Refactor and remove sqlite and replace with MySQL

2025-10-23 18:43:31 +01:00
parent d53e27eea8
commit 21ebc9c34b
139 changed files with 1013 additions and 529 deletions
--- a/internal/storage/mysql/auditLog/create.go
+++ b/internal/storage/mysql/auditLog/create.go
@@ -0,0 +1,56 @@
+package storage
+
+import (
+	"database/sql"
+	"log"
+	"net/http"
+	"time"
+
+	securityHelpers "synlotto-website/helpers/security"
+	templateHelpers "synlotto-website/helpers/template"
+	"synlotto-website/internal/logging"
+
+	"synlotto-website/middleware"
+)
+
+func AdminOnly(db *sql.DB, next http.HandlerFunc) http.HandlerFunc {
+	return middleware.Auth(true)(func(w http.ResponseWriter, r *http.Request) {
+		userID, ok := securityHelpers.GetCurrentUserID(r)
+		if !ok || !securityHelpers.IsAdmin(db, userID) {
+			log.Printf("⛔️ Unauthorized admin attempt: user_id=%v, IP=%s, Path=%s", userID, r.RemoteAddr, r.URL.Path)
+			templateHelpers.RenderError(w, r, http.StatusForbidden)
+			return
+		}
+
+		ip := r.RemoteAddr
+		ua := r.UserAgent()
+		path := r.URL.Path
+
+		_, err := db.Exec(`
+			INSERT INTO admin_access_log (user_id, path, ip, user_agent)
+			VALUES (?, ?, ?, ?)`,
+			userID, path, ip, ua,
+		)
+		if err != nil {
+			log.Printf("⚠️ Failed to log admin access: %v", err)
+		}
+
+		log.Printf("🛡️ Admin access: user_id=%d IP=%s Path=%s", userID, ip, path)
+
+		next(w, r)
+	})
+}
+
+func LogLoginAttempt(r *http.Request, username string, success bool) {
+	ip := r.RemoteAddr
+	userAgent := r.UserAgent()
+
+	_, err := db.Exec(
+		`INSERT INTO audit_login (username, success, ip, user_agent, timestamp)
+		 VALUES (?, ?, ?, ?, ?)`,
+		username, success, ip, userAgent, time.Now().UTC(),
+	)
+	if err != nil {
+		logging.Info("❌ Failed to log login:", err)
+	}
+}
--- a/internal/storage/mysql/db.go
+++ b/internal/storage/mysql/db.go
@@ -0,0 +1,78 @@
+package storage
+
+import (
+	"database/sql"
+	"embed"
+	"fmt"
+	"log"
+	"os"
+
+	_ "github.com/go-sql-driver/mysql"
+	"github.com/golang-migrate/migrate/v4"
+	"github.com/golang-migrate/migrate/v4/database/mysql"
+	iofs "github.com/golang-migrate/migrate/v4/source/iofs"
+)
+
+//go:embed migrations/*.sql
+var migrationFiles embed.FS
+
+var DB *sql.DB
+
+// InitDB connects to MySQL, runs migrations, and returns the DB handle.
+func InitDB() *sql.DB {
+	cfg := getDSNFromEnv()
+
+	db, err := sql.Open("mysql", cfg)
+	if err != nil {
+		log.Fatalf("❌ Failed to connect to MySQL: %v", err)
+	}
+
+	if err := db.Ping(); err != nil {
+		log.Fatalf("❌ MySQL not reachable: %v", err)
+	}
+
+	if err := runMigrations(db); err != nil {
+		log.Fatalf("❌ Migration failed: %v", err)
+	}
+
+	DB = db
+	return db
+}
+
+// runMigrations applies any pending .sql files in migrations/
+func runMigrations(db *sql.DB) error {
+	driver, err := mysql.WithInstance(db, &mysql.Config{})
+	if err != nil {
+		return err
+	}
+
+	src, err := iofs.New(migrationFiles, "migrations")
+	if err != nil {
+		return err
+	}
+
+	m, err := migrate.NewWithInstance("iofs", src, "mysql", driver)
+	if err != nil {
+		return err
+	}
+
+	err = m.Up()
+	if err == migrate.ErrNoChange {
+		log.Println("✅ Database schema up to date.")
+		return nil
+	}
+	return err
+}
+
+func getDSNFromEnv() string {
+	user := os.Getenv("DB_USER")
+	pass := os.Getenv("DB_PASS")
+	host := os.Getenv("DB_HOST") // e.g. localhost or 127.0.0.1
+	port := os.Getenv("DB_PORT") // e.g. 3306
+	name := os.Getenv("DB_NAME") // e.g. synlotto
+	params := "parseTime=true&multiStatements=true"
+
+	dsn := fmt.Sprintf("%s:%s@tcp(%s:%s)/%s?%s",
+		user, pass, host, port, name, params)
+	return dsn
+}
--- a/internal/storage/mysql/messages/create.go
+++ b/internal/storage/mysql/messages/create.go
@@ -0,0 +1,13 @@
+package storage
+
+import (
+	"database/sql"
+)
+
+func SendMessage(db *sql.DB, senderID, recipientID int, subject, message string) error {
+	_, err := db.Exec(`
+		INSERT INTO users_messages (senderId, recipientId, subject, message)
+		VALUES (?, ?, ?, ?)
+	`, senderID, recipientID, subject, message)
+	return err
+}
--- a/internal/storage/mysql/messages/delete.go
+++ b/internal/storage/mysql/messages/delete.go
@@ -0,0 +1,2 @@
+//Currently no delete functions, only archiving to remove from user view but they can pull them back. Consider a soft delete which hides them from being unarchived for 5 years?
+// Then systematically delete after 5 years? or delete sooner but retain backups
--- a/internal/storage/mysql/messages/read.go
+++ b/internal/storage/mysql/messages/read.go
@@ -0,0 +1,132 @@
+package storage
+
+import (
+	"database/sql"
+
+	"synlotto-website/internal/models"
+)
+
+func GetMessageCount(db *sql.DB, userID int) (int, error) {
+	var count int
+	err := db.QueryRow(`
+		SELECT COUNT(*) FROM users_messages 
+		WHERE recipientId = ? AND is_read = FALSE AND is_archived = FALSE
+	`, userID).Scan(&count)
+	return count, err
+}
+
+func GetRecentMessages(db *sql.DB, userID int, limit int) []models.Message {
+	rows, err := db.Query(`
+		SELECT id, senderId, recipientId, subject, message, is_read, created_at
+		FROM users_messages
+		WHERE recipientId = ? AND is_archived = FALSE
+		ORDER BY created_at DESC
+		LIMIT ?
+	`, userID, limit)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var messages []models.Message
+	for rows.Next() {
+		var m models.Message
+		err := rows.Scan(
+			&m.ID,
+			&m.SenderId,
+			&m.RecipientId,
+			&m.Subject,
+			&m.Message,
+			&m.IsRead,
+			&m.CreatedAt,
+		)
+		if err == nil {
+			messages = append(messages, m)
+		}
+	}
+	return messages
+}
+
+func GetMessageByID(db *sql.DB, userID, messageID int) (*models.Message, error) {
+	row := db.QueryRow(`
+		SELECT id, senderId, recipientId, subject, message, is_read, created_at
+		FROM users_messages
+		WHERE id = ? AND recipientId = ?
+	`, messageID, userID)
+
+	var m models.Message
+	err := row.Scan(&m.ID, &m.SenderId, &m.RecipientId, &m.Subject, &m.Message, &m.IsRead, &m.CreatedAt)
+	if err != nil {
+		return nil, err
+	}
+	return &m, nil
+}
+
+func GetArchivedMessages(db *sql.DB, userID int, page, perPage int) []models.Message {
+	offset := (page - 1) * perPage
+	rows, err := db.Query(`
+		SELECT id, senderId, recipientId, subject, message, is_read, created_at, archived_at
+		FROM users_messages
+		WHERE recipientId = ? AND is_archived = TRUE
+		ORDER BY archived_at DESC
+		LIMIT ? OFFSET ?
