SurexCore 0.1.2

Security
- public/.htaccess: hidden files and source/config/backup files return 403; security headers on static files; index.php?/ rewrite
- public/uploads/.htaccess: no script execution, no HTML/SVG/JS/CSS, documents downloaded
- App/, View/, routes/ deny access on their own
- SecurityHeaders filter: Permissions-Policy, COOP, HSTS on HTTPS; admin CSP, no-store, noindex
- Cookies Secure on HTTPS, neutral session cookie name, session destroyed on login, masked CSRF token
- Editor HTML sanitized on save (HtmlSanitizer)
- Uploaded images re-encoded: EXIF/GPS and hidden payloads removed, photos turned upright (ImageCleaner)

Deploy
- One-click deploy packages in 設定 → バックアップ: 初回公開用 (site + data + .env template) / 更新用 (program only)

SurexCore 0.1.1

- Laravel-style models: NewsModel::published()->latest()->paginate(10), firstOrFail(), whereJsonContains(), scopes
- Generators: php spark make:cms-model / make:cms-controller
- Page controller for view-only pages
- Relation field (関連付け) and trash (ゴミ箱) with restore / delete / empty
- Publish period: optional 公開終了日時
- Contact form: file attachment; optional お問い合わせ inbox in the admin
- News sample with every field kind (php spark db:seed NewsSample)
- Frontend: SEO/OGP layout, Sass + JS module structure, welcome page
- Field builder: repeater settings visible again
- README updated

SurexCore 0.1.0 — Developer Preview

SurexCore 0.1.0 — developer preview

Lightweight CMS for shared hosting on CodeIgniter 4 + BladeOne: content types with an ACF-style field builder, Blade frontend, preview, media library, backups, sitemap, contact form, roles and an installer. Includes a welcome page, a sample (News), Docker setup, deploy.sh and a README with setup and deployment guides.