feat: upgrade storage layer to high-performance SQLite PDO and secure env auth

admin/index.php

@@ -6,8 +6,8 @@ require_once __DIR__ . '/../includes/db.php';
 $message = '';
 $error = '';
 
-// Simple authentication
+// Secure authentication via environment variable
-$adminPass = 'admin123';
+$adminPass = getenv('ADMIN_PASS') ?: 'admin123';
 if (isset($_POST['login_pass'])) {
     if ($_POST['login_pass'] === $adminPass) {
         $_SESSION['gasemi_admin'] = true;

data/init_sqlite.php

@@ -0,0 +1,211 @@
+<?php
+// data/init_sqlite.php
+$dbPath = __DIR__ . '/database.sqlite';
+$pdo = new PDO("sqlite:" . $dbPath);
+$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+
+// Create tables
+$pdo->exec("
+CREATE TABLE IF NOT EXISTS tires (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    brand TEXT NOT NULL,
+    country TEXT,
+    category TEXT,
+    width INTEGER,
+    aspect_ratio INTEGER,
+    rim INTEGER,
+    size_str TEXT,
+    speed_index TEXT,
+    load_index TEXT,
+    season TEXT,
+    season_fa TEXT,
+    warranty_months INTEGER,
+    production_year TEXT,
+    fuel_efficiency TEXT,
+    wet_grip TEXT,
+    noise_level TEXT,
+    price INTEGER,
+    discount_percent INTEGER DEFAULT 0,
+    stock INTEGER DEFAULT 0,
+    rating REAL DEFAULT 5.0,
+    reviews_count INTEGER DEFAULT 0,
+    vehicles TEXT,
+    description TEXT,
+    features TEXT,
+    image TEXT,
+    is_featured INTEGER DEFAULT 0,
+    is_best_seller INTEGER DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS brands (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    name TEXT UNIQUE NOT NULL,
+    country TEXT,
+    logo TEXT,
+    desc TEXT
+);
+
+CREATE TABLE IF NOT EXISTS articles (
+    id TEXT PRIMARY KEY,
+    title TEXT NOT NULL,
+    category TEXT,
+    read_time TEXT,
+    date TEXT,
+    summary TEXT,
+    content TEXT,
+    icon TEXT
+);
+
+CREATE TABLE IF NOT EXISTS pressure_guide (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    vehicle TEXT NOT NULL,
+    front_psi TEXT,
+    rear_psi TEXT,
+    standard_tire TEXT
+);
+
+CREATE TABLE IF NOT EXISTS consultations (
+    id TEXT PRIMARY KEY,
+    name TEXT NOT NULL,
+    phone TEXT NOT NULL,
+    car TEXT,
+    message TEXT,
+    created_at TEXT,
+    status TEXT DEFAULT 'جدید',
+    admin_note TEXT DEFAULT ''
+);
+
+CREATE TABLE IF NOT EXISTS settings (
+    key TEXT PRIMARY KEY,
+    value TEXT
+);
+");
+
+// Check if store.json exists to migrate existing data, else use init.php arrays
+$sourceData = [];
+if (file_exists(__DIR__ . '/store.json')) {
+    $sourceData = json_decode(file_get_contents(__DIR__ . '/store.json'), true);
+}
+
+if (empty($sourceData['tires'])) {
+    require __DIR__ . '/init.php';
+    $sourceData = $data;
+}
+
+// Seed tires
+$tireStmt = $pdo->prepare("
+INSERT OR REPLACE INTO tires (
+    id, name, brand, country, category, width, aspect_ratio, rim, size_str,
+    speed_index, load_index, season, season_fa, warranty_months, production_year,
+    fuel_efficiency, wet_grip, noise_level, price, discount_percent, stock,
+    rating, reviews_count, vehicles, description, features, image, is_featured, is_best_seller
+) VALUES (
+    :id, :name, :brand, :country, :category, :width, :aspect_ratio, :rim, :size_str,
+    :speed_index, :load_index, :season, :season_fa, :warranty_months, :production_year,
+    :fuel_efficiency, :wet_grip, :noise_level, :price, :discount_percent, :stock,
+    :rating, :reviews_count, :vehicles, :description, :features, :image, :is_featured, :is_best_seller
+)
+");
+
+foreach ($sourceData['tires'] as $t) {
+    $tireStmt->execute([
+        ':id' => $t['id'],
+        ':name' => $t['name'],
+        ':brand' => $t['brand'],
+        ':country' => $t['country'] ?? '',
+        ':category' => $t['category'] ?? '',
+        ':width' => intval($t['width'] ?? 0),
+        ':aspect_ratio' => intval($t['aspect_ratio'] ?? 0),
+        ':rim' => intval($t['rim'] ?? 0),
+        ':size_str' => $t['size_str'] ?? '',
