Changelog

🔐 Production-ready security

• • CSRF tokens on all admin forms
• • Login rate limiting (5 attempts → 5 min lockout)
• • Validation for site_id, session and message length
• • Security headers: X-Frame-Options, nosniff, Referrer-Policy
• • .htaccess blocks reset_admin.php, includes/, channels/, sites/
• • XSS-safe chat widget (textContent instead of innerHTML)

👁 Demo account (read-only)

Login demo / password demo — browse sites and chat history without permission to change settings, admin password or delete data.

📱 Responsive UI

• • Chat widget: fullscreen on phone, 380px tablet, 420px desktop
• • Admin panel: mobile menu, 44px touch targets
• • Refined site cards and form layout

🌍 100% translations

Landing and SEO copy in 8 languages: UA, EN, RU, NO, LT, SV, PL, DE. Admin panel: UA, EN, RU, NO — every string covered.

🔍 SEO and microdata

• • Open Graph, Twitter Card, hreflang, canonical URLs
• • JSON-LD: SoftwareApplication, FAQPage, Organization, WebSite, BreadcrumbList
• • Updated changelog and documentation (UA + EN)

🐛 Bug fixes

• • Critical cache bug in functions.php (undefined $json variable)
• • Unified version 5.0 across all files
• • display_errors disabled in production