+	`, userID, perPage, offset)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var messages []models.Message
+	for rows.Next() {
+		var m models.Message
+		err := rows.Scan(
+			&m.ID, &m.SenderId, &m.RecipientId,
+			&m.Subject, &m.Message, &m.IsRead,
+			&m.CreatedAt, &m.ArchivedAt,
+		)
+		if err == nil {
+			messages = append(messages, m)
+		}
+	}
+	return messages
+}
+
+func GetInboxMessages(db *sql.DB, userID int, page, perPage int) []models.Message {
+	offset := (page - 1) * perPage
+	rows, err := db.Query(`
+		SELECT id, senderId, recipientId, subject, message, is_read, created_at
+		FROM users_messages
+		WHERE recipientId = ? AND is_archived = FALSE
+		ORDER BY created_at DESC
+		LIMIT ? OFFSET ?
+	`, userID, perPage, offset)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var messages []models.Message
+	for rows.Next() {
+		var m models.Message
+		err := rows.Scan(
+			&m.ID, &m.SenderId, &m.RecipientId,
+			&m.Subject, &m.Message, &m.IsRead, &m.CreatedAt,
+		)
+		if err == nil {
+			messages = append(messages, m)
+		}
+	}
+	return messages
+}
+
+func GetInboxMessageCount(db *sql.DB, userID int) int {
+	var count int
+	err := db.QueryRow(`
+		SELECT COUNT(*) FROM users_messages
+		WHERE recipientId = ? AND is_archived = FALSE
+	`, userID).Scan(&count)
+	if err != nil {
+		return 0
+	}
+	return count
+}
--- a/internal/storage/mysql/messages/update.go
+++ b/internal/storage/mysql/messages/update.go
@@ -0,0 +1,44 @@
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+)
+
+func ArchiveMessage(db *sql.DB, userID, messageID int) error {
+	_, err := db.Exec(`
+		UPDATE users_messages
+		SET is_archived = TRUE, archived_at = CURRENT_TIMESTAMP
+		WHERE id = ? AND recipientId = ?
+	`, messageID, userID)
+	return err
+}
+
+func MarkMessageAsRead(db *sql.DB, messageID, userID int) error {
+	result, err := db.Exec(`
+		UPDATE users_messages
+		SET is_read = TRUE
+		WHERE id = ? AND recipientId = ?
+	`, messageID, userID)
+	if err != nil {
+		return err
+	}
+
+	rowsAffected, err := result.RowsAffected()
+	if err != nil {
+		return err
+	}
+	if rowsAffected == 0 {
+		return fmt.Errorf("no matching message found for user_id=%d and message_id=%d", userID, messageID)
+	}
+	return nil
+}
+
+func RestoreMessage(db *sql.DB, userID, messageID int) error {
+	_, err := db.Exec(`
+		UPDATE users_messages
+		SET is_archived = FALSE, archived_at = NULL
+		WHERE id = ? AND recipientId = ?
+	`, messageID, userID)
+	return err
+}
--- a/internal/storage/mysql/migrations/0001_initial_create.up.sql
+++ b/internal/storage/mysql/migrations/0001_initial_create.up.sql
@@ -0,0 +1,281 @@
+-- 0001_initial.up.sql
+-- Engine/charset notes:
+-- - InnoDB for FK support
+-- - utf8mb4 for full Unicode
+-- Booleans are TINYINT(1). Dates use DATE/DATETIME/TIMESTAMP as appropriate.
+
+-- USERS
+CREATE TABLE IF NOT EXISTS users (
+  id           BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  username     VARCHAR(191) NOT NULL UNIQUE,
+  password_hash VARCHAR(255) NOT NULL,
+  is_admin     TINYINT(1) NOT NULL DEFAULT 0
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- THUNDERBALL RESULTS
+CREATE TABLE IF NOT EXISTS results_thunderball (
+  id          BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  draw_date   DATE NOT NULL UNIQUE,
+  draw_id     BIGINT UNSIGNED NOT NULL UNIQUE,
+  machine     VARCHAR(50),
+  ballset     VARCHAR(50),
+  ball1       TINYINT UNSIGNED,
+  ball2       TINYINT UNSIGNED,
+  ball3       TINYINT UNSIGNED,
+  ball4       TINYINT UNSIGNED,
+  ball5       TINYINT UNSIGNED,
+  thunderball TINYINT UNSIGNED
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- THUNDERBALL PRIZES
+CREATE TABLE IF NOT EXISTS prizes_thunderball (
+  id                   BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  draw_id              BIGINT UNSIGNED NOT NULL,
+  draw_date            DATE,
+  prize1               VARCHAR(50),
+  prize1_winners       INT UNSIGNED,
+  prize1_per_winner    INT UNSIGNED,
+  prize1_fund          BIGINT UNSIGNED,
+  prize2               VARCHAR(50),
+  prize2_winners       INT UNSIGNED,
+  prize2_per_winner    INT UNSIGNED,
+  prize2_fund          BIGINT UNSIGNED,
+  prize3               VARCHAR(50),
+  prize3_winners       INT UNSIGNED,
+  prize3_per_winner    INT UNSIGNED,
+  prize3_fund          BIGINT UNSIGNED,
+  prize4               VARCHAR(50),
+  prize4_winners       INT UNSIGNED,
+  prize4_per_winner    INT UNSIGNED,
+  prize4_fund          BIGINT UNSIGNED,
+  prize5               VARCHAR(50),
+  prize5_winners       INT UNSIGNED,
+  prize5_per_winner    INT UNSIGNED,
+  prize5_fund          BIGINT UNSIGNED,
+  prize6               VARCHAR(50),
+  prize6_winners       INT UNSIGNED,
+  prize6_per_winner    INT UNSIGNED,
+  prize6_fund          BIGINT UNSIGNED,
+  prize7               VARCHAR(50),
+  prize7_winners       INT UNSIGNED,
+  prize7_per_winner    INT UNSIGNED,
+  prize7_fund          BIGINT UNSIGNED,
+  prize8               VARCHAR(50),
+  prize8_winners       INT UNSIGNED,
+  prize8_per_winner    INT UNSIGNED,
+  prize8_fund          BIGINT UNSIGNED,
+  prize9               VARCHAR(50),
+  prize9_winners       INT UNSIGNED,
+  prize9_per_winner    INT UNSIGNED,
+  prize9_fund          BIGINT UNSIGNED,
+  total_winners        INT UNSIGNED,
+  total_prize_fund     BIGINT UNSIGNED,
+  CONSTRAINT fk_prizes_tb_drawdate
+    FOREIGN KEY (draw_date) REFERENCES results_thunderball(draw_date)
+      ON UPDATE CASCADE ON DELETE RESTRICT
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- LOTTO RESULTS
+CREATE TABLE IF NOT EXISTS results_lotto (
+  id        BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  draw_date DATE NOT NULL UNIQUE,
+  draw_id   BIGINT UNSIGNED NOT NULL UNIQUE,
+  machine   VARCHAR(50),
+  ballset   VARCHAR(50),
+  ball1     TINYINT UNSIGNED,
+  ball2     TINYINT UNSIGNED,
+  ball3     TINYINT UNSIGNED,
+  ball4     TINYINT UNSIGNED,
+  ball5     TINYINT UNSIGNED,
+  ball6     TINYINT UNSIGNED,
+  bonusball TINYINT UNSIGNED
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- MY TICKETS
+CREATE TABLE IF NOT EXISTS my_tickets (
+  id             BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  userId         BIGINT UNSIGNED NOT NULL,
+  game_type      VARCHAR(32) NOT NULL,
+  draw_date      DATE NOT NULL,
+  ball1          TINYINT UNSIGNED,
+  ball2          TINYINT UNSIGNED,
+  ball3          TINYINT UNSIGNED,
+  ball4          TINYINT UNSIGNED,
+  ball5          TINYINT UNSIGNED,
+  ball6          TINYINT UNSIGNED,
+  bonus1         TINYINT UNSIGNED,
+  bonus2         TINYINT UNSIGNED,
+  duplicate      TINYINT(1) NOT NULL DEFAULT 0,
+  purchase_date  DATETIME,
+  purchase_method VARCHAR(50),
+  image_path     VARCHAR(255),
+  created_at     DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  matched_main   TINYINT UNSIGNED,
+  matched_bonus  TINYINT UNSIGNED,
+  prize_tier     VARCHAR(50),
+  is_winner      TINYINT(1) NOT NULL DEFAULT 0,
+  prize_amount   BIGINT,
+  prize_label    VARCHAR(100),
+  syndicate_id   BIGINT UNSIGNED,
+  CONSTRAINT fk_my_tickets_user
+    FOREIGN KEY (userId) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- USERS MESSAGES
+CREATE TABLE IF NOT EXISTS users_messages (
+  id           BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  senderId     BIGINT UNSIGNED NOT NULL,
