docs: map existing codebase

- stack.md (68 lines) - PHP/MySQL/Apache stack, vendored libraries
- architecture.md (131 lines) - Custom MVC CMS, dual-layer (front/admin)
- structure.md (170 lines) - Directory layout and conventions
- conventions.md (98 lines) - PHP snake_case, SCSS $c/$f prefixes, jQuery patterns
- testing.md (49 lines) - No automated tests detected
- integrations.md (111 lines) - Google Maps, PHPMailer, Pixieset, Facebook
- concerns.md (150 lines) - Critical security issues: hardcoded creds, MD5, unserialize
- db_schema.md (260 lines) - ~32 tables with pp_ prefix, inferred from source
- tech_changelog.md (9 lines) - Initial log entry

Co-Authored-By: Claude <noreply@anthropic.com>

.paul/codebase/stack.md

@@ -0,0 +1,91 @@
+# Technology Stack
+
+**Analysis Date:** 2026-05-05
+
+## Languages
+
+**Primary:**
+- PHP 7.4+ - All backend logic, templates, AJAX handlers
+- HTML (via PHP templates) - Page rendering, admin UI
+
+**Secondary:**
+- JavaScript / jQuery - Frontend interactivity
+- SCSS - Admin and frontend styling (compiled to CSS)
+- CSS - Compiled output + Bootstrap overrides
+
+## Runtime
+
+**Environment:**
+- PHP 7.4+ on Apache web server
+- Apache with `mod_rewrite` enabled (required for URL routing via `.htaccess`)
+- MySQL 5.7+ - Primary database
+
+**Package Manager:**
+- None — all dependencies manually vendored in `libraries/` and `plugins/` directories
+- No Composer, npm, or yarn
+
+## Frameworks
+
+**Core:**
+- Custom CMS framework (cmsPro) — no external PHP framework (no Laravel, Symfony, etc.)
+- Medoo ORM 1.x — database abstraction layer (`libraries/medoo/medoo.php`)
+- Bootstrap 4.1.3 (`libraries/bootstrap-4.1.3/`) and Bootstrap 5.0 (`libraries/bootstrap-5.0/`)
+
+**Testing:**
+- None detected — no PHPUnit, Jest, or any test runner configured
+
+**Build/Dev:**
+- Live Sass Compiler (VS Code extension) — compiles SCSS to CSS
+- No webpack, Vite, or build pipeline
+- SCSS output directive at top of files: `// out: ../style-css/style.css, compress: true`
+
+## Key Dependencies
+
+**Critical:**
+- Medoo ORM — all database operations (`libraries/medoo/medoo.php`)
+- PHPMailer — SMTP email sending (`libraries/phpmailer/class.phpmailer.php`, `class.smtp.php`)
+- jQuery 1.11.1 (admin) / 2.1.4 (login page CDN) — frontend interactivity
+- CKEditor — rich text editing in admin panel (`libraries/ckeditor/`)
+
+**Admin UI Libraries:**
+- Grid library (gdb) — data table component (`libraries/grid/`)
+- Select2 — enhanced dropdowns (`plugins/select2/`)
+- FancyBox — lightbox (`plugins/fancybox/`)
+- File Uploader — file upload UI (`plugins/fileuploader/`)
+- Swiper — carousels (`libraries/swiper/`)
+
+**Frontend Libraries:**
+- Font Awesome 6.1.1 — icons (`libraries/font-awesome-6.1.1/`)
+- Lozad — lazy image loading (`libraries/jquery/lozad.js`)
+- jsCloudimage360 — 360° image viewer (`libraries/jsCloudimage360/`)
+- Moment.js — date formatting (`libraries/framework/vendor/plugins/moment/`)
+- DateRangePicker — date inputs (`libraries/framework/vendor/plugins/daterange/`)
+
+## Configuration
+
+**Environment:**
+- No `.env` files — configuration hardcoded in `config.php`
+- `config.php` — database host, user, password, database name (credentials in plain text)
+- `admin/ip.conf` — optional IP whitelist for admin panel access
+- Global site settings stored in `pp_settings` database table
+
+**Build:**
+- `.vscode/settings.json` — VS Code Live Sass Compiler config
+- No tsconfig, no webpack.config, no vite.config
+
+## Platform Requirements
+
+**Development:**
+- Apache + PHP 7.4+ + MySQL 5.7+
+- VS Code with Live Sass Compiler extension for SCSS editing
+- FTP access configured in `.vscode/sftp.json` / `.vscode/ftp-kr.json`
+
+**Production:**
+- Shared hosting at `serwer1574995.home.pl` (inferred from `config.php`)
+- Apache `.htaccess` URL rewriting
+- No Docker, no CI/CD pipeline detected
+
+---
+
+*Stack analysis: 2026-05-05*
+*Update after major dependency changes*