PASS Installer rejects private files in document root
PASS Installer accepts account-home private folder
PASS Incorrect installation key rejected
PASS Matching private installation key accepted
PASS App address trailing slash normalized
PASS MySQL DSN constructed from validated fields
PASS Unique setup and encryption keys generated
PASS Public HTTP app address rejected
PASS Query strings rejected in app address
PASS Database host injection rejected
PASS Database name injection rejected
PASS Invalid database port rejected
PASS Empty database accepted
PASS Existing website database rejected before writes
PASS Hosting setup page renders without pre-existing config
PASS Private installation key never exposed in setup response
PASS Hosting setup refuses public HTTP
PASS Setup POST rejects missing session CSRF
PASS Setup POST checks private key before database access
PASS Setup errors never echo submitted passwords
PASS PHP configuration serialization preserves password special characters
PASS Private configuration written with owner-only permissions
PASS Existing configuration cannot be overwritten
PASS Configured installer no longer exposes setup form
PASS Hosting wizard completes real MySQL installation
PASS Hosting wizard imports 51 products
PASS Hosting wizard creates hashed administrator credentials
PASS Completed hosting installation cannot run again

28 installer checks passed.