+  recipientId  BIGINT UNSIGNED NOT NULL,
+  subject      VARCHAR(255) NOT NULL,
+  message      MEDIUMTEXT,
+  is_read      TINYINT(1) NOT NULL DEFAULT 0,
+  is_archived  TINYINT(1) NOT NULL DEFAULT 0,
+  created_at   DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  archived_at  DATETIME NULL,
+  CONSTRAINT fk_users_messages_sender
+    FOREIGN KEY (senderId) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_users_messages_recipient
+    FOREIGN KEY (recipientId) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- USERS NOTIFICATIONS
+CREATE TABLE IF NOT EXISTS users_notification (
+  id         BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  user_id    BIGINT UNSIGNED NOT NULL,
+  subject    VARCHAR(255),
+  body       MEDIUMTEXT,
+  is_read    TINYINT(1) NOT NULL DEFAULT 0,
+  created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT fk_users_notification_user
+    FOREIGN KEY (user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- AUDITLOG
+CREATE TABLE IF NOT EXISTS auditlog (
+  id        BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  username  VARCHAR(191),
+  success   TINYINT(1),
+  timestamp DATETIME
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- LOG: TICKET MATCHING
+CREATE TABLE IF NOT EXISTS log_ticket_matching (
+  id              BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  triggered_by    VARCHAR(191),
+  run_at          DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  tickets_matched INT,
+  winners_found   INT,
+  notes           TEXT
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- ADMIN ACCESS LOG
+CREATE TABLE IF NOT EXISTS admin_access_log (
+  id          BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  user_id     BIGINT UNSIGNED,
+  accessed_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  path        VARCHAR(255),
+  ip          VARCHAR(64),
+  user_agent  VARCHAR(255),
+  CONSTRAINT fk_admin_access_user
+    FOREIGN KEY (user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE SET NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- AUDIT LOG (new)
+CREATE TABLE IF NOT EXISTS audit_log (
+  id         BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  user_id    BIGINT UNSIGNED,
+  username   VARCHAR(191),
+  action     VARCHAR(191),
+  path       VARCHAR(255),
+  ip         VARCHAR(64),
+  user_agent VARCHAR(255),
+  timestamp  DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT fk_audit_log_user
+    FOREIGN KEY (user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE SET NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- AUDIT LOGIN (new)
+CREATE TABLE IF NOT EXISTS audit_login (
+  id         BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  username   VARCHAR(191),
+  success    TINYINT(1),
+  ip         VARCHAR(64),
+  user_agent VARCHAR(255),
+  timestamp  DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- SYNDICATES
+CREATE TABLE IF NOT EXISTS syndicates (
+  id          BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  name        VARCHAR(191) NOT NULL,
+  description TEXT,
+  owner_id    BIGINT UNSIGNED NOT NULL,
+  join_code   VARCHAR(191) UNIQUE,
+  created_at  DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT fk_syndicates_owner
+    FOREIGN KEY (owner_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- SYNDICATE MEMBERS
+CREATE TABLE IF NOT EXISTS syndicate_members (
+  id           BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  syndicate_id BIGINT UNSIGNED NOT NULL,
+  user_id      BIGINT UNSIGNED NOT NULL,
+  role         VARCHAR(32) NOT NULL DEFAULT 'member',
+  status       VARCHAR(32) NOT NULL DEFAULT 'active',
+  joined_at    DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT fk_synmem_syn
+    FOREIGN KEY (syndicate_id) REFERENCES syndicates(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_synmem_user
+    FOREIGN KEY (user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT uq_synmem UNIQUE (syndicate_id, user_id)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- SYNDICATE INVITES
+CREATE TABLE IF NOT EXISTS syndicate_invites (
+  id               BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  syndicate_id     BIGINT UNSIGNED NOT NULL,
+  invited_user_id  BIGINT UNSIGNED NOT NULL,
+  sent_by_user_id  BIGINT UNSIGNED NOT NULL,
+  status           VARCHAR(32) NOT NULL DEFAULT 'pending',
+  created_at       DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT fk_syninv_syn
+    FOREIGN KEY (syndicate_id) REFERENCES syndicates(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_syninv_invited
+    FOREIGN KEY (invited_user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_syninv_sender
+    FOREIGN KEY (sent_by_user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- SYNDICATE INVITE TOKENS
+CREATE TABLE IF NOT EXISTS syndicate_invite_tokens (
+  id                 BIGINT UNSIGNED NOT NULL AUTO_INCREMENT PRIMARY KEY,
+  syndicate_id       BIGINT UNSIGNED NOT NULL,
+  token              VARCHAR(191) NOT NULL UNIQUE,
+  invited_by_user_id BIGINT UNSIGNED NOT NULL,
+  accepted_by_user_id BIGINT UNSIGNED,
+  created_at         DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  accepted_at        DATETIME,
+  expires_at         DATETIME,
+  CONSTRAINT fk_syninvtoken_syn
+    FOREIGN KEY (syndicate_id) REFERENCES syndicates(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_syninvtoken_invitedby
+    FOREIGN KEY (invited_by_user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE CASCADE,
+  CONSTRAINT fk_syninvtoken_acceptedby
+    FOREIGN KEY (accepted_by_user_id) REFERENCES users(id)
+      ON UPDATE CASCADE ON DELETE SET NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
--- a/internal/storage/mysql/notifications/create.go
+++ b/internal/storage/mysql/notifications/create.go
@@ -0,0 +1,3 @@
+package storage
+
+// ToDo: somethign must create notifications?
--- a/internal/storage/mysql/notifications/delete.go
+++ b/internal/storage/mysql/notifications/delete.go
@@ -0,0 +1,3 @@
+package storage
+
+// ToDo: not used, check messages and do something similar maybe dont store them?
--- a/internal/storage/mysql/notifications/read.go
+++ b/internal/storage/mysql/notifications/read.go
@@ -0,0 +1,63 @@
+package storage
+
+//ToDo: should be using my own logging wrapper?
+import (
+	"database/sql"
+	"log"
+
+	"synlotto-website/internal/models"
+)
+
+func GetNotificationByID(db *sql.DB, userID, notificationID int) (*models.Notification, error) {
+	row := db.QueryRow(`
+		SELECT id, user_id, subject, body, is_read
+		FROM users_notification
+		WHERE id = ? AND user_id = ?
+	`, notificationID, userID)
+
+	var n models.Notification
+	err := row.Scan(&n.ID, &n.UserId, &n.Subject, &n.Body, &n.IsRead)
+	if err != nil {
+		return nil, err
+	}
+	return &n, nil
+}
+
+func GetNotificationCount(db *sql.DB, userID int) int {
+	var count int
+	err := db.QueryRow(`
+		SELECT COUNT(*) FROM users_notification
+		WHERE user_id = ? AND is_read = FALSE`, userID).Scan(&count)
+
+	if err != nil {
+		log.Println("⚠️ Failed to count notifications:", err)
+		return 0
+	}
+
+	return count
+}
+
+func GetRecentNotifications(db *sql.DB, userID int, limit int) []models.Notification {
+	rows, err := db.Query(`
+		SELECT id, subject, body, is_read, created_at
+		FROM users_notification
+		WHERE user_id = ?
