v1.3.0 — Referrals, Password Reset, French i18n & Marketing Kit

🎯 New Features

• Referrals system — personal /?ref= links with anti-abuse caps (5/day, 50 lifetime)
• Password reset flow — signed tokens, 1h single-use, auto-login on success
• Marketing kit (/promote.php) — 12 ready-to-share templates × 6 platforms with direct share buttons
• Welcome email sent on registration
• French i18n scaffolding — 60+ strings, cascade fallback to English (community contribution by @sibylassana95 🇸🇳)

🛡️ Security & Hardening

• Admin panel: bcrypt password hashing, idle timeout, audit log, email notifications
• Proxy-aware HTTPS detection (fixes Hostinger CDN redirect loop)
• Dynamic OG image replacing static og.png
• PWA install banner re-shows after 14 days

⚡ Performance

• LIVE_CACHE_TTL 60→120s (halves API-Football consumption)
• Visitor counter DB-backed (survives file uploads)
• Instant lineup display — no more time-gate
• Auto-hashtags on social share (#WeAre26 #FIFAWorldCup26)

🐛 Fixes

• Countdown matches homepage timer exactly (floor vs ceil)

🗄️ Database

3 new lazy-created tables: referrals, password_resets, site_counters

---

Full changelog: v1.0.0...v1.3.0

v1.0.0 — World Cup 2026 Companion

🎉 First public release of World Cup 2026 Companion — an open-source, bilingual (Arabic/English) companion site for the FIFA World Cup 2026.

✨ Highlights

• 📊 Matches & standings — fixtures, live-style scores, group tables, knockout bracket
• 🎯 Predictions game — predict scores, earn points, climb a global leaderboard (no login required)
• 👥 Private leagues — create a league, share a code, compete with friends & family
• 🗳️ Quick 1X2 polls, stickers album, daily trivia
• 🤖 AI match previews (Arabic, dialect-aware) via Claude — optional
• 📰 News, stadium & host-city map, fan guide
• 📱 Installable PWA with full offline mode
• 🌍 Fully bilingual (Arabic/English) with RTL/LTR, SEO & sitemap

🧱 Tech

• Plain PHP 8 — no framework, no build step, no Composer
• No database required — runs on the public-domain openfootball dataset + disk cache (MySQL optional, accounts only)
• Vanilla JS + a single CSS file; runs on any PHP host
• One command with Docker: docker compose up
• Public, CORS-enabled, key-free JSON API — see docs/API.md

🚀 Get started

git clone https://github.com/salah23222/worldcup2026.git
cd worldcup2026
docker compose up        # → http://localhost:8080

🔗 Links

• 🌐 Live demo: https://wcup2026.org
• 📘 API reference: docs/API.md
• 📄 License: MIT

⭐ If you find it useful, a star really helps!