HTTPS and transport
Production is designed for HTTPS, secure cookies and HSTS when the request is served over TLS.
Security
從基礎開始納入安全與隱私。
KORDYRA applies layered controls to reduce common web risks while keeping claims limited to controls actually implemented in the website code.
Hardened sessions
Sessions use HttpOnly cookies, SameSite controls, strict-mode handling and periodic session-ID rotation.
Protected forms
Commercial forms use CSRF tokens, server-side validation, honeypot anti-spam controls and rate limiting.
Safer database access
Database interactions use PDO and prepared statements in implemented services.
Security headers
CSP, frame restrictions, content-type protection, referrer controls and cross-origin policies are emitted at the application layer.
Privacy choices
Only necessary cookies are enabled by default; analytics and marketing require an explicit user choice.
Responsible reporting
Security findings should reach the right team.
Before production, configure a dedicated security contact and disclosure process. This site does not publish a fictional security certification, audit result or bug-bounty program.