About
HopeConnect is a private storage space for documents and software. I built it end to end as a portfolio project: the authentication, the file handling, the folder structure, the admin tooling and the deployment.
It is deliberately small in scope and deliberately careful in execution. Rather than adding features, the goal was to get the security decisions right and to be able to explain every one of them.
Every URL requires authentication unless explicitly opened. New pages are locked automatically rather than needing to be remembered.
Ownership checks live inside the database lookup itself, so there is no code path that fetches someone else's file and forgets to check.
Hidden fields, disabled buttons and client-side validation are conveniences. Every rule is enforced again on the server.
Usernames, file types and routes are validated against what is permitted, not against a list of what is forbidden.
I work in software quality assurance and technical support, with ISTQB Foundation and Test Automation Engineer certifications. This project came out of wanting to understand application security from the inside — by building it rather than only testing it.