HTTPS and transport
Production is designed for HTTPS, secure cookies and HSTS when the request is served over TLS.
Security
Sécurité et confidentialité intégrées à la base.
KORDYRA applies layered controls to reduce common web risks while keeping claims limited to controls actually implemented in the website code.
Hardened sessions
Sessions use HttpOnly cookies, SameSite controls, strict-mode handling and periodic session-ID rotation.
Protected forms
Commercial forms use CSRF tokens, server-side validation, honeypot anti-spam controls and rate limiting.
Safer database access
Database interactions use PDO and prepared statements in implemented services.
Security headers
CSP, frame restrictions, content-type protection, referrer controls and cross-origin policies are emitted at the application layer.
Privacy choices
Only necessary cookies are enabled by default; analytics and marketing require an explicit user choice.
Responsible reporting
Security findings should reach the right team.
Before production, configure a dedicated security contact and disclosure process. This site does not publish a fictional security certification, audit result or bug-bounty program.