bucipek.hu — bakery site with its own ordering and careers modules
The task
A working bakery needed a site that could do two things a brochure page cannot: accept orders and collect applicants. Both take data from the visitor — one of them personal data, the other a file on top of that. This is the point that decides whether a website is a tool or a liability.
The solution
Ordering module
Ordering is not a generic cart engine but logic written for the bakery's actual process: what can be requested for when, what is in stock, what goes to pre-order. An order sends a notification the moment it arrives, and is logged — you do not have to go hunting for it in an inbox afterwards.
Careers module and file upload
On the careers page anyone can upload a CV, and file upload is the most dangerous point of any website. So the system determines the real type of the uploaded file from its content — not from the extension, because anyone can rewrite that — looks for executable content and macros in the document, then runs a virus check. If any step fails, the file never reaches the disk.
What passes goes into a directory not reachable from the web, and is deleted automatically after 365 days. That last part is not a technical nicety: personal data must not be stored without a deadline.
Findability
The site was built with complete structured data: product types, opening hours, contact details, frequently asked questions — in machine form too. Not as an afterthought, but as part of the build.
The result
| What | How much | Source |
|---|---|---|
| Indexed URLs | 192 | Google Search Console |
| Structured data errors | 0 | Google Search Console / Rich Results Test |
| File verification layers | 3 (type, macro, virus) | the system's source code |
| Automatic deletion of CVs | 365 days | scheduled task |
Check it yourself
- site:bucipek.hu — how many pages are in Google's index, right now.
- PageSpeed Insights — paste in
https://bucipek.hu/and measure with Google's own instrument. - Rich Results Test — the structured data error list for the same address.
- bucipek.hu — the live site itself.
What can be learned from it?
That a website starts paying for itself when it takes over work: orders, applications, administration. And that file upload is not a feature but a responsibility — if a developer leaves it to a plugin, they do not actually know what is protecting you.
If you have a similar task, here is the service: custom website development.