Role-aware college records and administration
Access to private modules requires a signed-in account. This page explains platform controls and what hosting administrators must secure.
Application safeguards
Permissions are checked by user role and, where relevant, department or record ownership. Forms use CSRF tokens; sessions have a time limit; password hashes are stored instead of plaintext passwords; audit records track changes.
Administrator responsibility
Protect the private MySQL database and uploaded files, use HTTPS, configure strong administrator passwords, restrict cPanel access and take verified backups. Access permissions, email delivery, load performance and malware scanning should be reviewed before live institutional data is uploaded.
Search engine privacy
Public product information is indexable, while the application marks login, dashboards, people and financial records as noindex and requires server-side authentication.