
Fechado
Publicado
Pago na entrega
Project Overview Idea Hub is a web-based platform that allows authenticated users to submit ideas for review, track their status, and showcase approved ideas publicly. The platform includes a secure admin review workflow and enforces strict role-based permissions and data access rules. The goal is to deliver a production-ready MVP with clean architecture, strong security, and a scalable foundation. Core Requirements 1. Authentication & Roles Implement user authentication with: Signup (name, email, password) Login / logout Persistent sessions Implement a role system with two roles: user admin Roles must be assigned server-side only. Users must never be able to select or modify their role from the client. All role checks must be enforced server-side (UI checks alone are insufficient). 2. Authorization & Access Control Users may only: View their own ideas Create new ideas Edit/delete their own drafts Users may not: View or modify other users’ ideas Approve or reject ideas Change idea status directly Admins may: View all submitted ideas Approve or reject ideas Add optional admin feedback notes All authorization must be enforced server-side with ownership checks to prevent ID-guessing attacks. 3. Idea Submission System Each idea must include the following fields: Title (required) Summary (required, maximum 140 characters) Description (required) Category (required, fixed predefined list) Tags (optional) Images (optional, up to 6) Users must be able to: Save an idea as a draft Submit an idea for admin review All validation must occur server-side in addition to any client-side validation. 4. Idea Status Workflow Ideas must follow a strict status flow: draft submitted approved rejected Rules: Users can transition: draft → submitted Admins can transition: submitted → approved submitted → rejected Users cannot directly set or alter status values. Invalid transitions must be blocked server-side. 5. User Dashboard (“My Ideas”) Displays only the authenticated user’s ideas Shows idea status using clear badges or labels Allows filtering by: All Draft Submitted Approved Rejected Displays admin feedback notes when present Includes proper loading and empty states 6. Admin Dashboard (Admin access only) Displays all submitted ideas Provides statistics: Total ideas Pending (submitted) Approved Rejected Allows admins to: Review idea details Approve or reject ideas Add an optional admin note All admin actions must be transactional and validated server-side 7. Public Gallery Displays only approved ideas Must never expose drafts, submitted, or rejected ideas Filtering/search by: Title Category Tags Approved-only filtering must be enforced at the database query level 8. Image Upload System Allow up to 6 images per idea Accepted formats: JPG / JPEG PNG WEBP Enforce maximum file size per image (e.g., 5–10MB) Images must be stored in object storage (not as database blobs) Database should store: Image metadata Storage path or URL Enforce ownership checks before allowing uploads Sanitize filenames and generate unique paths All upload limits must be enforced server-side. 9. Database & Data Integrity Required entities: Users Ideas Idea Images Enforce: Foreign key relationships Indexes on frequently queried fields (user_id, status) Enum or constrained values for idea status Automatically manage timestamps (created_at, updated_at) Prevent client-controlled queries that could bypass security 10. Security & Abuse Prevention Implement basic rate limiting for: Signup Login Idea submission Enforce request size limits Prevent exposure of sensitive server errors to the client Ensure no secrets are exposed client-side 11. UX & Quality Expectations Responsive design (mobile, tablet, desktop) Clear loading, success, and error states Consistent component structure and styling Clean, maintainable, well-documented code 12. Testing & Verification The following must be verifiable before delivery: Non-admin users cannot access admin routes or actions Users cannot access other users’ ideas via ID manipulation Public gallery never shows non-approved ideas Invalid uploads fail safely Overlong summaries are rejected server-side implement a Free + Pro subscription system using Stripe, enforce plan limits server-side, and add a Pro-exclusive 1:1 text chat with admins. Must use Stripe Checkout (hosted) + Stripe Customer Portal and Stripe webhooks as the source of truth. No client-side plan gating alone; all permissions/limits must be enforced server-side. Plans & limits Free: 5 submissions/month, 3 images/idea Pro (monthly subscription): higher/unlimited submissions (cap ok), 6 images/idea, access to Pro chat (OR lifetime payment) Payments Implement: POST /billing/checkout, POST /billing/portal, POST /stripe/webhook (signature verified) Webhooks: [login to view URL], [login to view URL], [login to view URL], invoice.payment_failed Store in DB: plan, stripe_customer_id, stripe_subscription_id, subscription_status, current_period_end Usage enforcement Enforce monthly submission limit server-side (recommended usage_monthly table or equivalent) Enforce image limits server-side at upload time + ownership checks Images must be stored in object storage (not DB blobs); store metadata + URL/path Pro chat MVP: text-only 1:1 thread per Pro user with admins DB: chats (one per user), chat_messages (sender_role user/admin, message, timestamps) Endpoints must deny access unless Pro subscription is active/trialing Free users must not access chat even via direct API calls Deliverables Code changes + setup steps Webhook testing notes Quick QA checklist proving plan gating works
ID do Projeto: 40175296
114 propostas
Projeto remoto
Ativo há 5 dias
Defina seu orçamento e seu prazo
Seja pago pelo seu trabalho
Descreva sua proposta
É grátis para se inscrever e fazer ofertas em trabalhos
114 freelancers estão ofertando em média £7.356 GBP for esse trabalho

