Safety rails
Always protected
- Primary key columns
- Password, token, secret, API key, and related columns
- Session, user_keys, user_mfa, webauthn_credentials, and similar tables
- Easy Find and Replace’s own history tables
Structured data
JSON objects/arrays and serialized PHP strings are decoded, updated, and re-encoded with correct lengths. Object hydration is disabled during unserialize.
Snapshots
Live replaces store original cell values first. If a snapshot cannot be saved, the replace for that row is aborted (fail closed).