Memory Match – Server Documentation

🔧 Tomar Domain ar API Key

Niche domain ar key dile pura document e shob code yourdomain.com ar YOUR_API_KEY er jaygay tomar value diye jabe. Key ta browser e-i toiri hoy, kothao pathano ba save kora hoy na.

📘 Overview

Ei server tomake ei kaj gulo korte dey:

• Player tracking: app khulle chup kore server e ping jay, panel e total/active player dekha jay.
• Admin panel: login kore player ban/delete, level edit ar ad setting kora.
• Ad management: AdMob unit ID, on/off, frequency, shob panel theke, app update lagbe na.
• 100 level: prottek level-er card, timer ar coin reward bodlano jay.

Lagbe: PHP 8.1+ (PDO MySQL), MySQL 5.7+ / MariaDB 10.3+, Apache hosting (cPanel e hoy), HTTPS (SSL).

📁 File list

🚀 Setup (A to Z)

define('DB_HOST', 'localhost');
define('DB_NAME', 'tomar_database');
define('DB_USER', 'tomar_user');
define('DB_PASS', 'tomar_password');
define('API_KEY', 'YOUR_API_KEY');

🔑 API Key kibhabe nebe

API key kono company deyna, tumi nijei banao. Eta ekta lomba random password, jeta diye shudhu tomar app server er sathe kotha bolte pare. Tin vabe banano jay:

1. Uporer "Generate API Key" button: 48 character-er shokto key toiri hoy.
2. Terminal/SSH e:

   php -r "echo bin2hex(random_bytes(24));"

   ba

   openssl rand -hex 24

3. Nijer moto lomba (30+ character) random lekha.

Config file diye (purono upay): duita jayga e hubohu ek key

1) Server: config.php

define('API_KEY', 'YOUR_API_KEY');

2) Flutter app: lib/api_service.dart

static const baseUrl = 'https://yourdomain.com/api';
static const apiKey  = 'YOUR_API_KEY';

👤 Admin account toiri

Way 1: install.php (sohoj)

https://yourdomain.com/install.php → username + password (min 10 character) → Create. Tarpor file ta delete koro. Admin age theke thakle eta 403 dey.

Way 2: SQL diye

Prothome nijer password-er hash banao (server e ba PHP ache emon jekono jaygay):

php -r "echo password_hash('NijerPassword#2026', PASSWORD_DEFAULT);"

Tarpor phpMyAdmin → SQL tab e:

INSERT INTO admins (username, password_hash)
VALUES ('admin', 'PASTE_HASH_HERE');

Password bhule gele

UPDATE admins SET password_hash = 'PASTE_NEW_HASH' WHERE username = 'admin';
DELETE FROM login_attempts;   -- lockout shoriye dey

🖥️ Admin panel guide

Login 30 minute kichu na korle auto logout hoy. 5 bar vul password dile 15 minute er jonno lock hoy.

💰 Ad management

AdMob unit ID kothay pabe

1. admob.google.com e account khulo → Apps → Add app (tomar app ta add koro).
2. App er bhitore Ad units → Banner, Interstitial, Rewarded, tin ta alada alada toiri koro.
3. Prottek ad unit er ID dekhte ei rokom: ca-app-pub-1234567890123456/1234567890.

Panel e boshano (Ads page)

🎮 Levels (1-100)

Levels page e prottek level-er 3 ta jinis edit kora jay, tarpor Save all levels chapo:

• Cards: 4 theke 24, shob shomoy jor shonkha (even).
• Time: second. 0 mane timer nai. Timer dile 10-600.
• Reward: level jitle base coin (app e star bonus ar bachano time bonus alada jog hoy).

Default: Level 1 = 4 card, Level 2 = 12, Level 3-9 = 16, Level 10-29 = 20, Level 30+ = 24 card. Vul value dile ager value-i thake.

🔌 API reference

Base URL: https://yourdomain.com/api. Shob request e header: Authorization: Bearer YOUR_API_KEY. Response shob shomoy JSON: {"status":"ok",...} ba {"status":"error","message":"..."}.

POST /register.php – player ping

curl -X POST https://yourdomain.com/api/register.php \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"device_id":"a1b2c3d4e5f6a7b8","name":"Player-123","model":"Pixel 7","app_version":"1.0.0"}'

Success: {"status":"ok","banned":false}. Ekoi device_id abar ping dile notun player hoy na, last_seen ar open_count update hoy.

GET /config.php – ad + level setting

curl https://yourdomain.com/api/config.php \
  -H "Authorization: Bearer YOUR_API_KEY"

Response e ads (enabled, test_mode, banner, interstitial, rewarded, interstitial_every, extra_seconds, extra_coin_cost, units.android/ios) ar levels list (l level, c cards, t time, r reward) thake.

Error code

🧪 API tester

Uporer domain ar key diye server thik moto chalche kina check koro. Register test e "Docs-Test" namer ekta player toiri hobe, Players page theke delete kore dio.

Result ekhane ashbe…

📱 Flutter app connect

static const baseUrl = 'https://yourdomain.com/api';
static const apiKey  = 'YOUR_API_KEY';

🛡️ Security checklist

• ✅ HTTPS (SSL) chalu rakho (cPanel → SSL/TLS Status / AutoSSL).
• ✅ install.php delete koro.
• ✅ Admin password onek lomba ar unique rakho, ager shared password bodle nao.
• ✅ API key lomba random, config.php kokhono public kore dio na.
• ✅ Niyomito database backup nao (cPanel → Backup ba phpMyAdmin Export).
• ✅ Server er PHP version update rakho (8.1+).
• ✅ Chaile docs.html setup sesh hole delete koro. Eta secret rakhe na, tobe tomar server er structure dekhay.

Already ache: SQL injection protection, CSRF token, secure session cookie, login lockout, API rate limit, input validation, security header.

🩺 Troubleshooting