Updating and backups
Updating
Replace every file except config.php, data/ and uploads/. Database upgrades run automatically on the next page load, with no installer to run.
If your hosting panel deploys from Git, pushing a new version updates the site on its own. When JotKite has been upgraded, Admins see a notice saying which version it moved to and what's new, until they dismiss it.
On GeoRank sites, updates come through GeoRank and never touch posts or images.
Backups
Your whole blog is two things:
data/postbase.sqlite: all posts, pages, users and settings. (The file keeps its original name.)uploads/: your images.
Copy both and you have a complete backup. To restore, put them back.
Security built in
- Every post passes a server-side HTML allowlist before it's saved.
- CSRF tokens,
password_hashand login throttling. data/is locked, anduploads/can serve images but never runs code.
