Tongkasuyo

TONGKASUYO

Web Development

Annor Bakti Madinah

January 01, 2026

Learning Management System (LMS) allowing easy access to digital Al-Qur'an, student's daily-monthly statistics on learning progress, whilst also monitoring their attendance.

Software stack:

  1. Laravel (Livewire + Alpine JS)
  2. MySQL
  3. Tailwind
  4. Vite
  5. Javascript
  6. HTML

Kebun Qur'an Saad bin Muadz

November 01, 2025

Learning Management System (LMS) to track student and teacher attendance, alongside academia participant statistics (recent activities log, records, and reports). Complemented with a helper feature for teachers to stay updated, and a feedback + attendance report provision that formats to a predetermined styling for guardian/parents communication via WhatsApp.

Software stack:

  1. Laravel
  2. MySQL
  3. Tailwind
  4. Vite
  5. Javascript
  6. HTML


Key Features

Authentication:

- (At the moment) uses a shared teacher account that validates identity based on database teacher name data; streamlining storage resources: standard login + session identity (enables individual activity accountability)

Screenshot 2026-02-02 at 16.12.01.png 64.86 KB
Teacher Attendance:

- Real-time GPS geofencing ensuring teacher attendance in school when marking work entry and leave; leveraging school coordinates, the "fence" radius, and the teacher's device location)

Feedback via WhatsApp Mechanism:

Attendance Report Parents WhatsApp Mechanism:

Recent Activities Log:

Screenshot 2026-02-03 at 14.45.06.png 353.75 KB
Updates:

Reports:


Gracia Box BSD

October 01, 2025

A suite of internal tools encompassing Enterprise Resource Planning (ERP) system, custom sales calculator, and a Human Resource Management (HRM) system, accessible through a centralized gateway (portal).

Software stack (restricted to only using vanilla without frameworks per constraints given):

  1. PHP
  2. Python
  3. Javascript
  4. MySQL
  5. Tailwind
  6. HTML


Key Features

Portal:

- Custom lightweight codebase structure (following Model-View-Controller paradigm), encompassing routing and dispatching

- Secure Single Sign On (SSO) portal as the central authentication gateway to propagate identity throughout the 3 internal tools based on JSON Web Tokens (JWT); complemented by cross application logout chain 

- Role Based Access Conrol (RBAC); different roles have different privileges

- Cross Site Request Forgery (CSRF) protection: leveraging session tokens for secure form submissions 

portal.graciabox.com_(desk 1080) (1).png 139.73 KB

ERP System:

- PDF document generation (text + images) from table data via DomPDF

- Asynchronous fetch requests to backend endpoints for table displaying and dropdown options (smoother transition)

Screenshot 2026-01-31 at 10.38.07.png 273.46 KB

Custom Sales Calculator:

- Complex business logic translation (brittle excel formulas to code) via reverse engineering

- Leveraged python scripting to extract and analyze the excel file structure and data

kalkulator.graciabox.com_calculator(desk 1080) (1).png 865.64 KB

HRM System:

- Cross site scripting (XSS) and CSRF attack mitigation via session hardening; XSS mitigation include output sanitizing before rendering (htmlspecialchars())

- SQL injection prevention sing PHP Document Object (PDO) prepared statements; not concatenating strings into queries;

- Data aggregation and analytics visualization in dashboard 

← Back