Security

Security

This package uses password hashing, prepared database statements, CSRF tokens on write forms, session regeneration on login, restricted storage access and baseline response headers. Production hosting should also enable TLS, backups, malware scanning, update management, rate limiting and monitoring.

Report a vulnerability

Send security reports to [email protected]. Do not access or alter data that is not yours while testing.