Private file vault
Premium files use opaque names in a server directory denied from direct HTTP access.
Security + IP safeguards
Layered protection, clearly stated.
The site removes direct public access to premium files and uses server-side controls appropriate for a GoDaddy cPanel deployment.
Included controls
What the published package does.
The controls protect ordinary commercial access and materially reduce accidental disclosure. They do not promise absolute prevention of copying.
Authenticated delivery
Downloads pass through PHP after account, entitlement and license checks.
Server-side logic
Full premium calculations and criteria are absent from public JavaScript.
Password security
Passwords use PHP’s current password-hashing algorithm, secure sessions and forced reauthentication controls.
Abuse controls
Login, registration, contact, public-tool and download actions are rate-limited and logged.
Browser hardening
Security headers, HTTPS redirects, frame restrictions, content-type controls and directory-index blocking are configured in .htaccess.
Customer responsibilities
Members must protect credentials, use current devices and browsers, avoid untrusted shared computers, report suspicious access and follow the Digital Product License.
Responsible disclosure
Security concerns should be reported privately to greenwb@hrisaudit.com. Do not access, alter, retain or disclose data beyond what is necessary to describe the issue.
Limitations
Once an authorized person receives a downloadable file, ordinary web controls cannot make copying impossible. The system combines technical deterrence, access traceability, licensing and selective publication. The most sensitive benchmarks, calibration and client-specific know-how are not included in mass-market downloads.
Operational hardening
Keep PHP and hosting software current, use a unique administrator password, enable multi-factor authentication on the GoDaddy account, maintain offline backups, review member and download logs, revoke unused accounts and connect a reputable payment provider before activating public sales.