Looking for security / performance experts

...

Thank you very much for that j11,

I will try to find how to lock CSRF now, had no idea we can lock it, but as the database transaction part I think that's perfect if everything is happening in the server itself (no API call to foreign websites)

As for security part, I will try to do all of them, had no idea about part 5 tho, ssh-rsa , thanks for teaching me that (I just knew about changing SSH port)