bucipek.hu — bakery site with its own ordering and careers modules
The task
A working bakery needed a site that could do two things a brochure page cannot: accept orders and collect applicants. Both take data from the visitor — one of them personal data, the other a file on top of that. This is the point that decides whether a website is a tool or a liability.
The solution
Ordering module
Ordering is not a generic cart engine but logic written for the bakery's actual process: what can be requested for when, what is in stock, what goes to pre-order. An order sends a notification the moment it arrives, and is logged — you do not have to go hunting for it in an inbox afterwards.
Careers module and file upload
On the careers page anyone can upload a CV, and file upload is the most dangerous point of any website. So the system determines the real type of the uploaded file from its content — not from the extension, because anyone can rewrite that — looks for executable content and macros in the document, then runs a virus check. If any step fails, the file never reaches the disk.
What passes goes into a directory not reachable from the web, and is deleted automatically after 365 days. That last part is not a technical nicety: personal data must not be stored without a deadline.
Findability
The site was built with complete structured data: product types, opening hours, contact details, frequently asked questions — in machine form too. Not as an afterthought, but as part of the build.
Buci AI — the site's own assistant
Since September 2026 the Buci AI has been answering visitors in the bottom right corner of bucipek.hu, in Hungarian and English. RootCR custom-programmed it; it is not a rented chat service or a chatbot platform: it reads shop opening hours, product prices and allergens straight from the database, and re-reads the website's content every night. The language model has no access to the database, the system filters hostile text out before it reaches the model, and an attacker's IP address is blocked from the whole site. The median of 80 real visitor questions was 2.1 seconds (measured 22–24 September 2026). The design, the defence layers and the measurements: AI chatbot development.
The result
| What | How much | Source |
|---|---|---|
| Indexed URLs | 192 | Google Search Console |
| Structured data errors | 0 | Google Search Console / Rich Results Test |
| File verification layers | 3 (type, macro, virus) | the system's source code |
| Automatic deletion of CVs | 365 days | scheduled task |
Check it yourself
- site:bucipek.hu — how many pages are in Google's index, right now.
- PageSpeed Insights — paste in
https://bucipek.hu/and measure with Google's own instrument. - Rich Results Test — the structured data error list for the same address.
- bucipek.hu — the live site itself.
What can be learned from it?
That a website starts paying for itself when it takes over work: orders, applications, administration. And that file upload is not a feature but a responsibility — if a developer leaves it to a plugin, they do not actually know what is protecting you.
If you have a similar task, here are the services: custom website development and AI chatbot development.