Access
Secure sessions, hashed passwords and role separation.
Security
A clean foundation for customer trust.
Security starts with simple, consistent choices in the application.
Data
Conversations and accounts stored with utf8mb4 encoding and prepared queries.
Visibility
Public pages are indexable, private areas are noindex and admin is protected.
Operations
Server errors are logged without exposing details to visitors.
Application controls
Protections visible in code and operations.
FeedbackChat separates marketing pages, logged-in accounts, payment and administration. That separation reduces risk and makes audits easier.
Authentication
Accounts use password_hash, HTTP-only sessions and session id regeneration after login. Private pages verify the session before showing account data.
Database
MySQL queries use PDO prepared statements to reduce SQL injection risk. Connection failures are logged server-side and converted into readable user messages.
Administration
The superadmin folder is protected by HTTP Basic Auth through .htaccess and by a PHP fallback check if the server ignores Apache rules. Admin pages are noindex.
Stripe payment
The payment page uses Stripe Payment Links so no secret key is exposed in the browser. Real keys and links stay in server configuration.
SEO and privacy
Public pages are indexable, while private and superadmin areas are excluded from robots.txt. Canonical tags prevent duplicates between old technical URLs and clean URLs.
AI and MCP integrations
MCP integrations should be limited to approved sources: CRM, product catalog, billing or documentation. AI assistants should receive only the data needed to answer.
Before production
Secure deployment checklist
- Enable HTTPS with a valid certificate and one canonical-domain redirect.
- Import install.sql and use a dedicated MySQL user with limited privileges.
- Replace test Stripe links with production links.
- Change the superadmin password before production use.
- Check PHP/Apache logs after deployment and monitor 500 errors.
- Limit MCP connectors to tools the support team actually needs.
Security for live chat, AI support and CMS integrations
This page explains the important practices for customer messaging software: account security, shared inbox protection, conversation privacy, Stripe payment, superadmin access, WordPress integrations, Joomla modules, MCP connectors and AI assistance. The content helps search engines associate FeedbackChat with SaaS security, customer chat and multilingual support topics.