9837c76692
Fixes #146 Can be optionally activated by the FlatPress admin * Content Security Policy is an effective measure to protect your site from XSS attacks. By whitelisting sources for approved content, you can prevent the browser from loading malicious content. * Permissions Policy is a new header that allows a site to control which features and APIs can be used in the browser. * HTTP Strict Transport Security is an excellent feature to support on your site and strengthens your implementation of TLS by getting the User Agent to enforce the use of HTTPS. * The X-Download-Options response header instructs the browser not to open the file directly but to offer it for download first. This mitigates some potential Social Engineering attacks. * HTTP Strict Transport Security (HSTS for short) is a security mechanism for HTTPS connections that protects against both connection encryption downgrade attack and session hijacking. * The referrer policy directive determines whether, and if so which, referrer information for requests triggered by the current web page is sent by the web browser in HTTP requests.
Welcome to FlatPress!
FlatPress is a lightweight, easy-to-set-up blogging engine. Plain and simple, just PHP. No database needed!
Features
- Independent, standard-compliant blog software
- Works on files, no database
- Easy to setup, easy to backup
- Powerful plugin system with widget support
- Easy to customize with themes, powered by Smarty
- Comments function with spam protection
- Free software under GNU GPLv2
Getting started
Installing and running FlatPress is really easy:
- Download FlatPress, unzip, upload
- Browse to your web server, run simple FlatPress installer
- Enjoy blogging with FlatPress!
Help and support
Visit our wiki to learn everything about blogging with FlatPress, how to work with themes and plugins and where to find them. The wiki also has the General FAQ and the Tech FAQ.
Ask your questions, show off your FlatPress blog and meet fellow FlatPressers at the support forum.
Requirements
FlatPress runs on any web server (e.g. Apache or IIS) with PHP 7.1 to PHP 8.1 (more details on the wiki). Since all data is stored in files, no database is needed.
Credits
There are many people who contributed to FlatPress over the years. See them here.