PART B – PHP Website (CCMS)

This folder contains a PHP-based website connected to the CCMS database
created in Part A. The website demonstrates dynamic content, CRUD operations,
search functionality, and SQL Injection prevention.

How to run the website:
1. Copy the "website" folder into:
   UniServerZ/www/
   (or equivalent local web server directory)

2. Start Apache and MySQL using UniServerZ.

3. Open a browser and go to:
   http://localhost/website/

Database setup:
- The website uses the same database created in Part A (ccms_db).
- Make sure CCMS.sql has been executed before running the website.

Database connection configuration:
- Database connection settings are located in:
  website/db.php

- MySQL configurations vary between systems:
  • Some systems use the root user with NO password.
  • Other systems require a root password.

- If the website cannot connect to the database:
  Open db.php and set the root password according to your local MySQL setup.
  Example:
    $user = "root";
    $pass = "";      // leave empty if root has no password
    // or
    $pass = "your_root_password";

Admin login (demonstration account):
Username: admin
Password: admin123

This account allows access to:
- Add, edit, and delete clubs
- Manage events
- Test CRUD functionality

Security notes:
- Prepared statements are used throughout the application.
- SQL Injection attempts are blocked.
- Login and security behaviour are demonstrated in the report screenshots.

This website is for academic demonstration purposes only.
