Security
Logovaro is being developed with security in mind across accounts, permissions, sessions and platform access.
Password protection
User passwords are not stored as readable plain text. Passwords are processed using secure password hashing before being saved in the database.
Account approval
New registrations can require approval before access to protected parts of Logovaro is granted.
Accounts can also be activated or deactivated when required.
Role-based access
Logovaro uses role-based access controls to separate Student, Teacher, Manager and Owner functionality.
Protected pages check whether a user has the correct role before access is allowed.
Session security
Logovaro uses authenticated sessions to identify signed-in users while they move through the platform.
Session identifiers are regenerated after successful authentication to help reduce session fixation risks.
Protected actions
Sensitive administrative actions can be protected against cross-site request forgery using CSRF tokens.
This protection is used for actions such as account approval, role changes and account activation.
Secure connections
The live Logovaro website uses HTTPS so information exchanged between the browser and the platform is encrypted while in transit.
Ongoing security development
Logovaro is an evolving platform. Security controls, monitoring and testing will continue to develop as new features are introduced.