set_webhook.php deleted after successful setup.

DEPOSIT FLOW:
User sends:
AMOUNT 500 REF UPI123456

User then sends payment screenshot as a photo with caption:
PROOF UPI123456

The bot alerts admins. Admin uses Approve or Reject buttons.
Only approval credits the user's balance. Review the actual payment in your bank/UPI
account before approving; never rely only on a screenshot.

ADMIN:
- Add your numeric Telegram ID to admin_ids in config.php.
- Send /pending to see the latest 20 pending requests.
- Admin actions are restricted to configured IDs.

IMPORTANT:
- Never share config.php, bot token, database password, or webhook secret.
- Use a unique webhook secret.
- Do not expose PHP error output publicly. Check cPanel Errors / PHP error log.
- Back up the database regularly.
- This is a starter implementation; add your business terms, privacy notice, refund
  policy and any required compliance checks before taking real customer payments.