A Warm Hello! We are readily available to stat working on this project ! We are confident to design and deliver a production-ready MVP for Idea Hub, a secure web platform that allows authenticated users to submit ideas, track their review status, and publicly showcase approved ideas—while enforcing strict server-side authorization, role isolation, and subscription gating. We understand that Idea Hub is not a simple CRUD app. It requires: • Server-enforced role and ownership controls (no client trust) • Strict idea lifecycle transitions • Secure public data exposure • Abuse prevention and rate limiting • Subscription-based feature and usage enforcement using Stripe • Clean separation of concerns between users, admins, billing, and public access We are confident in delivering Idea Hub as a secure, scalable, and production-ready MVP with a strong backend foundation and verifiable access controls. Regards Ana
£10.000 GBP em 70 dias
10,0
10,0

Greetings, I understand you are looking for full-stack development for Idea Hub, delivering a secure, scalable web platform with role-based authentication, strict server-side authorization, idea submission and review workflows, dashboards for users and admins, and a public gallery of approved ideas. The platform includes image uploads with server-side validation, transactional admin actions, and robust data integrity (MySQL/PostgreSQL or similar) with object storage for media. Before proceeding, I’d like to clarify: 1, Preferred tech stack for front-end (React, Vue, or Angular) and back-end (Node.js/Express, Python/Django, or similar). 2, Any constraints for object storage—S3, GCP, or self-hosted options. 3, Expected testing strategy or frameworks for security and workflow verification. Our team builds clean, maintainable code with responsive design, transactional integrity, proper server-side validation, and thorough documentation. Security and access control are enforced at every layer, with rate limiting, upload sanitization, and enumeration checks in place. Let’s connect to confirm timelines, milestones, and start the first functional iteration. The current bid is a placeholder to submit the proposal. Regards Yasir LEADconcept PS: Let me know, if you want to see our team past work to determine our skills/expertise or past customer's references.
£7.500 GBP em 7 dias
9,4
9,4

✨✨ Idea Hub — Secure Idea Submission & Review Platform ✨✨ Hi, I read your project and completely understood. I will develop a production-ready web platform that allows authenticated users to submit and manage ideas while enforcing strict server-side roles, authorization, and workflow rules. The system will include a secure admin review process, a clean public gallery for approved ideas only, and a scalable architecture focused on security, data integrity, and long-term maintainability. LET’S DO CHAT AND START BUILDING IDEA HUB. Awaiting for your response. Regards, $hweta
£7.500 GBP em 7 dias
9,6
9,6

Hello! My name is Olga - nice to meet you! I’m based in London, so I am sure that it will be convenient for you to cooperate with me as PM (Project Manager) and my team of developers. Our team would be glad to support your transition from Squarespace 7.0 to 7.1 and ensure the process is smooth, accurate, and visually elevated. We have close to 10 years of hands-on experience working with Squarespace platforms and over 12 years of professional SEO optimisation expertise, which allows us to approach both the migration and the optimisation with confidence and precision. We will carefully migrate your existing content, update imagery, refine layouts, and enhance the overall aesthetic to align with a more modern 7.1 structure. Alongside this, we will optimise on-page SEO, metadata, image attributes, and site performance to strengthen search visibility and long-term organic growth. Our focus is always on delivering a clean, cohesive design, maintaining full content integrity, and ensuring the new version of your site functions smoothly while reflecting your brand at its best. We would be happy to outline our approach in more detail and discuss any specific goals you have for the redesign and optimisation. Looking forward to the opportunity to collaborate. Looking forward to the possibility of discuss your project in more details. Best regards, Olga K Sales Department Tangram Canada Inc.
£7.775 GBP em 7 dias
9,2
9,2

Hi there, I can build Idea Hub as a secure, production-ready MVP with user/admin roles, idea submission workflow, dashboards, public gallery, and image uploads. The system will have full server-side validation, responsive UI, and clean, maintainable code. Please share the full project details/document so I can review everything and get started. Thanks
£5.100 GBP em 15 dias
8,1
8,1

