first commit

backend/config.php

@@ -0,0 +1,43 @@
+<?php
+/**
+ * Flash Call OTP System — Configuration
+ * Domain: otp.intaleqapp.com
+ */
+
+// Database
+define('DB_HOST', 'localhost');
+define('DB_NAME', 'otp_db');
+define('DB_USER', 'otp_user');
+define('DB_PASS', 'STRONG_PASSWORD');
+
+// Redis
+define('REDIS_HOST', '127.0.0.1');
+define('REDIS_PORT', 6379);
+define('REDIS_PASSWORD', null); // Set if Redis requires auth
+define('REDIS_DB', 1); // Isolated DB for OTP system
+
+// Application Keys
+define('APP_KEY', 'f3a9e7c1b8d5f2a4c6e9b1d3f5a7c9e1b3d5f7a9c1e3b5d7f9a1c3e5b7d9f1');
+define('DEVICE_KEY', 'er4er4');
+
+// SMS Sender ID (for iOS SMS delivery)
+define('SMS_SENDER_ID', 'انطلق');
+
+// OTP Settings
+define('OTP_EXPIRE_SECONDS', 120);
+define('MAX_OTP_ATTEMPTS', 5);
+
+// Rate Limiting
+define('RATE_LIMIT_WINDOW', 600);   // 10 minutes in seconds
+define('RATE_LIMIT_MAX', 3);         // Max OTP requests per phone per window
+
+// Caller ID Configuration
+// Format: +96279XX{OTP} — XX = random 2 digits
+define('CALLER_ID_PREFIX', '+96279');
+
+// Logging
+define('LOG_REQUESTS', true);
+define('LOG_FILE', __DIR__ . '/logs/api.log');
+
+// Timezone
+date_default_timezone_set('Asia/Amman');