Security Policy

Infodex uses prepared statements, CSRF protection, rate limiting, session hardening, and security headers to reduce common web application risks.

Admin sessions use secure cookie settings, inactivity timeouts, and session regeneration after login and registration.

We also enforce basic browser protections such as anti-clickjacking and content security controls. In production, HTTPS should be enabled site-wide.

Back to Home