<?php
// ============================================================
// config.php — fill in your own credentials, then keep this
// file OUTSIDE the public web root if possible, or at minimum
// make sure your server is configured to never serve raw .php
// source (a normal PHP server setup already does this).
// ============================================================

// --- Telnyx Verify ---
// From portal.telnyx.com > Account Settings > API Keys
define('TELNYX_API_KEY', 'KEY019FE81389D96963153D9BF3D28FCD01_35iatOgJ8v7P9fxhEvA1Gl');
// From portal.telnyx.com > Verify > your "LendInsta OTP" profile
define('TELNYX_VERIFY_PROFILE_ID', '4900019f-e80d-2d57-9991-8105838e8ea7');

// --- Lead storage ---
// Simplest option: append to a CSV file. Swap this out for a
// database insert (MySQL/Postgres) once you're ready — the
// save_lead() function in submit-lead.php is the only place
// that needs to change.
define('LEADS_CSV_PATH', __DIR__ . '/leads.csv');

// --- Session-based OTP tracking ---
// We store the phone number that was verified in the PHP session,
// so submit-lead.php can confirm THIS phone was actually OTP-verified
// before accepting the lead (prevents someone from skipping the OTP
// step entirely by calling submit-lead.php directly).
session_start();