SECURITY
Security is part of the site architecture.
This website is designed to minimize exposed secrets and reduce common form, upload and application risks.
Built-in controls
The template separates public files from configuration and resume/support uploads, validates file type server-side, uses prepared SQL, CSRF tokens, HTTP security headers and anti-bot controls.
- HTTPS-only deployment
- Private config outside public_html
- Uploads stored outside public_html
- Prepared MySQL statements
- CSRF + honeypot + optional Turnstile
- Strict MIME/size checks on uploads
- Security headers and CSP baseline
- Rate limiting and WAF recommended
Report a security issue
Please do not test against production without authorization. For responsible vulnerability reports, use security@graceits.com after creating that mailbox. Until then, route reports to info@graceits.com.