Security Notes

  • Do not output KEY() and internal IDs in front-end HTML.
  • Use CFGP_U::redirect() for redirects instead of manual header() calls.
  • Trigger cache invalidation only when needed (e.g., after changing geo rules), not on every request.
  • Do not apply geo rules to bots (CFGP_U::is_bot()) to avoid breaking SEO previews and crawls.
Was this page helpful?
Yes No