Skip to main content
SRRU

Website Security Policy

Faculty of Humanities and Social Sciences, Surindra Rajabhat University

Last updated: 7 October 2026

1. Purpose

The Faculty of Humanities and Social Sciences, Surindra Rajabhat University sets this policy so that users can be confident that data sent through the website is protected, following the Cybersecurity Act B.E. 2562 (2019) and the Website Security Guideline of the National Cyber Security Agency (NCSA).

2. Encryption

  • The website is served over HTTPS only, encrypted with TLS 1.2 or later (TLS 1.3 supported).
  • Browsers are required to always use an encrypted connection (HTTP Strict Transport Security).
  • User passwords are stored as one-way hashes (bcrypt); nobody can read them.

3. Protection against attacks

  • A Content Security Policy is enforced and the site cannot be embedded in other websites.
  • HTML content is sanitised before display to prevent script injection (XSS).
  • Sign-in and forms are rate-limited to prevent password guessing and spam.
  • Uploaded files are checked for type and size.

4. Access control

  • Administrator permissions are role-based; each administrator can only access the areas assigned to them.
  • Administrators are signed out automatically after 8 hours of inactivity; member sign-ins last at most 7 days.
  • Administrator actions are logged for auditing.

5. Retention of computer traffic data

Computer traffic data is retained for at least 90 days as required by the Computer-Related Crime Act B.E. 2550 (2007) and the related notification of the Ministry of Digital Economy and Society.

6. Backup and maintenance

  • The database is backed up automatically on a regular schedule so the system can be restored after a failure.
  • Software and libraries are kept up to date to fix known vulnerabilities.

7. Advice for users

  • Check that the address is https://huso.srru.ac.th before entering any data or password.
  • Use a strong password of at least 8 characters that you do not use elsewhere.
  • Always sign out after using a shared computer.
  • The Faculty will never ask for your password by email, phone or message.

8. Reporting security issues

If you notice suspicious activity or a security vulnerability on the website, please report it to the webmaster at human@srru.ac.th with details. The Faculty will investigate and fix it as soon as possible.

9. Contact us

Faculty of Humanities and Social Sciences, Surindra Rajabhat University
Building 38, 186 Moo 1, Surin-Prasat Road, Nok Mueang, Mueang, Surin 32000, Thailand
Tel./Fax +66 44 513 369
Email human@srru.ac.th