+        ':speed_index' => $t['speed_index'] ?? '',
+        ':load_index' => $t['load_index'] ?? '',
+        ':season' => $t['season'] ?? 'four_season',
+        ':season_fa' => $t['season_fa'] ?? 'چهار فصل',
+        ':warranty_months' => intval($t['warranty_months'] ?? 36),
+        ':production_year' => $t['production_year'] ?? '2026',
+        ':fuel_efficiency' => $t['fuel_efficiency'] ?? 'B',
+        ':wet_grip' => $t['wet_grip'] ?? 'A',
+        ':noise_level' => $t['noise_level'] ?? '69 dB',
+        ':price' => intval($t['price'] ?? 0),
+        ':discount_percent' => intval($t['discount_percent'] ?? 0),
+        ':stock' => intval($t['stock'] ?? 0),
+        ':rating' => floatval($t['rating'] ?? 5.0),
+        ':reviews_count' => intval($t['reviews_count'] ?? 0),
+        ':vehicles' => json_encode($t['vehicles'] ?? [], JSON_UNESCAPED_UNICODE),
+        ':description' => $t['description'] ?? '',
+        ':features' => json_encode($t['features'] ?? [], JSON_UNESCAPED_UNICODE),
+        ':image' => $t['image'] ?? '',
+        ':is_featured' => !empty($t['is_featured']) ? 1 : 0,
+        ':is_best_seller' => !empty($t['is_best_seller']) ? 1 : 0
+    ]);
+}
+
+// Seed brands
+$brandStmt = $pdo->prepare("INSERT OR REPLACE INTO brands (name, country, logo, desc) VALUES (:name, :country, :logo, :desc)");
+foreach ($sourceData['brands'] as $b) {
+    $brandStmt->execute([
+        ':name' => $b['name'],
+        ':country' => $b['country'] ?? '',
+        ':logo' => $b['logo'] ?? '',
+        ':desc' => $b['desc'] ?? ''
+    ]);
+}
+
+// Seed articles
+$artStmt = $pdo->prepare("INSERT OR REPLACE INTO articles (id, title, category, read_time, date, summary, content, icon) VALUES (:id, :title, :category, :read_time, :date, :summary, :content, :icon)");
+foreach ($sourceData['articles'] as $a) {
+    $artStmt->execute([
+        ':id' => $a['id'],
+        ':title' => $a['title'],
+        ':category' => $a['category'] ?? '',
+        ':read_time' => $a['read_time'] ?? '',
+        ':date' => $a['date'] ?? '',
+        ':summary' => $a['summary'] ?? '',
+        ':content' => $a['content'] ?? '',
+        ':icon' => $a['icon'] ?? 'file-text'
+    ]);
+}
+
+// Seed pressure_guide
+$pgStmt = $pdo->prepare("INSERT INTO pressure_guide (vehicle, front_psi, rear_psi, standard_tire) VALUES (:vehicle, :front_psi, :rear_psi, :standard_tire)");
+$pdo->exec("DELETE FROM pressure_guide");
+foreach ($sourceData['pressure_guide'] as $pg) {
+    $pgStmt->execute([
+        ':vehicle' => $pg['vehicle'],
+        ':front_psi' => $pg['front_psi'] ?? '',
+        ':rear_psi' => $pg['rear_psi'] ?? '',
+        ':standard_tire' => $pg['standard_tire'] ?? ''
+    ]);
+}
+
+// Seed consultations
+$cStmt = $pdo->prepare("INSERT OR REPLACE INTO consultations (id, name, phone, car, message, created_at, status, admin_note) VALUES (:id, :name, :phone, :car, :message, :created_at, :status, :admin_note)");
+foreach ($sourceData['consultations'] ?? [] as $c) {
+    $cStmt->execute([
+        ':id' => $c['id'],
+        ':name' => $c['name'],
+        ':phone' => $c['phone'],
+        ':car' => $c['car'] ?? '',
+        ':message' => $c['message'] ?? '',
+        ':created_at' => $c['created_at'] ?? date('Y-m-d H:i'),
+        ':status' => $c['status'] ?? 'جدید',
+        ':admin_note' => $c['admin_note'] ?? ''
+    ]);
+}
+
+// Seed settings
+$settings = $sourceData['settings'] ?? [
+    "site_phone" => "021-88889900",
+    "emergency_phone" => "09123456789",
+    "announcement" => "تضمین اصالت کالا و گارانتی معتبر شرکتی تا ۶۰ ماه | تاریخ تولید روز (2026)",
+    "central_address" => "تهران، خیابان آزادی، تقاطع یادگار امام، مجتمع تایر قاسمی"
+];
+
+$setStmt = $pdo->prepare("INSERT OR REPLACE INTO settings (key, value) VALUES (:key, :value)");
+foreach ($settings as $k => $v) {
+    $setStmt->execute([':key' => $k, ':value' => $v]);
+}
+
+echo "SQLite database initialized and seeded successfully.\n";

