<?php
require_once __DIR__ . '/../app/helpers/functions.php';
$title = 'Astrabank — Security';
include __DIR__ . '/../views/partials/head.php';
include __DIR__ . '/../views/partials/nav_website.php';
?>
<div class="container py-5">
  <h1 class="fw-bold mb-2">Security</h1>
  <p class="ab-muted mb-4">Astrabank uses modern security patterns for authentication, verification, and auditability.</p>

  <div class="card ab-card p-4">
    <ul class="m-0">
      <li><b>Password hashing</b> using PHP password_hash/password_verify</li>
      <li><b>Email OTP</b> for high-risk actions (wires, crypto sends, beneficiary verification)</li>
      <li><b>CSRF protection</b> on all POST forms</li>
      <li><b>Prepared statements (PDO)</b> to prevent SQL injection</li>
      <li><b>Audit logs</b> with actor, action, IP, and metadata</li>
      <li><b>Role-based access</b> for admin modules</li>
    </ul>
  </div>
</div>
<?php include __DIR__ . '/../views/partials/foot.php'; ?>
