Safety
What the module refuses to do
- No writes at all, neither URL rewriting nor anonymisation, while the shop is open to the public.
- A typed confirmation is required on every call, not only the first one.
- Table and column names are filtered before any query.
- Serialised values are never deserialised: no arbitrary code can be woken up by the process.
- Every operation is logged with its date, scope, result and the employee who started it.