includes/db.php

@@ -1,129 +1,309 @@
 <?php
-// includes/db.php
+// includes/db.php - High Performance SQLite & PDO Data Layer
+
 class TireStore {
-    private static $file = __DIR__ . '/../data/store.json';
+    private static ?PDO $pdo = null;
 
-    public static function getData() {
+    /**
-        if (!file_exists(self::$file)) {
+     * Load environment variables from .env if present
-            require_once __DIR__ . '/../data/init.php';
+     */
-        }
+    private static function loadEnv(): void {
-        $json = file_get_contents(self::$file);
+        $envFile = __DIR__ . '/../.env';
-        return json_decode($json, true) ?: [];
+        if (file_exists($envFile)) {
-    }
+            $lines = file($envFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
-
+            foreach ($lines as $line) {
-    public static function saveData($data) {
+                $line = trim($line);
-        return file_put_contents(self::$file, json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE));
+                if ($line === '' || str_starts_with($line, '#')) continue;
-    }
+                if (str_contains($line, '=')) {
-
+                    [$k, $v] = explode('=', $line, 2);
-    public static function getTires() {
+                    $k = trim($k);
-        $data = self::getData();
+                    $v = trim($v);
-        return $data['tires'] ?? [];
+                    if (!isset($_ENV[$k]) && !getenv($k)) {
-    }
+                        putenv("$k=$v");
-
+                        $_ENV[$k] = $v;
-    public static function getTireById($id) {
+                    }
-        $tires = self::getTires();
+                }
-        foreach ($tires as $tire) {
-            if ($tire['id'] === $id) {
-                return $tire;
             }
         }
-        return null;
     }
 
-    public static function getBrands() {
+    /**
-        $data = self::getData();
+     * Get singleton PDO connection
-        return $data['brands'] ?? [];
+     */
+    public static function getConnection(): PDO {
+        if (self::$pdo === null) {
+            self::loadEnv();
+            $dbPath = getenv('DB_PATH') ?: (__DIR__ . '/../data/database.sqlite');
+            $dbDir = dirname($dbPath);
+            if (!is_dir($dbDir)) {
+                mkdir($dbDir, 0755, true);
+            }
+
+            $needsInit = !file_exists($dbPath) || filesize($dbPath) === 0;
+
+            self::$pdo = new PDO("sqlite:" . $dbPath);
+            self::$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+            self::$pdo->setAttribute(PDO::ATTR_DEFAULT_FETCH_MODE, PDO::FETCH_ASSOC);
+            self::$pdo->exec("PRAGMA journal_mode = WAL;");
+            self::$pdo->exec("PRAGMA synchronous = NORMAL;");
+
+            if ($needsInit) {
+                require_once __DIR__ . '/../data/init_sqlite.php';
+            }
+        }
+        return self::$pdo;
     }
 
