Project Objective
The primary goal was to design and implement a secure, scalable, and MVP-focused image upload system that allows users to upload images by Country → Province/State → City, supports anonymous uploads that can later be linked to registered users, and dynamically integrates approved images into an interactive map.
Key Challenges
- Linking anonymous uploads to user accounts post-registration without exposing public uploader data.
- Ensuring secure image handling and storage while preventing malicious uploads.
- Implementing reliable moderation workflows before public visibility.
- Maintaining seamless integration with the existing Leaflet-based map and frontend UI.
- Keeping the solution simple, clean, and MVP-focused without over-engineering.
Solution Delivered by CnEL India
CnEL India designed and delivered a comprehensive backend-driven solution that perfectly aligned with the client’s technical preferences and business goals.
User Authentication & Access Control
- Manual user registration with secure password hashing (bcrypt/argon2).
- Google OAuth login for frictionless onboarding.
- One-time email verification for manual registrations.
- Persistent login with secure sessions and optional “Remember Me” functionality.
Anonymous to Registered Upload Linking
- Session-based tracking of uploads made before full registration.
- Automatic linking of previously uploaded images once a user completes registration.
- Images appear in the user’s personal library post-linking.
- No public uploader information shown unless linked to a registered user.
Secure Image Upload System
- Protected upload endpoint (
POST /api/upload). - Strict validation for image types (JPG, PNG, WEBP) and file size limits.
- Automatic file renaming using UUIDs.
- Protection against path traversal, executable files, and malicious uploads.
- Basic rate limiting to prevent abuse.
Structured Storage & Database Design
- Images stored in a clean hierarchy:
uploads/Country/Province/City/. - Normalized MySQL/MariaDB schema capturing image metadata, user linkage, and moderation status.
- Support for pending, approved, and rejected moderation states.
Admin Moderation Dashboard
- Dedicated admin-only interface to review uploads.
- Approve or reject images with a single action.
- Only approved images are visible publicly and on the map.
Map & Profile Integration
- Dynamic map pin loading directly from the database.
- City popups displaying approved image thumbnails.
- Registered uploader usernames displayed on linked images.
- Clickable usernames leading to user profile pages.
- User profiles showcasing complete personal image libraries.
Technology Stack
- Backend: PHP
- Database: MySQL / MariaDB
- Authentication: Manual + Google OAuth
- Maps: Leaflet (existing integration enhanced)
Why CnEL India Was the Right Choice
- Deep expertise in secure PHP backend development.
- Strong understanding of MVP-driven architecture.
- Ability to integrate seamlessly with existing systems without disrupting the frontend.
- Security-first approach to file handling and user authentication.
- Clean, well-documented, and deployment-ready code delivery.
Client Feedback
“CnEL India delivered exactly what we needed—no over-engineering, no unnecessary complexity, just a clean, secure, and well-thought-out system. The anonymous-to-registered image linking works flawlessly, and the moderation and map integration exceeded our expectations. Their technical clarity and execution speed made them an exceptional partner for this project.”
— Project Owner
Conclusion
This project demonstrates CnEL India’s ability to transform complex functional requirements into a secure, scalable, and user-friendly solution. By combining strong backend architecture with practical MVP thinking, CnEL India successfully delivered a system that enhances user engagement, maintains security, and supports future platform growth.