My Portfolio Website

Welcome to my portfolio website! This project showcases my work and skills using Flask, a lightweight WSGI web application framework in Python. It has been hardened with specific security logic to demonstrate a "Security-First" approach to web development.

Table of Contents

• Features
• Technologies Used
• Security Showcase
• Installation
• Prerequisites
• How to Use
• Contributing
• License
• Acknowledgements
• Contact

Features

• Home Page:A professional landing page to introduce visitors to my portfolio and technical background.
• Dynamic Page Rendering: Utilizes Flask's Jinja2 engine to render HTML pages dynamically based on URL strings.
• Secure Form Submission: Processes contact information with server-side validation and sanitization.
• AppSec Hardening: Built-in protection against CSV Injection (Formula Injection) to ensure data integrity.
• Thank You Page: A confirmation page displayed after successful data persistence.

Technologies Used

• Flask: Python web framework
• HTML/CSS: For the front-end design
• CSV: For form data storage
• Python: Main programming language

Security Showcase

In this project, I prioritized Application Security (AppSec) by addressing CSV Injection. Standard CSV logging is vulnerable if a user submits a message starting with =, +, -, or @.

The Fix: My server.py logic proactively detects these "dangerous" characters and prepends a single quote (') to the input before writing to database.csv. This forces spreadsheet software to treat the input as literal text, preventing unauthorized command execution or data exfiltration.

Installation

To get started, clone the repository to your local machine:

git clone https://github.com/cainepavl/portfo.git

Prerequisites

• Python 3.x installed on your machine. You can download it from PYTHON
• Pip: Python package installer.

Setup

1. Navigate to the project directory:

cd portfo   

2. Install Flask if you haven't already:

pip3 install flask

3. Run the application:

python3 server.py

4. Open your browser and goto http://127.0.0.1:50000/ to view the website.

How to Use

1. Navigate to the home page to explore my portfolio.
2. Use the contact form to send me a message. After submission, you'll be redirected to a thank you page.
3. Check the saved data in database.txt and database.csv to see the form submissions.

Contributing

Contributions are welcome! Feel free to fork the repository and submit a pull request.

License

This project is licensed under the MIT License - LICENSE see the file for details.

Acknowledgements

• Flask for the web framework.
• ZTM Academy for the course and walkthrough!
• All contributors and creators of open-source resources that made this project possible.

Contact

If you have any questions, feel free to contact me at: cainepavl@outlook.com