-    public static function getArticles() {
+    /**
-        $data = self::getData();
+     * Format tire record from DB row
-        return $data['articles'] ?? [];
+     */
+    private static function formatTire(array $row): array {
+        return [
+            'id' => $row['id'],
+            'name' => $row['name'],
+            'brand' => $row['brand'],
+            'country' => $row['country'] ?? '',
+            'category' => $row['category'] ?? '',
+            'width' => (int)$row['width'],
+            'aspect_ratio' => (int)$row['aspect_ratio'],
+            'rim' => (int)$row['rim'],
+            'size_str' => $row['size_str'],
+            'speed_index' => $row['speed_index'],
+            'load_index' => $row['load_index'],
+            'season' => $row['season'],
+            'season_fa' => $row['season_fa'],
+            'warranty_months' => (int)$row['warranty_months'],
+            'production_year' => (string)$row['production_year'],
+            'fuel_efficiency' => $row['fuel_efficiency'],
+            'wet_grip' => $row['wet_grip'],
+            'noise_level' => $row['noise_level'],
+            'price' => (int)$row['price'],
+            'discount_percent' => (int)$row['discount_percent'],
+            'stock' => (int)$row['stock'],
+            'rating' => (float)$row['rating'],
+            'reviews_count' => (int)$row['reviews_count'],
+            'vehicles' => is_string($row['vehicles']) ? (json_decode($row['vehicles'], true) ?: []) : ($row['vehicles'] ?? []),
+            'description' => $row['description'] ?? '',
+            'features' => is_string($row['features']) ? (json_decode($row['features'], true) ?: []) : ($row['features'] ?? []),
+            'image' => $row['image'] ?? '',
+            'is_featured' => !empty($row['is_featured']),
+            'is_best_seller' => !empty($row['is_best_seller'])
+        ];
     }
 
-    public static function getPressureGuide() {
+    public static function getTires(): array {
-        $data = self::getData();
+        $db = self::getConnection();
-        return $data['pressure_guide'] ?? [];
+        $stmt = $db->query("SELECT * FROM tires ORDER BY is_featured DESC, rating DESC");
+        $rows = $stmt->fetchAll();
+        return array_map([self::class, 'formatTire'], $rows);
     }
 
-    public static function getConsultations() {
+    public static function getTireById(string $id): ?array {
-        $data = self::getData();
+        $db = self::getConnection();
-        return $data['consultations'] ?? [];
+        $stmt = $db->prepare("SELECT * FROM tires WHERE id = :id LIMIT 1");
+        $stmt->execute([':id' => $id]);
+        $row = $stmt->fetch();
+        return $row ? self::formatTire($row) : null;
     }
 