Hi, this is Elias from Miami. I reviewed the Idea Hub MVP scope and I’m aligned: authenticated users submit ideas, track statuses, and only approved ideas show publicly. The key here is server-enforced RBAC + ownership checks (no client-controlled roles/status), a strict status workflow, safe image uploads to object storage, and basic abuse prevention. I’d build this with a clean React UI (My Ideas + Admin + Public Gallery), a Node/TS API (service/controller separation), and a MySQL schema with enums/constraints, indexes, and FK integrity. Every sensitive rule (role, status transitions, gallery filtering, uploads) is enforced at the API + DB query level so ID-guessing and UI bypasses don’t work. Q1: For roles: do admins get created only by DB seed / env “first admin”, or do you want an admin-only endpoint to promote users later (still server-only)? Q2: For images: should we use S3-compatible storage (AWS S3 / Cloudflare R2 / DigitalOcean Spaces), and do you prefer direct-to-storage via pre-signed URLs or proxy uploads through the API? Q3: For categories/tags: is the category list fixed in code for v1, or should admins manage categories from the dashboard (without turning this into a full CMS)? I can ship a first functional milestone fast: auth + idea CRUD (draft/submitted) + “My Ideas” filters, then admin review + public gallery, then uploads + rate limiting + verification tests. Regards, Elias
£7.500 GBP em 70 dias
7,6
7,6

Hello, We can deliver a secure, production-ready MVP for Idea Hub with clean architecture, strict server-side enforcement, and a scalable foundation. Our approach is API-first, using role-based middleware, ownership validation on every resource, and a controlled idea status workflow via enums and transactional updates. We will implement robust authentication (JWT/session-based), centralized authorization guards, and database-level constraints to prevent any bypassing. For ideas and images, we will use object storage (e.g., S3-compatible) with signed uploads, sanitized filenames, and server-enforced limits. Public gallery queries will strictly filter approved records at the database layer. We will integrate Stripe Checkout + Customer Portal with webhook-driven subscription state as the single source of truth, enforcing submission/image limits and Pro chat access server-side via usage-tracking tables. Both admin and user dashboards will be responsive, well-tested, and secured with rate limiting, validation, and error handling. The codebase will be modular, documented, and easy to extend. Technical Questions: 1- Do you have a preferred tech stack (React/Next, Node/Nest, Django, etc.) and cloud provider for object storage? 2- For Pro limits, should “higher/unlimited” mean a hard monthly cap (e.g., 100 ideas) or truly unlimited with abuse protection? 3-Should admin feedback and chat messages support future attachments/files, or remain text-only for MVP? Regards Saima
£7.500 GBP em 7 dias
7,4
7,4

Hi I can deliver a production-ready MVP for Idea Hub with a strong focus on security, clean architecture, and scalability. Approach I’ll build the platform with server-side–enforced authentication, authorization, and validation from day one. Roles (user/admin) will be assigned and verified exclusively on the backend, with strict ownership checks to prevent ID-guessing or privilege escalation. All workflows—idea submission, status transitions, admin actions, and public visibility—will be enforced at the database and API level, not just the UI. Deliverables • Secure authentication with persistent sessions and server-side role enforcement • Full authorization layer for users and admins • Idea submission system with drafts, validation, and admin review workflow • User dashboard (“My Ideas”) with filters, status badges, and feedback notes • Admin dashboard with idea review, approval/rejection, and statistics • Public gallery showing approved ideas only (query-level enforcement) • Image upload system (up to 6 images, size/type limits, secure storage) • Well-structured database with constraints, indexes, and timestamps • Basic rate limiting, request size limits, and error hardening • Responsive UI aligned with provided Figma designs • Clean, documented code and verification against all listed security checks The result will be a solid MVP ready for real users and future growth. Best Infineosoft
£7.000 GBP em 30 dias
6,9
6,9

With over a decade of web development under the belt, I understand the immense importance a project like IdeaHub holds. As the leader of a highly experienced development team, my company has an unbeatable track record of building secure, scalable, data-driven web applications. Our extensive experience with PHP & MySQL backend development for projects with intricate role-based permissions and heavy data access requirements makes IdeaHub website align perfectly with our skillset. Ensuring smooth authentication process and strong authorization & access control has always been of paramount importance to us. We rigorously enforce ownership checks server-side to prevent any potential ID-guessing attacks. The strict Idea Status Workflow you've listed is also aligned with our standard practices and ensures approved ideas get pushed forward while disapproved ones are politely refused. We can also provide you with transparent User and Admin Dashboard implementation ensuring smooth flow throughout. We take code quality seriously and will ensure that database management meets your expectations. You can trust us to enforce foreign key relationships, create indexes on frequently queried fields like user_id and status and keep timestamps automatically logged (created_at, updated_at). in your valuable platform.
£7.200 GBP em 48 dias
6,5
6,5

