Any suggestions on overall Xenforo security (admin panel, anti-spam, injections, etc) *including* protection on someone stealing your XF theme via scraping or such?
You could protect admin.php with something like HTTP AUTH in your server config. But generally not needed because it's as secure as the standard login.
Anti-spam.. There are quite a few in-built options for that and a lot more addons out there.
You can't protect your theme from getting stolen since you will send the raw CSS data to the browser so it can parse your theme.
Thanks. Anyone have any other suggestions against scrapers and preventing your theme from being stolen? Any extra layers of protection is important I'd say.