+		ORDER BY created_at DESC
+		LIMIT ?`, userID, limit)
+	if err != nil {
+		log.Println("⚠️ Failed to get notifications:", err)
+		return nil
+	}
+	defer rows.Close()
+
+	var notifications []models.Notification
+
+	for rows.Next() {
+		var n models.Notification
+		if err := rows.Scan(&n.ID, &n.Subject, &n.Body, &n.IsRead, &n.CreatedAt); err == nil {
+			notifications = append(notifications, n)
+		}
+	}
+
+	return notifications
+}
--- a/internal/storage/mysql/notifications/update.go
+++ b/internal/storage/mysql/notifications/update.go
@@ -0,0 +1,29 @@
+package storage
+
+// ToDo: Should be logging fmt to my loggign wrapper
+import (
+	"database/sql"
+	"fmt"
+)
+
+func MarkNotificationAsRead(db *sql.DB, userID int, notificationID int) error {
+	result, err := db.Exec(`
+		UPDATE users_notification
+		SET is_read = TRUE
+		WHERE id = ? AND user_id = ?
+	`, notificationID, userID)
+	if err != nil {
+		return err
+	}
+
+	rowsAffected, err := result.RowsAffected()
+	if err != nil {
+		return err
+	}
+
+	if rowsAffected == 0 {
+		return fmt.Errorf("no matching notification for user_id=%d and id=%d", userID, notificationID)
+	}
+
+	return nil
+}
--- a/internal/storage/mysql/results/thunderball/create.go
+++ b/internal/storage/mysql/results/thunderball/create.go
@@ -0,0 +1,30 @@
+package storage
+
+import (
+	"database/sql"
+	"log"
+	"strings"
+
+	"synlotto-website/internal/models"
+)
+
+func InsertThunderballResult(db *sql.DB, res models.ThunderballResult) error {
+	stmt := `
+	INSERT INTO results_thunderball (
+		draw_date, machine, ballset,
+		ball1, ball2, ball3, ball4, ball5, thunderball
+	) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?);`
+
+	_, err := db.Exec(stmt,
+		res.DrawDate, res.Machine, res.BallSet,
+		res.Ball1, res.Ball2, res.Ball3, res.Ball4, res.Ball5, res.Thunderball,
+	)
+	if err != nil {
+		if strings.Contains(err.Error(), "UNIQUE constraint failed") {
+			log.Printf("⚠️ Draw for %s already exists. Skipping insert.\n", res.DrawDate)
+			return nil
+		}
+		log.Println("❌ InsertThunderballResult error:", err)
+	}
+	return err
+}
--- a/internal/storage/mysql/schema.go
+++ b/internal/storage/mysql/schema.go
@@ -0,0 +1 @@
+package storage
--- a/internal/storage/mysql/seeds/thunderball_seed.go
+++ b/internal/storage/mysql/seeds/thunderball_seed.go
@@ -0,0 +1,31 @@
+package storage
+
+import (
+	"database/sql"
+	"os"
+)
+
+// this is an example currenlty not true data
+func Seed(db *sql.DB) error {
+	if _, err := db.Exec(`
+		INSERT INTO settings (k, v)
+		SELECT 'site_name', 'SynLotto'
+		WHERE NOT EXISTS (SELECT 1 FROM settings WHERE k='site_name');
+	`); err != nil {
+		// settings table is optional; remove if you don't use it
+	}
+
+	// 2) admin user (idempotent + secret from env)
+	adminUser := "admin"
+	adminHash := os.Getenv("ADMIN_BCRYPT_HASH") // or build from ADMIN_PASSWORD
+	if adminHash == "" {
+		// skip silently if you don’t want to hard-require it
+		return nil
+	}
+	_, err := db.Exec(`
+		INSERT INTO users (username, password_hash, is_admin)
+		VALUES (?, ?, 1)
+		ON DUPLICATE KEY UPDATE is_admin=VALUES(is_admin)
+	`, adminUser, adminHash)
+	return err
+}
--- a/internal/storage/mysql/syndicate/create.go
+++ b/internal/storage/mysql/syndicate/create.go
@@ -0,0 +1,21 @@
+package storage
+
+import (
+	"database/sql"
+)
+
+func AddMemberToSyndicate(db *sql.DB, syndicateID, userID int) error {
+	_, err := db.Exec(`
+		INSERT INTO syndicate_members (syndicate_id, user_id, joined_at)
+		VALUES (?, ?, CURRENT_TIMESTAMP)
+	`, syndicateID, userID)
+	return err
+}
+
+func InviteUserToSyndicate(db *sql.DB, syndicateID, invitedUserID, senderID int) error {
+	_, err := db.Exec(`
+		INSERT INTO syndicate_invites (syndicate_id, invited_user_id, sent_by_user_id)
+		VALUES (?, ?, ?)
+	`, syndicateID, invitedUserID, senderID)
+	return err
+}
--- a/internal/storage/mysql/syndicate/read.go
+++ b/internal/storage/mysql/syndicate/read.go
@@ -0,0 +1,146 @@
+package storage
+
+import (
+	"database/sql"
+
+	"synlotto-website/internal/models"
+)
+
+func GetInviteTokensForSyndicate(db *sql.DB, syndicateID int) []models.SyndicateInviteToken {
+	rows, err := db.Query(`
+		SELECT token, invited_by_user_id, accepted_by_user_id, created_at, expires_at, accepted_at
+		FROM syndicate_invite_tokens
+		WHERE syndicate_id = ?
+		ORDER BY created_at DESC
+	`, syndicateID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var tokens []models.SyndicateInviteToken
+	for rows.Next() {
+		var t models.SyndicateInviteToken
+		_ = rows.Scan(
+			&t.Token,
+			&t.InvitedByUserID,
+			&t.AcceptedByUserID,
+			&t.CreatedAt,
+			&t.ExpiresAt,
+			&t.AcceptedAt,
+		)
+		tokens = append(tokens, t)
+	}
+	return tokens
+}
+
+func GetPendingSyndicateInvites(db *sql.DB, userID int) []models.SyndicateInvite {
+	rows, err := db.Query(`
+		SELECT id, syndicate_id, invited_user_id, sent_by_user_id, status, created_at
+		FROM syndicate_invites
+		WHERE invited_user_id = ? AND status = 'pending'
+	`, userID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var invites []models.SyndicateInvite
+	for rows.Next() {
+		var i models.SyndicateInvite
+		rows.Scan(&i.ID, &i.SyndicateID, &i.InvitedUserID, &i.SentByUserID, &i.Status, &i.CreatedAt)
+		invites = append(invites, i)
+	}
+	return invites
+}
+
+func GetSyndicateByID(db *sql.DB, id int) (*models.Syndicate, error) {
+	row := db.QueryRow(`SELECT id, name, description, owner_id, created_at FROM syndicates WHERE id = ?`, id)
+	var s models.Syndicate
+	err := row.Scan(&s.ID, &s.Name, &s.Description, &s.OwnerID, &s.CreatedAt)
+	if err != nil {
+		return nil, err
+	}
+	return &s, nil
+}
+
+func GetSyndicatesByMember(db *sql.DB, userID int) []models.Syndicate {
+	rows, err := db.Query(`
+		SELECT s.id, s.name, s.description, s.created_at, s.owner_id
+		FROM syndicates s
+		JOIN syndicate_members m ON s.id = m.syndicate_id
+		WHERE m.user_id = ?`, userID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var syndicates []models.Syndicate
+	for rows.Next() {
+		var s models.Syndicate
+		err := rows.Scan(&s.ID, &s.Name, &s.Description, &s.CreatedAt, &s.OwnerID)
+		if err == nil {
+			syndicates = append(syndicates, s)
+		}
+	}
+	return syndicates
+}
+
+func GetSyndicatesByOwner(db *sql.DB, ownerID int) []models.Syndicate {
+	rows, err := db.Query(`
+		SELECT id, name, description, created_at, owner_id 
+		FROM syndicates 
+		WHERE owner_id = ?`, ownerID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var syndicates []models.Syndicate
+	for rows.Next() {
+		var s models.Syndicate
+		err := rows.Scan(&s.ID, &s.Name, &s.Description, &s.CreatedAt, &s.OwnerID)
+		if err == nil {
+			syndicates = append(syndicates, s)
+		}
+	}
+	return syndicates
+}
+
+func GetSyndicateMembers(db *sql.DB, syndicateID int) []models.SyndicateMember {
+	rows, err := db.Query(`
+		SELECT m.user_id, u.username, m.joined_at
+		FROM syndicate_members m
+		JOIN users u ON u.id = m.user_id
+		WHERE m.syndicate_id = ?