Hi, I can build the Idea Hub MVP as a secure, production-ready web app with strict server-side RBAC and ownership checks (no client-controlled roles, no ID-guessing access). You’ll get user auth, draft→submit workflow, admin review (approve/reject + notes), a public approved-only gallery, and a safe image upload system to object storage.
£8.000 GBP em 35 dias
6,0
6,0

Hello, I will build a secure, production-ready MVP for Idea Hub with a clean architecture, strict role based access control and a fully enforced server-side workflow. I will implement authentication, user/admin roles, idea submission with drafts and approvals, secure image uploads, public gallery filtering and complete authorization checks to prevent ID-guessing or privilege escalation. All status transitions, validations, rate limiting and security rules will be enforced at the backend, with a responsive UI, admin dashboard and user dashboard built on top of a reliable, scalable database structure. Looking forward to discussing further. Best regards, Faizan
£5.800 GBP em 11 dias
5,7
5,7

As a seasoned freelancer with over seven years of experience in web development and design, I am enthusiastic about taking on your Creative Projects Crowdfunding Website. My front-end and back-end development skills, including HTML, PHP, and Web Development, align seamlessly with the technical requirements of your project. I have a demonstrated ability to create secure and scalable platforms while keeping user experience at the forefront. I am confident in using MySQL database systems which will be a crucial asset to managing entities like Users, Ideas, and Idea Images. I understand that one of the most significant factors in determining success for Idea Hub is security - both for user identities as well as data protection. Having worked with signups, logins, and persistent sessions extensively while ensuring strict server-side authorization, I am well-versed in conducting role checks server-side exclusively. My experience extends also to image uploads wherein enforcing file sizes or ensuring uniqueness are crucial points for data integrity—both of which I am comfortable implementing. Finally, I would like to guarantee timely delivery by maintaining consistent communication regarding progress—an extra measure benefiting both parties for timely completion while ensuring high quality results. Let's make Idea Hub a crowning achievement together!
£7.500 GBP em 7 dias
5,3
5,3

Hello! Your Idea Hub is an excellent project, and our team of 62 professionals with 9+ years of experience is perfectly equipped to build your secure, production-ready MVP from the ground up. Here's how we can help: * Develop the entire platform using a clean PHP backend, enforcing all server-side authentication, role checks, and authorization rules to prevent ID-guessing attacks. * Implement the strict idea status workflow, secure image upload system to object storage, and a well-structured database with proper relationships and indexing. * Build the user dashboard, admin dashboard with statistics, and a public gallery that only shows approved ideas, all with a responsive, professional design. * Deliver a fully tested application where users cannot access admin routes, data access rules are enforced at the database level, and all validation is server-side. Your focus on security and clean architecture is clear. To ensure we scope this perfectly, do you have a preferred PHP framework (like Laravel or Symfony) for this build, and is there an existing design system or style guide we should follow? We're ready to start this conversation.
£7.500 GBP em 7 dias
4,1
4,1

Hi, I'm excited about your Idea Hub project to build a secure, role-based crowdfunding platform. With extensive experience in PHP, backend development, and secure API design, I will ensure strong server-side authentication, role enforcement, and safe data handling to prevent unauthorized access and ID-guessing exploits. I will implement your idea submission workflow with validation and transactional admin controls, alongside a polished responsive UI for dashboards and public galleries. We'll enforce your image upload limits securely with unique paths and sanitize inputs. I propose delivering a tested, production-ready MVP within 40 days with detailed documentation. Could you clarify the preferred technology stack and any existing system integrations for the MVP? Best regards, Roshan
£6.200 GBP em 30 dias
2,6
2,6

Loughborough, United Kingdom
Método de pagamento verificado
Membro desde jan. 24, 2026
$30-250 USD
₹1500-12500 INR
$250-750 CAD
₹750-1250 INR / hora
$2-8 USD / hora
$2-3 USD / hora
₹1500-12500 INR
$2-8 AUD / hora
₹2000 INR
€250-750 EUR
$8-15 AUD / hora
₹12500-37500 INR
$30-250 USD
$250-750 USD
$15-25 USD / hora
$10000-20000 USD
£20-250 GBP
$8-15 AUD / hora
₹1500-12500 INR
$150 USD