Log In Page
Sign Up Page
Dashboard
Events Page
My Profile Page
Navigation Bar
Event Ticket
Event Certificate
Generate Certificate Page
Chats Page

Eventique

Eventique is a club events management tool for the college and provides a handful of features. This application helps in notifying the students about the upcoming events and will serve as a storage media for all their certificate. Eventique helps in reducing the hassle of conducting an event by semi-automation of some of the procedures like ticket and certificate generation. The application also provides room availabilty service for professors so that they can plan their classes beforehand.

GitHub Repo

This is a complete, full-fledged web-application with decent industry-level releasable User Interface and feature-functioning. Hosted on eventique.intellx.com

Admin Tools

Add Events
Generate Certificates for Events
Book Rooms for Events

User Interface

View Profile
View Upcoming Events and have alerts for the same
View Event Ticket (Gimmick for Event Promotion)
Enroll for an Event
View Booked Rooms at the College
Locker for Issued Certificates
Readymade certificate template for auto-generation

Common Features

Use Server-Based Instant Messaging to interact with one another
Edit Profile Settings
Log In//Sign Up
E-Mail OTP Based Sign Up Verification
E-Mail OTP Based Forgot Password Feature

API

The Application Programming Interface for Eventique provides 3 features:

Retrieve booked rooms
Log In to the Application in order to
- Retrive My Events
- Retrive Event Ticket

Usage

To use the API, just call the relevant API Endpoints.

curl {APP_HOST}/api/rooms  # this will fetch a list of all booked rooms

curl --data "rollno={ROLLNUMBER}&password={PASSWORD}" {APP_HOST}/api/login # this will log the user into the app using session cookies. a headless browserr may not achieve the task at all times

curl {APP_HOST}/api/events # this will fetch a list of events the user has signed up for

curl {APP_HOST}/api/ticket/{EVENT_ID} # this will return a PNG of the event ticket, which can be used for promotions

Tech Stack Used

Python3-Flask
Python3-json
Python3-Pillow
Vanilla HTML
Material Design Lite for Cascading Style Sheets
Vanilla Java Script
GUnicorn
NGINX Server
PIL//Pillow (Python Imaging Library)

Security Features

Passwords are stored as SHA224 Hashes and all inputs are sanitized in order to strengthen security. This web application has been tested against the OWASP TOP 10 Vulnerabilities 2021. Since Python has been used as the basis for this project, it is ensured to be secured.

A03 Injection : Flask automatically sanitizes input into HTML Encoding, hence preventing SQL Injection. Moreover, this project uses JSON Files as offline database for storage.
A01 Broken Access Control : Credentials are stored as SHA224 Hashes, Password Recoveries require Email for OTPs and Session variables are stored as JSON Dumps, and are safe from MITM Attacks as the app has a Secret Key. Moreover, we use Flask-SSLify to ensure we run on HTTPS even on testing environments - using self-signed SSL certificates.

SSLify, however, can be eliminated if hosted in a server with proper security configurations.