DYSON DSIR PRODUCTION SECURITY NOTES

1. Upload the contents of this package only. Do not upload old ZIP/SQL/backup copies into public_html.
2. config/database.local.php is blocked from web access. Prefer hosting environment variables when available.
3. Rotate the database, hosting, FTP/SFTP and administrator passwords after deployment.
4. Verify Google Search Console > Security Issues and request a review after the clean deployment is live.
5. Do not bypass Chrome Safe Browsing warnings during cleanup.
6. Public self-signup has been disabled; administrators create users from User Management.
7. Delete any old DSIR folders, installers, test copies and backup archives from the hosting account before requesting review.
