Skip to content

Security: dapzz-id/E-Presence-RFID

SECURITY.md

πŸ” E-Presence Application Security Policy

Developed by: raadeveloperz
Founder & Startup Leader: Kadavi Raditya Alvino


1. Introduction

  • EN: This document outlines the security policies applied in the development and deployment of the E-Presence system application student attendance application based on RFID card tapping.
  • ID: Dokumen ini menjelaskan kebijakan keamanan yang diterapkan dalam pengembangan dan implementasi sistem aplikasi E-Presence absensi siswa berbasis tap kartu RFID.

2. Platform Overview

  • EN: Web (Admin Panel), Windows (Attendance Logger), Android (Parent App).
  • ID: Web (Panel Admin), Windows (Pencatatan Absensi), Android (Aplikasi Orang Tua).

3. User Authentication and Authorization

  • EN:
    • All platforms implement role-based access control (RBAC).
    • Admins log in using secure credentials via HTTPS.
    • Android and Windows clients authenticate with secure API tokens.
    • Sessions will expire automatically after a specified time limit (Web)
    • Session will expire automatically when account is used on another device (Android)
  • ID:
    • Semua platform menerapkan kontrol akses berbasis peran (RBAC).
    • Admin login menggunakan kredensial aman melalui HTTPS.
    • Klien Android mengautentikasi menggunakan token API yang aman.
    • Sesi akan kadaluarsa secara otomatis setelah batas yang telah ditentukan (Web).
    • Sesi akan kadaluarsa secara otomatis ketika akun digunakan di perangkat lain (Android)

4. Updates and Patch Management

  • EN: Security patches are released regularly for all platforms.
  • ID: Patch keamanan dirilis secara berkala untuk semua platform.

5. Data Privacy

  • EN:
    • User data is never shared with third parties.
    • Students can only access their own attendance history.
    • Admins cannot modify attendance data without logging the change.
  • ID:
    • Data pengguna tidak pernah dibagikan ke pihak ketiga.
    • Siswa hanya dapat mengakses riwayat kehadiran mereka sendiri.
    • Admin tidak dapat mengubah data kehadiran tanpa mencatat perubahan tersebut.

Supported Versions

Programming Language Platform
PHP Language Website Application
Javascript Language Interaction on the website
C# Language Windows Application
Java Language Android Application
Version PHP Supported
< 8.2 ❌
8.2.x βœ…
8.3.x βœ…
8.4.x ❌
Version Java Supported
< 11 ❌
11 βœ…
> 11 βœ…

Reporting a Vulnerability

If there is an error, please just contact my Instagram which is @x.dapzz

There aren’t any published security advisories