Brief

Co_Lab is a small collective who hold regular workshops and events in their multi-venue community space. Their website acts as a notice-board where hosts can publish details of upcoming events to their dedicated 'workshops' feed.

Visitors are able to filter the workshop feed by venue. Staff are able to draft/add/edit and remove posts via a backend which is only accessible only to users with administrative privileges.

Solution

This web application is built to modern web accessibility guidelines and the UI is responsive across devices. The dynamic functionality comes from the integration of a custom-made relational database model and server side scripting which manages database interactions on the 'back-end'. Database protection was built into the application layer through careful consideration of business rules and modern security measures which were implemented throughout the code. For example:

• all user input data is sanitised,
• INSERT/UPDATE actions require data format validation,
• prepared INSERT/UPDATE/SELECT SQL statements,
• encryption for account passwords,
• HTTP POST method when processing login and signup forms,
• database interactions limited to secure areas (enforced using php session management)

The code has been optimised/refactored to remove any repeating code blocks (DRY principle) and has been highly organised to simplify maintenance using an M.V.C design pattern. This project took 2-3 weeks to finish during evenings / free time. This included planning, coding, testing and documentation. The refactoring took a further 1-2 weeks.