Case study
Rocky Mountain Hound Association
A registration-heavy club site, made secure and kept running.
The challenge
The Rocky Mountain Hound Association runs its events through its website: event registration, trophy donations, a health-clinic signup and vendor registration.
Those forms had been added one at a time over the years, and with them came the security and reliability gaps that grow when a site grows that way.
What I did
- Added CSRF protection to every form, so another website can’t submit them on a visitor’s behalf.
- Changed links that deleted or changed records from GET to POST, so they can’t be set off by accident.
- Moved the email credentials out of the code and into a protected, shared config.
- Fixed a database query that was hiding some entries.
- Removed utility files that were exposed to the public.
The result
A secure, dependable registration system the club runs its events on.
I’ve looked after the site since July 2018.