Security
- Two-step login – after entering an e-mail and password the system sends a six-digit code or a link; only after confirming it does the session get editing rights.
- Safe passwords – editors’ passwords are stored only as a hash (password_hash).
- Intrusion attempt log – failed logins and site scanning go to a shared log with the country of origin.
- Automatic blocking – too many suspicious attempts from one address within a day result in a temporary block.
- Visitor privacy – statistics store neither IP addresses nor cookies; a regular visitor gets no session cookie at all.
- Panel protection – access to the panel can be limited to a chosen IP address, and the panel file itself can have any name.