Security and Privacy
Understand CurbPress tenant isolation, credentials, file storage, and admin access boundaries.
Screenshot placeholder: CurbPress Settings with integrity status and sensitive values hidden.
Tenant Isolation
CurbPress validates tenant UUIDs, stores tenant registry data in MySQL, and stores tenant application data in isolated SQLite files.
Protected Storage
The SQLite storage directory is protected with Apache .htaccess and index.php files where possible. Database files are set to owner read/write permissions after creation.
Secret Handling
Hide Stripe secret keys, webhook secrets, license keys, and server credentials in screenshots. Tenant billing secrets should be set through secure server configuration.