+	`, syndicateID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var members []models.SyndicateMember
+	for rows.Next() {
+		var m models.SyndicateMember
+		err := rows.Scan(&m.UserID, &m.UserID, &m.JoinedAt)
+		if err == nil {
+			members = append(members, m)
+		}
+	}
+	return members
+}
+
+func IsSyndicateManager(db *sql.DB, syndicateID, userID int) bool {
+	var count int
+	err := db.QueryRow(`
+		SELECT COUNT(*) FROM syndicates 
+		WHERE id = ? AND owner_id = ?
+	`, syndicateID, userID).Scan(&count)
+	return err == nil && count > 0
+}
+
+func IsSyndicateMember(db *sql.DB, syndicateID, userID int) bool {
+	var count int
+	err := db.QueryRow(`SELECT COUNT(*) FROM syndicate_members WHERE syndicate_id = ? AND user_id = ?`, syndicateID, userID).Scan(&count)
+	return err == nil && count > 0
+}
--- a/internal/storage/mysql/syndicate/update.go
+++ b/internal/storage/mysql/syndicate/update.go
@@ -0,0 +1,14 @@
+package storage
+
+import (
+	"database/sql"
+)
+
+func UpdateInviteStatus(db *sql.DB, inviteID int, status string) error {
+	_, err := db.Exec(`
+		UPDATE syndicate_invites
+		SET status = ?
+		WHERE id = ?
+	`, status, inviteID)
+	return err
+}
--- a/internal/storage/mysql/tickets/create.go
+++ b/internal/storage/mysql/tickets/create.go
@@ -0,0 +1,70 @@
+package storage
+
+import (
+	"database/sql"
+	"log"
+	"synlotto-website/internal/helpers"
+	"synlotto-website/internal/models"
+)
+
+// ToDo: Has both insert and select need to break into read and write.
+func InsertTicket(db *sql.DB, ticket models.Ticket) error {
+	var bonus1Val interface{}
+	var bonus2Val interface{}
+
+	if ticket.Bonus1 != nil {
+		bonus1Val = helpers.Nullable(*ticket.Bonus1)
+	} else {
+		bonus1Val = nil
+	}
+
+	if ticket.Bonus2 != nil {
+		bonus2Val = helpers.Nullable(*ticket.Bonus2)
+	} else {
+		bonus2Val = nil
+	}
+
+	query := `
+	SELECT COUNT(*) FROM my_tickets
+	WHERE game_type = ? AND draw_date = ?
+	  AND ball1 = ? AND ball2 = ? AND ball3 = ?
+	  AND ball4 = ? AND ball5 = ? AND bonus1 IS ? AND bonus2 IS ?;`
+
+	var count int
+	err := db.QueryRow(query,
+		ticket.GameType,
+		ticket.DrawDate,
+		ticket.Ball1,
+		ticket.Ball2,
+		ticket.Ball3,
+		ticket.Ball4,
+		ticket.Ball5,
+		bonus1Val,
+		bonus2Val,
+	).Scan(&count)
+
+	isDuplicate := count > 0
+
+	insert := `
+	INSERT INTO my_tickets (
+		game_type, draw_date,
+		ball1, ball2, ball3, ball4, ball5,
+		bonus1, bonus2, duplicate
+	) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?);`
+
+	_, err = db.Exec(insert,
+		ticket.GameType, ticket.DrawDate,
+		ticket.Ball1, ticket.Ball2, ticket.Ball3,
+		ticket.Ball4, ticket.Ball5,
+		bonus1Val, bonus2Val,
+		isDuplicate,
+	)
+
+	if err != nil {
+		log.Println("❌ Failed to insert ticket:", err)
+	} else if isDuplicate {
+		log.Println("⚠️ Duplicate ticket detected and flagged.")
+	}
+
+	return err
+}
--- a/internal/storage/mysql/users/create.go
+++ b/internal/storage/mysql/users/create.go
@@ -0,0 +1,22 @@
+package storage
+
+// ToDo.. "errors" should this not be using my custom log wrapper
+import (
+	"context"
+	"database/sql"
+	"errors"
+
+	"synlotto-website/models"
+)
+
+type UsersRepo struct{ db *sql.DB}
+
+func NewUsersRepo(db *.sql.DB) *UsersRepo { return &UsersRepo{db: db} }
+
+func (r *UsersRepo) Create(ctx context.Context, username, passwordHash string, isAdmin bool) error {
+	_, err := r.db.ExecContext(ctx,
+		`INSERT INTO users (username, password_hash, is_admin) VALUES (?, ?, ?)`,
+		username, passwordHash, isAdmin,
+	)
+	return err
+}
--- a/internal/storage/mysql/users/read.go
+++ b/internal/storage/mysql/users/read.go
@@ -0,0 +1,34 @@
+package storage
+
+import (
+	"database/sql"
+
+	"synlotto-website/internal/logging"
+	"synlotto-website/internal/models"
+)
+
+func GetUserByID(db *sql.DB, id int) *models.User {
+	row := db.QueryRow("SELECT id, username, password_hash, is_admin FROM users WHERE id = ?", id)
+
+	var user models.User
+	err := row.Scan(&user.Id, &user.Username, &user.PasswordHash, &user.IsAdmin)
+	if err != nil {
+		if err != sql.ErrNoRows {
+			logging.Error("DB error:", err)
+		}
+		return nil
+	}
+
+	return &user
+}
+
+func GetUserByUsername(db *sql.DB, username string) *models.User {
+	row := db.QueryRow(`SELECT id, username, password_hash, is_admin FROM users WHERE username = ?`, username)
+
+	var u models.User
+	err := row.Scan(&u.Id, &u.Username, &u.PasswordHash, &u.IsAdmin)
+	if err != nil {
+		return nil
+	}
+	return &u
+}
--- a/internal/storage/sqlite/db.go
+++ b/internal/storage/sqlite/db.go
@@ -0,0 +1,53 @@
+package storage
+
+import (
+	"database/sql"
+	"log"
+
+	"synlotto-website/config"
+	"synlotto-website/logging"
+
+	_ "modernc.org/sqlite"
+)
+
+var db *sql.DB
+
+func InitDB(filepath string) *sql.DB {
+	var err error
+	cfg := config.Get()
+	db, err = sql.Open("sqlite", filepath)
+	if err != nil {
+		log.Fatal("❌ Failed to open DB:", err)
+	}
+
+	schemas := []string{
+		SchemaUsers,
+		SchemaThunderballResults,
+		SchemaThunderballPrizes,
+		SchemaLottoResults,
+		SchemaMyTickets,
+		SchemaUsersMessages,
+		SchemaUsersNotifications,
+		SchemaAuditLog,
+		SchemaAuditLogin,
+		SchemaLogTicketMatching,
+		SchemaAdminAccessLog,
+		SchemaNewAuditLog,
+		SchemaSyndicates,
+		SchemaSyndicateMembers,
+		SchemaSyndicateInvites,
+		SchemaSyndicateInviteTokens,
+	}
+	if cfg == nil {
+		logging.Error("❌ config is nil — did config.Init() run before InitDB?")
