About

WHAT THIS IS
AND WHY I BUILT IT.

The project

HopeConnect is a private storage space for documents and software. I built it end to end as a portfolio project: the authentication, the file handling, the folder structure, the admin tooling and the deployment.

It is deliberately small in scope and deliberately careful in execution. Rather than adding features, the goal was to get the security decisions right and to be able to explain every one of them.

How it works

Four ideas hold it together

Deny by default

Every URL requires authentication unless explicitly opened. New pages are locked automatically rather than needing to be remembered.

Enforce in the query

Ownership checks live inside the database lookup itself, so there is no code path that fetches someone else's file and forgets to check.

Never trust the browser

Hidden fields, disabled buttons and client-side validation are conveniences. Every rule is enforced again on the server.

Allow-list, not block-list

Usernames, file types and routes are validated against what is permitted, not against a list of what is forbidden.

About me

Boikanyo Sere

I work in software quality assurance and technical support, with ISTQB Foundation and Test Automation Engineer certifications. This project came out of wanting to understand application security from the inside — by building it rather than only testing it.

Get in touch View the source