#scurit

Tracking visits on a PHP portfolio without Google Analytics, without cookies, without a database and without a GDPR banner. Anonymized IP, protected log file, custom dashboard — the security choices that make it legal.

How to implement a comment system in pure PHP with JSON storage, honeypot anti-spam, rate limiting and CSRF — without any external dependency.

Complete security audit of a Debian 12 server after a brute force attack: custom fail2ban, SSH/SFTP chroot, auditd, permissions, automated AI audit, Docker, HTTP headers.