+		panic("config not ready")
+	}
+
+	for _, stmt := range schemas {
+		if _, err := db.Exec(stmt); err != nil {
+			log.Fatalf("❌ Failed to apply schema: %v", err)
+		}
+	}
+
+	return db
+}
--- a/internal/storage/sqlite/schema.go
+++ b/internal/storage/sqlite/schema.go
@@ -0,0 +1,238 @@
+package storage
+
+const SchemaUsers = `
+CREATE TABLE IF NOT EXISTS users (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	username TEXT NOT NULL UNIQUE,
+	password_hash TEXT NOT NULL,
+	is_admin BOOLEAN
+);`
+
+const SchemaThunderballResults = `
+CREATE TABLE IF NOT EXISTS results_thunderball (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	draw_date TEXT NOT NULL UNIQUE,
+	draw_id INTEGER NOT NULL UNIQUE,
+	machine TEXT,
+	ballset TEXT,
+	ball1 INTEGER,
+	ball2 INTEGER,
+	ball3 INTEGER,
+	ball4 INTEGER,
+	ball5 INTEGER,
+	thunderball INTEGER
+);`
+
+const SchemaThunderballPrizes = `
+CREATE TABLE IF NOT EXISTS prizes_thunderball (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	draw_id INTEGER NOT NULL,
+	draw_date TEXT,
+	prize1 TEXT,
+	prize1_winners INTEGER,
+	prize1_per_winner INTEGER,
+	prize1_fund INTEGER,
+	prize2 TEXT,
+	prize2_winners INTEGER,
+	prize2_per_winner INTEGER,
+	prize2_fund INTEGER,
+	prize3 TEXT,
+	prize3_winners INTEGER,
+	prize3_per_winner INTEGER,
+	prize3_fund INTEGER,
+	prize4 TEXT,
+	prize4_winners INTEGER,
+	prize4_per_winner INTEGER,
+	prize4_fund INTEGER,
+	prize5 TEXT,
+	prize5_winners INTEGER,
+	prize5_per_winner INTEGER,
+	prize5_fund INTEGER,
+	prize6 TEXT,
+	prize6_winners INTEGER,
+	prize6_per_winner INTEGER,
+	prize6_fund INTEGER,
+	prize7 TEXT,
+	prize7_winners INTEGER,
+	prize7_per_winner INTEGER,
+	prize7_fund INTEGER,
+	prize8 TEXT,
+	prize8_winners INTEGER,
+	prize8_per_winner INTEGER,
+	prize8_fund INTEGER,
+	prize9 TEXT,
+	prize9_winners INTEGER,
+	prize9_per_winner INTEGER,
+	prize9_fund INTEGER,
+	total_winners INTEGER,
+	total_prize_fund INTEGER,
+	FOREIGN KEY (draw_date) REFERENCES results_thunderball(draw_date)
+);`
+
+const SchemaLottoResults = `
+CREATE TABLE IF NOT EXISTS results_lotto (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	draw_date TEXT NOT NULL UNIQUE,
+	draw_id INTEGER NOT NULL UNIQUE,
+	machine TEXT,
+	ballset TEXT,
+	ball1 INTEGER,
+	ball2 INTEGER,
+	ball3 INTEGER,
+	ball4 INTEGER,
+	ball5 INTEGER,
+	ball6 INTEGER,
+	bonusball INTEGER
+);`
+
+const SchemaMyTickets = `
+CREATE TABLE IF NOT EXISTS my_tickets (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	userId INTEGER NOT NULL,
+	game_type TEXT NOT NULL,
+	draw_date TEXT NOT NULL,
+	ball1 INTEGER,
+	ball2 INTEGER,
+	ball3 INTEGER,
+	ball4 INTEGER,
+	ball5 INTEGER,
+	ball6 INTEGER,
+	bonus1 INTEGER,
+	bonus2 INTEGER,
+	duplicate BOOLEAN DEFAULT 0,
+	purchase_date TEXT,
+	purchase_method TEXT,
+	image_path TEXT,
+	created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+	matched_main INTEGER,
+	matched_bonus INTEGER,
+	prize_tier TEXT,
+	is_winner BOOLEAN,
+	prize_amount INTEGER,
+	prize_label TEXT,
+	syndicate_id INTEGER,
+	FOREIGN KEY (userId) REFERENCES users(id)
+);`
+
+const SchemaUsersMessages = `
+CREATE TABLE IF NOT EXISTS users_messages (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	senderId INTEGER NOT NULL REFERENCES users(id),
+	recipientId INTEGER NOT NULL REFERENCES users(id),
+	subject TEXT NOT NULL,
+	message TEXT,
+	is_read BOOLEAN DEFAULT FALSE,
+	is_archived BOOLEAN DEFAULT FALSE,
+	created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+	archived_at TIMESTAMP
+);`
+
+const SchemaUsersNotifications = `
+CREATE TABLE IF NOT EXISTS users_notification (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	user_id INTEGER NOT NULL REFERENCES users(id),
+	subject TEXT,
+	body TEXT,
+	is_read BOOLEAN DEFAULT FALSE,
+	created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);`
+
+const SchemaAuditLog = `
+CREATE TABLE IF NOT EXISTS auditlog (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	username TEXT,
+	success INTEGER,
+	timestamp TEXT
+);`
+
+const SchemaLogTicketMatching = `
+CREATE TABLE IF NOT EXISTS log_ticket_matching (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	triggered_by TEXT,
+	run_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+	tickets_matched INTEGER,
+	winners_found INTEGER,
+	notes TEXT
+);`
+
+const SchemaAdminAccessLog = `
+CREATE TABLE IF NOT EXISTS admin_access_log (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	user_id INTEGER,
+	accessed_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+	path TEXT,
+	ip TEXT,
+	user_agent TEXT
+);`
+
+const SchemaNewAuditLog = `
+CREATE TABLE IF NOT EXISTS audit_log (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	user_id INTEGER,
+	username TEXT,
+	action TEXT,
+	path TEXT,
+	ip TEXT,
+	user_agent TEXT,
+	timestamp DATETIME DEFAULT CURRENT_TIMESTAMP
+);`
+
+const SchemaAuditLogin = `	
+	CREATE TABLE IF NOT EXISTS audit_login (
+		id INTEGER PRIMARY KEY AUTOINCREMENT,
+		username TEXT,
+		success BOOLEAN,
+		ip TEXT,
+		user_agent TEXT,
+		timestamp DATETIME DEFAULT CURRENT_TIMESTAMP
+	);`
+
+const SchemaSyndicates = `
+CREATE TABLE IF NOT EXISTS syndicates (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  name TEXT NOT NULL,
+  description TEXT,
+  owner_id INTEGER NOT NULL,
+  join_code TEXT UNIQUE,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (owner_id) REFERENCES users(id)
+);`
+
+const SchemaSyndicateMembers = `
+CREATE TABLE IF NOT EXISTS syndicate_members (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  syndicate_id INTEGER NOT NULL,
+  user_id INTEGER NOT NULL,
+  role TEXT DEFAULT 'member', -- owner, manager, member
+  status TEXT DEFAULT 'active',
+  joined_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  FOREIGN KEY (syndicate_id) REFERENCES syndicates(id),
+  FOREIGN KEY (user_id) REFERENCES users(id)
+);`
+
+const SchemaSyndicateInvites = `
+CREATE TABLE IF NOT EXISTS syndicate_invites (
+	id INTEGER PRIMARY KEY AUTOINCREMENT,
+	syndicate_id INTEGER NOT NULL,
+	invited_user_id INTEGER NOT NULL,
+	sent_by_user_id INTEGER NOT NULL,
+	status TEXT DEFAULT 'pending',
+	created_at DATETIME DEFAULT CURRENT_TIMESTAMP,
+	FOREIGN KEY(syndicate_id) REFERENCES syndicates(id),
+	FOREIGN KEY(invited_user_id) REFERENCES users(id)
+);`
+
+const SchemaSyndicateInviteTokens = `
+CREATE TABLE IF NOT EXISTS syndicate_invite_tokens (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  syndicate_id INTEGER NOT NULL,
+  token TEXT NOT NULL UNIQUE,
+  invited_by_user_id INTEGER NOT NULL,
+  accepted_by_user_id INTEGER,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  accepted_at TIMESTAMP,
+  expires_at TIMESTAMP,
+  FOREIGN KEY (syndicate_id) REFERENCES syndicates(id),
+  FOREIGN KEY (invited_by_user_id) REFERENCES users(id),
+  FOREIGN KEY (accepted_by_user_id) REFERENCES users(id)
+);`
--- a/internal/storage/sqlite/syndicate.go
+++ b/internal/storage/sqlite/syndicate.go
@@ -0,0 +1,125 @@
+package storage
+
+import (
+	"database/sql"
+	"fmt"
+	"synlotto-website/models"
+	"time"
+)
+
+// todo should be a ticket function?
