CodeIgniter
Full security audit and CI4 Shield authentication migration for a heavy equipment company's operations portal.
Overview
Maluka Earthmovers operates a fleet of earthmoving equipment across Rajasthan and needed their internal operations portal — used for job tracking, machine assignment, and operator management — secured before onboarding new clients with sensitive project data.
The challenge
The portal was using a custom authentication system with plaintext password storage, no session expiry, and no CSRF protection on login. Role separation between admin and operator accounts was enforced only in the UI — any operator with a direct URL could access admin pages. There was no audit log for sensitive actions.
Our approach
We conducted a focused security audit of the authentication layer and all admin routes. CI4 Shield was then implemented as a drop-in replacement: bcrypt password hashing, secure session handling, automatic CSRF token injection, and role-based middleware on all admin controllers. An audit log table was added to record all create, update, and delete actions with timestamp and user ID.
Results
Hardened
Auth System
Custom/UnsafeCI4 Shield
Middleware
Admin Route Security
NoneAll routes
Live
Audit Log
NoneAll actions
In the client's words
We did not realise how exposed we were until the audit. Everything is locked down now and we can confidently bring in new clients.
More work
Fashion Accessories
Shopify Store for a Women's Handbag Brand
A Shopify build for a women's handbag and lifestyle brand, focused on fast product discovery across totes, crossbody bags, duffles and slings, with a purpose-driven brand story woven through the shopping experience.
Read the case study
Industrial / Railway Technology
B2B WordPress Site for a Railway Technology Manufacturer
A custom WordPress site for a railway and industrial electronics manufacturer, built to present a deep technical product catalogue clearly to engineering and procurement buyers.
Read the case study
Fashion & Apparel
Men's Footwear Store
Shopify store for a men's footwear brand, with shop-by-occasion and shop-by-size navigation, faceted collection filtering and a cart drawer carrying coupons and a shipping estimator.
Read the case studyStart a similar project
Tell us what you are building and where you are stuck. We reply within 2 hours with a plan and a fixed-price quote.
Free discovery call (30 min)
We understand your goals and scope, with no commitment.
Fixed-price proposal (24 hrs)
Scope, timeline and transparent pricing, no hourly surprises.
Delivered on a written timeline
With 30 days of support after launch.
A few lines are enough. We come back with what we would build, how long it takes and a fixed price.