Laird Lonergan (SillyLaird) — Personal Homepage

Ops, security, and visual cleanup pass. Fixed nightly backup and uptime cron scripts (executable bits so maintenance actually runs); removed a broken missing-script cron entry. Blocked public download of ops docs, tools, and SQLite databases on the blog and changelog hosts; locked guestbook internal PHP bootstrap files at the edge. Blog public pages no longer open a session for anonymous readers; guestbook sessions start only when a form/captcha needs them. Blog gained HSTS/CSP headers; legacy blog login redirects to the unified admin. Friend/badge links that only work over plain HTTP (lolwut, 711chan, 9p.sdf, etc.) use http:// so they stop looking “dead” under TLS. Homepage dropped the “more links loading…” filler tiles; startpage now uses the shared site footer (comfort spacing stays on the header control); collection empty photo slots and badge alts tidied; guestbook form/comments pick up site mono fonts; admin panel styles moved into a dedicated stylesheet; 404/50x got skip-to-content anchors; bbs.php permanently redirects to the diary BBS. Locale key parity cleaned up. Link/html audits still green.

Hardening and hygiene. Admin password moved out of the web root (supports password_hash + legacy sha256); robots.txt disallows admin/API/tools; security headers are nginx-only (no PHP duplicates); homepage no longer sets a session cookie for anonymous visitors. /mstartpage/ permanently redirects to /startpage/. Shared head_meta on section indexes; locale dicts filled to parity; image budget scans startpage/gaming/computers and oversized assets recompressed; maintenance cron for backup, uptime, and audits; docs refreshed for the PHP layout.