The update separates the forum and website databases, corrects origin-IP exposure through mail and avatar handling, and restricts direct access to the web server. Unused maintenance files have been removed and file permissions reviewed. Further password-storage improvements are planned.