+func GetSyndicateTickets(db *sql.DB, syndicateID int) []models.Ticket {
+	rows, err := db.Query(`
+		SELECT id, userId, syndicateId, game_type, draw_date, ball1, ball2, ball3, ball4, ball5, ball6,
+		       bonus1, bonus2, matched_main, matched_bonus, prize_tier, prize_amount, prize_label, is_winner
+		FROM my_tickets
+		WHERE syndicateId = ?
+		ORDER BY draw_date DESC
+	`, syndicateID)
+	if err != nil {
+		return nil
+	}
+	defer rows.Close()
+
+	var tickets []models.Ticket
+	for rows.Next() {
+		var t models.Ticket
+		err := rows.Scan(
+			&t.Id, &t.UserId, &t.SyndicateId, &t.GameType, &t.DrawDate,
+			&t.Ball1, &t.Ball2, &t.Ball3, &t.Ball4, &t.Ball5, &t.Ball6,
+			&t.Bonus1, &t.Bonus2, &t.MatchedMain, &t.MatchedBonus,
+			&t.PrizeTier, &t.PrizeAmount, &t.PrizeLabel, &t.IsWinner,
+		)
+		if err == nil {
+			tickets = append(tickets, t)
+		}
+	}
+	return tickets
+}
+
+// both a read and inset break up
+func AcceptInvite(db *sql.DB, inviteID, userID int) error {
+	var syndicateID int
+	err := db.QueryRow(`
+		SELECT syndicate_id FROM syndicate_invites
+		WHERE id = ? AND invited_user_id = ? AND status = 'pending'
+	`, inviteID, userID).Scan(&syndicateID)
+	if err != nil {
+		return err
+	}
+
+	if err := UpdateInviteStatus(db, inviteID, "accepted"); err != nil {
+		return err
+	}
+
+	_, err = db.Exec(`
+		INSERT INTO syndicate_members (syndicate_id, user_id, joined_at)
+		VALUES (?, ?, CURRENT_TIMESTAMP)
+	`, syndicateID, userID)
+	return err
+}
+
+func CreateSyndicate(db *sql.DB, ownerID int, name, description string) (int64, error) {
+	tx, err := db.Begin()
+	if err != nil {
+		return 0, err
+	}
+	defer tx.Rollback()
+
+	result, err := tx.Exec(`
+		INSERT INTO syndicates (name, description, owner_id, created_at)
+		VALUES (?, ?, ?, ?)
+	`, name, description, ownerID, time.Now())
+	if err != nil {
+		return 0, fmt.Errorf("failed to create syndicate: %w", err)
+	}
+
+	syndicateID, err := result.LastInsertId()
+	if err != nil {
+		return 0, fmt.Errorf("failed to get syndicate ID: %w", err)
+	}
+
+	_, err = tx.Exec(`
+		INSERT INTO syndicate_members (syndicate_id, user_id, role, joined_at)
+		VALUES (?, ?, 'manager', CURRENT_TIMESTAMP)
+	`, syndicateID, ownerID)
+	if err != nil {
+		return 0, fmt.Errorf("failed to add owner as member: %w", err)
+	}
+
+	if err := tx.Commit(); err != nil {
+		return 0, fmt.Errorf("commit failed: %w", err)
+	}
+
+	return syndicateID, nil
+}
+
+func InviteToSyndicate(db *sql.DB, inviterID, syndicateID int, username string) error {
+	var inviteeID int
+	err := db.QueryRow(`
+		SELECT id FROM users WHERE username = ?
+	`, username).Scan(&inviteeID)
+	if err == sql.ErrNoRows {
+		return fmt.Errorf("user not found")
+	} else if err != nil {
+		return err
+	}
+
+	var count int
+	err = db.QueryRow(`
+		SELECT COUNT(*) FROM syndicate_members
+		WHERE syndicate_id = ? AND user_id = ?
+	`, syndicateID, inviteeID).Scan(&count)
+	if err != nil {
+		return err
+	}
+	if count > 0 {
+		return fmt.Errorf("user already a member or invited")
+	}
+
+	_, err = db.Exec(`
+		INSERT INTO syndicate_members (syndicate_id, user_id, is_manager, status)
+		VALUES (?, ?, 0, 'invited')
+	`, syndicateID, inviteeID)
+	return err
+}
--- a/internal/storage/sqlite/thunderball/statisticqueries.go
+++ b/internal/storage/sqlite/thunderball/statisticqueries.go
@@ -0,0 +1,266 @@
+package storage
+
+// ToDo: The last seen statistic is done in days, maybe change or add in how many draws x days ways for ease.
+// Top 5 main numbers since inception of the game.
+const top5AllTime = `
+SELECT ball AS Number, COUNT(*) AS Frequency
+FROM (
+SELECT ball1 AS ball FROM results_thunderball
+UNION ALL SELECT ball2 FROM results_thunderball
+UNION ALL SELECT ball3 FROM results_thunderball
+UNION ALL SELECT ball4 FROM results_thunderball
+UNION ALL SELECT ball5 FROM results_thunderball
+)
+GROUP BY ball
+ORDER BY Frequency DESC, Number
+LIMIT 5;`
+
+// Top 5 main numbers since the ball count change on May 9th 2010.
+const top5Since = `
+SELECT ball AS Number, COUNT(*) AS Frequency
+FROM (
+SELECT ball1 AS ball FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+UNION ALL SELECT ball2 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+UNION ALL SELECT ball3 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+UNION ALL SELECT ball4 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+UNION ALL SELECT ball5 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+)
+GROUP BY ball
+ORDER BY Frequency DESC, Number
+LIMIT 5;`
+
+// Top 5 main numbers in the last 180 draws.
+const top5Last180draws = `
+SELECT ball AS Number, COUNT(*) AS Frequency
+FROM (
+    SELECT ball1 AS ball FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+    UNION ALL
+    SELECT ball2 FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+    UNION ALL
+    SELECT ball3 FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+    UNION ALL
+    SELECT ball4 FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+    UNION ALL
+    SELECT ball5 FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+)
+GROUP BY ball
+ORDER BY Frequency DESC
+LIMIT 5;`
+
+// The top 5 thunderballs drawn since the inception of the game.
+const top5ThunderballAllTime = `
+SELECT thunderball AS Number, COUNT(*) AS Frequency
+FROM (
+	SELECT thunderball AS thunderball FROM results_thunderball
+	)
+GROUP BY thunderball
+ORDER BY Frequency DESC, Number
+LIMIT 5;`
+
+// The top 5 thunderballs drawn since the ball count change on May 9th 2010.