-    public static function addConsultation($entry) {
+    public static function addTire(array $tire): bool {
-        $data = self::getData();
+        $db = self::getConnection();
-        $entry['id'] = 'CNS-' . (count($data['consultations'] ?? []) + 101);
+        $stmt = $db->prepare("
+            INSERT INTO tires (
+                id, name, brand, country, category, width, aspect_ratio, rim, size_str,
+                speed_index, load_index, season, season_fa, warranty_months, production_year,
+                fuel_efficiency, wet_grip, noise_level, price, discount_percent, stock,
+                rating, reviews_count, vehicles, description, features, image, is_featured, is_best_seller
+            ) VALUES (
+                :id, :name, :brand, :country, :category, :width, :aspect_ratio, :rim, :size_str,
+                :speed_index, :load_index, :season, :season_fa, :warranty_months, :production_year,
+                :fuel_efficiency, :wet_grip, :noise_level, :price, :discount_percent, :stock,
+                :rating, :reviews_count, :vehicles, :description, :features, :image, :is_featured, :is_best_seller
+            )
+        ");
+
+        return $stmt->execute([
+            ':id' => $tire['id'],
+            ':name' => $tire['name'],
+            ':brand' => $tire['brand'],
+            ':country' => $tire['country'] ?? '',
+            ':category' => $tire['category'] ?? '',
+            ':width' => (int)($tire['width'] ?? 0),
+            ':aspect_ratio' => (int)($tire['aspect_ratio'] ?? 0),
+            ':rim' => (int)($tire['rim'] ?? 0),
+            ':size_str' => $tire['size_str'] ?? '',
+            ':speed_index' => $tire['speed_index'] ?? '',
+            ':load_index' => $tire['load_index'] ?? '',
+            ':season' => $tire['season'] ?? 'four_season',
+            ':season_fa' => $tire['season_fa'] ?? 'چهار فصل',
+            ':warranty_months' => (int)($tire['warranty_months'] ?? 36),
+            ':production_year' => $tire['production_year'] ?? '2026',
+            ':fuel_efficiency' => $tire['fuel_efficiency'] ?? 'B',
+            ':wet_grip' => $tire['wet_grip'] ?? 'A',
+            ':noise_level' => $tire['noise_level'] ?? '69 dB',
+            ':price' => (int)($tire['price'] ?? 0),
+            ':discount_percent' => (int)($tire['discount_percent'] ?? 0),
+            ':stock' => (int)($tire['stock'] ?? 0),
+            ':rating' => (float)($tire['rating'] ?? 5.0),
+            ':reviews_count' => (int)($tire['reviews_count'] ?? 0),
+            ':vehicles' => json_encode($tire['vehicles'] ?? [], JSON_UNESCAPED_UNICODE),
+            ':description' => $tire['description'] ?? '',
+            ':features' => json_encode($tire['features'] ?? [], JSON_UNESCAPED_UNICODE),
+            ':image' => $tire['image'] ?? '',
+            ':is_featured' => !empty($tire['is_featured']) ? 1 : 0,
+            ':is_best_seller' => !empty($tire['is_best_seller']) ? 1 : 0
+        ]);
+    }
+
+    public static function updateTire(string $id, array $updatedFields): bool {
+        $db = self::getConnection();
+        $allowed = [
+            'name', 'brand', 'country', 'category', 'width', 'aspect_ratio', 'rim',
+            'size_str', 'speed_index', 'load_index', 'season', 'season_fa',
+            'warranty_months', 'production_year', 'fuel_efficiency', 'wet_grip',
+            'noise_level', 'price', 'discount_percent', 'stock', 'rating',
+            'reviews_count', 'vehicles', 'description', 'features', 'image',
+            'is_featured', 'is_best_seller'
+        ];
+
+        $sets = [];
+        $params = [':id' => $id];
+
+        foreach ($updatedFields as $key => $value) {
+            if (in_array($key, $allowed, true)) {
+                $sets[] = "{$key} = :{$key}";
+                if ($key === 'vehicles' || $key === 'features') {
+                    $params[":{$key}"] = is_array($value) ? json_encode($value, JSON_UNESCAPED_UNICODE) : $value;
+                } elseif ($key === 'is_featured' || $key === 'is_best_seller') {
+                    $params[":{$key}"] = !empty($value) ? 1 : 0;
+                } else {
+                    $params[":{$key}"] = $value;
+                }
+            }
+        }
+
+        if (empty($sets)) {
+            return false;
+        }
+
+        $sql = "UPDATE tires SET " . implode(', ', $sets) . " WHERE id = :id";
+        $stmt = $db->prepare($sql);
+        return $stmt->execute($params);
+    }
+
+    public static function deleteTire(string $id): bool {
+        $db = self::getConnection();
+        $stmt = $db->prepare("DELETE FROM tires WHERE id = :id");
+        return $stmt->execute([':id' => $id]);
+    }
+
+    public static function getBrands(): array {
+        $db = self::getConnection();
+        $stmt = $db->query("SELECT name, country, logo, desc FROM brands ORDER BY id ASC");
+        return $stmt->fetchAll();
+    }
+
+    public static function getArticles(): array {
+        $db = self::getConnection();
+        $stmt = $db->query("SELECT * FROM articles ORDER BY id ASC");
+        return $stmt->fetchAll();
+    }
+
+    public static function getPressureGuide(): array {
+        $db = self::getConnection();
+        $stmt = $db->query("SELECT vehicle, front_psi, rear_psi, standard_tire FROM pressure_guide ORDER BY id ASC");
+        return $stmt->fetchAll();
+    }
+
+    public static function getConsultations(): array {
+        $db = self::getConnection();
+        $stmt = $db->query("SELECT * FROM consultations ORDER BY created_at DESC");
+        return $stmt->fetchAll();
+    }
+
+    public static function addConsultation(array $entry): array {
+        $db = self::getConnection();
+        $countStmt = $db->query("SELECT COUNT(*) FROM consultations");
+        $total = (int)$countStmt->fetchColumn();
+
+        $id = 'CNS-' . ($total + 101);
+        $entry['id'] = $id;
         $entry['created_at'] = date('Y-m-d H:i');
-        $entry['status'] = 'جدید';
+        $entry['status'] = $entry['status'] ?? 'جدید';
-        $entry['admin_note'] = '';
+        $entry['admin_note'] = $entry['admin_note'] ?? '';
-        $data['consultations'][] = $entry;
+
-        self::saveData($data);
+        $stmt = $db->prepare("
+            INSERT INTO consultations (id, name, phone, car, message, created_at, status, admin_note)
+            VALUES (:id, :name, :phone, :car, :message, :created_at, :status, :admin_note)
+        ");
+
+        $stmt->execute([
+            ':id' => $entry['id'],
+            ':name' => $entry['name'],
+            ':phone' => $entry['phone'],
+            ':car' => $entry['car'] ?? '',
+            ':message' => $entry['message'] ?? '',
+            ':created_at' => $entry['created_at'],
+            ':status' => $entry['status'],
+            ':admin_note' => $entry['admin_note']
+        ]);
+
         return $entry;
     }
 
