Security Hardening, PrayerBoard Theme, and Smart Forms Stability
SmartKit’s June 27, 2026 update focuses on platform security, cleaner creator tools, stronger quiz protection, and a major new PrayerBoard display experience.
Stronger Platform Security
We completed a broad security hardening pass across the platform.
Around 20 internal development, debug, and migration scripts are now locked behind admin authentication, preventing unauthenticated access to sensitive maintenance tools.
We also fixed an identity-spoofing issue in the audio room signaling endpoint, added protection against denial-of-service and log-injection attempts in the audio debug logger, and added CSRF origin checking to the chat message delete endpoint.
The meeting scheduling email feature has also been hardened by fixing mail-header injection risks and removing raw error leakage. Internal log directories are now blocked from public access, and leftover leaked debug files created by a stray logging line have been cleaned up.
Sensitive values including LiveKit keys, worker secrets, and admin hashes can now be loaded from environment variables, reducing reliance on hardcoded credentials.
Election Tool Fixes
The Election Tool now handles missing candidate photos more gracefully. Broken external placeholder images have been replaced with local, theme-colored initials avatars, so candidate cards remain clean even when no photo is uploaded.
We also fixed spacing and alignment issues on the election management page, including buttons, badges, and candidate list layouts.
Smart Forms Builder Improvements
The Smart Forms Builder is now smoother and more stable.
Typing inside Section Title fields or the Max Stars field no longer causes the cursor to lose focus after every keystroke. Several leftover broken toolbar icons have also been removed for a cleaner interface.
Quiz settings received visual fixes too, including improved spacing for the Correct Answer, Marks, and Time Limit row, plus better alignment for radio and checkbox options.
Quiz timer protection has also been strengthened. Overall quiz timers and per-question timers are now tracked server-side, which means participants can no longer bypass timing rules by clearing cookies or switching to incognito mode. Per-question time limits are also enforced server-side for stronger quiz integrity.
We also removed an overlapping external Google Translate widget from public forms and fixed cover images so they display according to the original upload crop ratio without unwanted cropping.
New Abu Dhabi PrayerBoard Theme
PrayerBoard now includes a brand-new Abu Dhabi screen theme.
This new display style includes smooth dome-shaped prayer cards, a centered header with logo, clock, date, and temperature, a redesigned QR and app-install card, Sehri and Iftar display support, and a distinct “Silence Your Phone” reminder screen.
The reminder screen now appears automatically 2 minutes before Azan and 2 minutes before Jamaat, helping masjids guide visitors at the right time.
We also fixed several layout issues during the theme build, including prayer card spacing, title alignment, active prayer highlighting, QR text wrapping, clipped Sehri and Iftar boxes, and Arabic Hadees punctuation direction.
The new theme is also connected to the PrayerBoard PWA app, so colors now match automatically.
Tasbih Counter Improvements
The Tasbih Counter received layout and performance updates.
Participants and Completions boxes now stay inside the campaign card on narrower screens. We also fixed a site-wide theme-color meta tag issue that could cause a mismatched blue strip to flash at the top of the screen on iPhones.
Background sync has been optimized from every 5 seconds to every 10 seconds to reduce unnecessary server requests, while active tap counts still sync quickly in batches during use.
This update strengthens SmartKit from the inside out, with better security, cleaner interfaces, stronger timing enforcement, and a more polished experience across key tools.