+const top5ThunderballSince = `
+SELECT thunderball AS Number, COUNT(*) AS Frequency
+FROM (
+	SELECT thunderball AS thunderball FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+	)
+GROUP BY thunderball
+ORDER BY Frequency DESC, Number
+LIMIT 5;`
+
+const top5TunderballLast180draws = `
+SELECT thunderball AS Number, COUNT(*) AS Frequency
+FROM (
+    SELECT thunderball AS thunderball FROM (
+        SELECT * FROM results_thunderball ORDER BY date(draw_date) DESC LIMIT 180
+    )
+)
+GROUP BY thunderball
+ORDER BY Frequency DESC
+LIMIT 5;`
+
+const thunderballMainLastSeen = `
+SELECT 
+    n.ball AS Number,
+    julianday('now') - julianday(MAX(r.draw_date)) AS DaysSinceLastDrawn,
+    MAX(r.draw_date) AS LastDrawDate
+FROM (
+    SELECT ball1 AS ball, draw_date FROM results_thunderball
+    UNION ALL
+    SELECT ball2, draw_date FROM results_thunderball
+    UNION ALL
+    SELECT ball3, draw_date FROM results_thunderball
+    UNION ALL
+    SELECT ball4, draw_date FROM results_thunderball
+    UNION ALL
+    SELECT ball5, draw_date FROM results_thunderball
+) AS r
+JOIN (
+    -- This generates a list of all possible ball numbers (1–39)
+    SELECT 1 AS ball UNION ALL SELECT 2 UNION ALL SELECT 3 UNION ALL SELECT 4 UNION ALL SELECT 5 UNION ALL
+    SELECT 6 UNION ALL SELECT 7 UNION ALL SELECT 8 UNION ALL SELECT 9 UNION ALL SELECT 10 UNION ALL
+    SELECT 11 UNION ALL SELECT 12 UNION ALL SELECT 13 UNION ALL SELECT 14 UNION ALL SELECT 15 UNION ALL
+    SELECT 16 UNION ALL SELECT 17 UNION ALL SELECT 18 UNION ALL SELECT 19 UNION ALL SELECT 20 UNION ALL
+    SELECT 21 UNION ALL SELECT 22 UNION ALL SELECT 23 UNION ALL SELECT 24 UNION ALL SELECT 25 UNION ALL
+    SELECT 26 UNION ALL SELECT 27 UNION ALL SELECT 28 UNION ALL SELECT 29 UNION ALL SELECT 30 UNION ALL
+    SELECT 31 UNION ALL SELECT 32 UNION ALL SELECT 33 UNION ALL SELECT 34 UNION ALL SELECT 35 UNION ALL
+    SELECT 36 UNION ALL SELECT 37 UNION ALL SELECT 38 UNION ALL SELECT 39
+) AS n ON n.ball = r.ball
+GROUP BY n.ball
+ORDER BY DaysSinceLastDrawn DESC;`
+
+const thunderballLastSeen = `
+SELECT 
+    n.thunderball AS Number,
+    julianday('now') - julianday(MAX(r.draw_date)) AS DaysSinceLastDrawn,
+    MAX(r.draw_date) AS LastDrawDate
+FROM (
+    SELECT thunderball AS thunderball, draw_date FROM results_thunderball
+) AS r
+JOIN (
+    SELECT 1 AS thunderball UNION ALL SELECT 2 UNION ALL SELECT 3 UNION ALL SELECT 4 UNION ALL SELECT 5 UNION ALL
+    SELECT 6 UNION ALL SELECT 7 UNION ALL SELECT 8 UNION ALL SELECT 9 UNION ALL SELECT 10 UNION ALL
+    SELECT 11 UNION ALL SELECT 12 UNION ALL SELECT 13 UNION ALL SELECT 14 
+) AS n ON n.thunderball = r.thunderball
+GROUP BY n.thunderball
+ORDER BY DaysSinceLastDrawn DESC;`
+
+const thunderballCommonPairsSince = `
+WITH unpivot AS (
+  SELECT draw_date, ball1 AS ball FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball2 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball3 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball4 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball5 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+),
+pairs AS (
+  SELECT a.draw_date,
+         MIN(a.ball, b.ball) AS ball_a,
+         MAX(a.ball, b.ball) AS ball_b
+  FROM unpivot a
+  JOIN unpivot b
+    ON a.draw_date = b.draw_date
+   AND a.ball < b.ball
+)
+SELECT ball_a, ball_b, COUNT(*) AS frequency
+FROM pairs
+GROUP BY ball_a, ball_b
+ORDER BY frequency DESC, ball_a, ball_b
+LIMIT 25;`
+
+const thunderballCommonPairsLast180 = `
+WITH recent AS (
+  SELECT * FROM results_thunderball
+  ORDER BY date(draw_date) DESC
+  LIMIT 180
+),
+unpivot AS (
+  SELECT draw_date, ball1 AS ball FROM recent
+  UNION ALL SELECT draw_date, ball2 FROM recent
+  UNION ALL SELECT draw_date, ball3 FROM recent
+  UNION ALL SELECT draw_date, ball4 FROM recent
+  UNION ALL SELECT draw_date, ball5 FROM recent
+),
+pairs AS (
+  SELECT a.draw_date,
+         MIN(a.ball, b.ball) AS ball_a,
+         MAX(a.ball, b.ball) AS ball_b
+  FROM unpivot a
+  JOIN unpivot b
+    ON a.draw_date = b.draw_date
+   AND a.ball < b.ball
+)
+SELECT ball_a, ball_b, COUNT(*) AS frequency
+FROM pairs
+GROUP BY ball_a, ball_b
+ORDER BY frequency DESC, ball_a, ball_b
+LIMIT 25;`
+
+// Best pair balls if you choose x try picking these numbers that are frequencly seen with it (ToDo: Update this description)
+// ToDo No All Time for this, go back and ensure everything has an all time for completeness.
+const thunderballSepecificCommonPairsSince = `
+WITH unpivot AS (
+  SELECT draw_date, ball1 AS ball FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball2 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball3 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball4 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball5 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+),
+pairs AS (
+  SELECT a.draw_date,
+         MIN(a.ball, b.ball) AS ball_a,
+         MAX(a.ball, b.ball) AS ball_b
+  FROM unpivot a
+  JOIN unpivot b
+    ON a.draw_date = b.draw_date
+   AND a.ball < b.ball
+)
+SELECT
+  CASE WHEN ball_a = 26 THEN ball_b ELSE ball_a END AS partner,
+  COUNT(*) AS frequency
+FROM pairs
+WHERE ball_a = 26 OR ball_b = 26
+GROUP BY partner
+ORDER BY frequency DESC, partner
+LIMIT 20;`
+
+const thunderballCommonConsecutiveNumbersAllTime = `
+WITH unpivot AS (
+  SELECT draw_date, ball1 AS ball FROM results_thunderball
+  UNION ALL SELECT draw_date, ball2 FROM results_thunderball
+  UNION ALL SELECT draw_date, ball3 FROM results_thunderball
+  UNION ALL SELECT draw_date, ball4 FROM results_thunderball
+  UNION ALL SELECT draw_date, ball5 FROM results_thunderball
+),
+pairs AS (
+  SELECT a.draw_date,
+         MIN(a.ball, b.ball) AS a_ball,
+         MAX(a.ball, b.ball) AS b_ball
+  FROM unpivot a
+  JOIN unpivot b
+    ON a.draw_date = b.draw_date
+   AND a.ball < b.ball
+   AND ABS(a.ball - b.ball) = 1      -- consecutive only
+)
+SELECT a_ball AS num1, b_ball AS num2, COUNT(*) AS frequency
+FROM pairs
+GROUP BY a_ball, b_ball
+ORDER BY frequency DESC, num1, num2
+LIMIT 25;
+`
+
+const thunderballCommonConsecutiveNumbersSince = `
+WITH unpivot AS (
+  SELECT draw_date, ball1 AS ball FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball2 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball3 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball4 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+  UNION ALL SELECT draw_date, ball5 FROM results_thunderball WHERE date(draw_date) >= '2010-05-09'
+),
+pairs AS (
+  SELECT a.draw_date,
+         MIN(a.ball, b.ball) AS a_ball,
+         MAX(a.ball, b.ball) AS b_ball
+  FROM unpivot a
+  JOIN unpivot b
+    ON a.draw_date = b.draw_date
+   AND a.ball < b.ball
+   AND ABS(a.ball - b.ball) = 1      -- consecutive only
+)
+SELECT a_ball AS num1, b_ball AS num2, COUNT(*) AS frequency
+FROM pairs
+GROUP BY a_ball, b_ball
+ORDER BY frequency DESC, num1, num2
+LIMIT 25;
+`
+
+// Wait, double check common number queries, consecutive and consecutive numbers make sure ive not mixed them up