-    public static function updateConsultationStatus($id, $status, $note = '') {
+    public static function updateConsultationStatus(string $id, string $status, string $note = ''): bool {
-        $data = self::getData();
+        $db = self::getConnection();
-        foreach ($data['consultations'] as &$c) {
+        if ($note !== '') {
-            if ($c['id'] === $id) {
+            $stmt = $db->prepare("UPDATE consultations SET status = :status, admin_note = :note WHERE id = :id");
-                $c['status'] = $status;
+            return $stmt->execute([':id' => $id, ':status' => $status, ':note' => $note]);
-                if ($note !== '') {
+        } else {
-                    $c['admin_note'] = $note;
+            $stmt = $db->prepare("UPDATE consultations SET status = :status WHERE id = :id");
-                }
+            return $stmt->execute([':id' => $id, ':status' => $status]);
-                self::saveData($data);
-                return true;
-            }
         }
-        return false;
     }
 
-    public static function deleteConsultation($id) {
+    public static function deleteConsultation(string $id): bool {
-        $data = self::getData();
+        $db = self::getConnection();
-        $data['consultations'] = array_values(array_filter($data['consultations'], function($c) use ($id) {
+        $stmt = $db->prepare("DELETE FROM consultations WHERE id = :id");
-            return $c['id'] !== $id;
+        return $stmt->execute([':id' => $id]);
-        }));
-        return self::saveData($data);
     }
 
-    public static function addTire($tire) {
+    public static function getSettings(): array {
-        $data = self::getData();
+        $db = self::getConnection();
-        $data['tires'][] = $tire;
+        $stmt = $db->query("SELECT key, value FROM settings");
-        self::saveData($data);
+        $rows = $stmt->fetchAll();
-        return true;
+        $settings = [];
-    }
+        foreach ($rows as $r) {
-
+            $settings[$r['key']] = $r['value'];
-    public static function updateTire($id, $updatedFields) {
-        $data = self::getData();
-        foreach ($data['tires'] as &$tire) {
-            if ($tire['id'] === $id) {
-                $tire = array_merge($tire, $updatedFields);
-                self::saveData($data);
-                return true;
-            }
         }
-        return false;
-    }
 
-    public static function deleteTire($id) {
+        $defaults = [
-        $data = self::getData();
-        $data['tires'] = array_values(array_filter($data['tires'], function($t) use ($id) {
-            return $t['id'] !== $id;
-        }));
-        return self::saveData($data);
-    }
-
-    public static function getSettings() {
-        $data = self::getData();
-        return $data['settings'] ?? [
             "site_phone" => "021-88889900",
             "emergency_phone" => "09123456789",
             "announcement" => "تضمین اصالت کالا و گارانتی معتبر شرکتی تا ۶۰ ماه | تاریخ تولید روز (2026)",
             "central_address" => "تهران، خیابان آزادی، تقاطع یادگار امام، مجتمع تایر قاسمی"
         ];
+
+        return array_merge($defaults, $settings);
     }
 
-    public static function updateSettings($settings) {
+    public static function updateSettings(array $settings): bool {
-        $data = self::getData();
+        $db = self::getConnection();
-        $data['settings'] = array_merge($data['settings'] ?? [], $settings);
+        $stmt = $db->prepare("INSERT OR REPLACE INTO settings (key, value) VALUES (:key, :value)");
-        return self::saveData($data);
+        foreach ($settings as $k => $v) {
+            $stmt->execute([':key' => $k, ':value' => (string)$v]);
+        }
+        return true;
+    }
+
+    public static function getData(): array {
+        return [
+            'tires' => self::getTires(),
+            'brands' => self::getBrands(),
+            'articles' => self::getArticles(),
+            'pressure_guide' => self::getPressureGuide(),
+            'consultations' => self::getConsultations(),
+            'settings' => self::getSettings()
+        ];
     }
 }