═══════════════════════════════════════════════════════════════════
  TrackPad — Tracking API + Keys   (alag system, 0 fake)
═══════════════════════════════════════════════════════════════════

YE KYA HAI
  - Tu (admin) keys generate karta hai aur users ko deta hai.
  - User apni key se login karke apne landing pages add karta hai
    (apna bot token + channel + pixel). Ek key = jitne marzi pages
    (teri set ki limit tak).
  - User apne page (HTML ya PHP, kahin bhi host) me ek <script> line
    daalta hai. Bas. Tracking chालu — 0 fake.
  - 0 fake kaise: browser sirf PageView bhejta hai. Subscribe tabhi
    jaata hai jab banda SACH ME Telegram channel join kare (webhook).
  - Landing page sirf Telegram me khulta hai, Chrome me block.

══ ADMIN SETUP (tu, ek baar) ═════════════════════════════════════
1. Pura "trackpad" folder apne server/subdomain pe upload kar
   (e.g. https://track.tera-domain.com).
2. config.php khol:
     - ADMIN_PASS : apna password daal (lamba).
     - BASE_URL   : jahan upload kiya wahi URL (no trailing slash).
3. Kholo:  BASE_URL/admin/   → login → keys generate kar.
     - Max pages: 0 = unlimited, ya number (e.g. 5).
     - Din: 30 = monthly (0 = never expire).
4. "data" folder writable ho (755/775).

══ USER SETUP (jise key di) ══════════════════════════════════════
1. Kholo:  BASE_URL/u/   → apni key se login.
2. "Naya landing page add karo":
     - Bot token (bot channel me ADMIN hona chahiye)
     - Channel ID (-100... ya @username)
     - Meta Pixel ID + CAPI token
     - (optional) public channel link
   → Create. Webhook apne aap connect ho jata hai.
3. Jo <script> line mile wo apne landing page me daal do (head/body).
4. Join button pe  data-tp-join  laga do:
       <a data-tp-join href="#">Join on Telegram</a>
   (ya koi bhi t.me link apne aap personal invite ban jata hai)
5. Bas. Stats usi dashboard pe dikhti rahegi.

══ TU (ADMIN) SAB DEKH SAKTA HAI ═════════════════════════════════
  BASE_URL/admin/  pe: har key, uske pages, kis page se kitne
  visits + joins. Kuch bhi disable / delete kar sakta hai.

NOTE: config.php me tere ADMIN_PASS hai — kisi ko mat dena.
═══════════════════════════════════════════════════════════════════

═══ v2 ADDITIONS ═════════════════════════════════════════════════
PUBLIC PAGE (browser me koi bhi khole):
  BASE_URL/            → "How to use" + "Get API key" request form.
  Jo request aaye wo tujhe  BASE_URL/admin/  pe "API requests" me
  dikhti hai (naye + done).

PER-PAGE GRAPH (support ke liye):
  admin me kisi page ke naam pe click → date-wise visits/joins graph
  + day-by-day table (last 30 din). Kis landing se kis din kitne aaye
  sab dikh jayega.

READY LANDING TEMPLATES:
  templates/gold.html  aur  templates/blue.html  — premium, mobile,
  Telegram-only. Bas <script src="..."> wali line me apna page ka
  script URL daalo (dashboard se). Join button pe pehle se
  data-tp-join laga hai.

BACKEND SECRET (safe):
  .htaccess config.php, lib.php, aur saari .json/.log/.txt files web
  se block kar deta hai. data/ folder bhi blocked. Koi real logic ya
  secret web se nahi dekh sakta. (Nginx ho to NGINX-RULES.txt dekh.)
═══════════════════════════════════════════════════════════════════

═══ v3 ADDITIONS ═════════════════════════════════════════════════
FAST — chahe 1000 ek saath aayein (NO LAG):
  Har visit/join turant ek chhote counter me gina jata hai. Dashboard
  wahi counter padhte hain — koi file-scan nahi. 10 pages ho ya 10,000
  visitors, admin/user dashboard INSTANT khulte hain.
  (Agar kabhi counter mismatch lage → admin me page khol → "Rebuild
   stats" daba, ek baar recalculate ho jayega.)

SECURITY (hack-proof):
  - Admin + user login: 6 galat tries → 15 min lock (brute-force band).
  - Har form CSRF-protected (bina token POST = 400 blocked).
  - Login pe session id regenerate, httponly+samesite+secure cookies.
  - Errors browser pe nahi dikhte (logic/secret leak nahi).
  - config.php, lib.php, data/, saari json/log web se blocked.

KEY CONTROL (poora tere paas):
  - Generate / Disable / Delete / +30 days (monthly renew) — admin me.
  - Limit: max pages per key. Expiry: monthly. Sab tere control me.

USER STATS (apni marzi ka design):
  - Har page ka read-only Stats API: /api/stats.php?p=ID&t=TOKEN
  - starter/stats.html sample — apna stats page bana lo.

STARTER FOLDER (users ke liye):
  starter/index.html → ready landing (5 jagah "CHANGE #" marked)
  starter/stats.html → optional apni stats page
  starter/README.txt → step-by-step guide
═══════════════════════════════════════════════════════════════════
