Case study · 19 · Custom web app · Live
ArtForge
Private custom web application for professional digital art review and critique— designed, built, and hosted by me. Live at gbob.ddns.net/artforge.
Overview
ArtForge is a custom private web application I designed and built for artists, clients, and collaborators to review digital art the way production work actually moves: upload assets, leave critique, pin notes on images, share projects, track status, and download approved packages.
It is live at https://gbob.ddns.net/artforge/ (HTTPS, invite-only registration, role-aware access). Stack: PHP 8, MySQL/MariaDB, Bootstrap 5, Apache—dark artistic UI with Outlaw Star Press brand mark.
Same production mindset as packaging and book work: clear request → structured review → signed-off release—except here the “release” is an approved package download and status handoff.
Role: Concept, UX, full-stack build, deploy, security, ongoing product iteration
- NeedA private place for art critique without public social tools
- Product designProjects, versions, pins, roles, guest links, approval states
- Build & hostLAMP app on own server with HTTPS and access controls
- Live useInvite-only review workflow for real projects
Functions
What the live app does
Projects & files
- Create, edit, and delete projects (owner-controlled)
- Multi-version uploads: images, PDFs, and video
- Serve secure file downloads for authorized users and guests
- Download approved project packages as ZIP
Critique & annotations
- Threaded critique comments on project assets
- Pin annotations on images (location-aware notes for precise feedback)
- Comment management for owners and reviewers
Review workflow & status
- Status tracking: Pending → In Review → Approved
- Role-aware sharing with registered users (including approver roles)
- Clear path from draft art to approved package for production handoff
Sharing & guests
- Share projects with registered team members
- Guest review links: create/revoke, optional expiry, comment permissions, one-time URL flash
- Guest status updates where allowed—so clients can review without full accounts
Users, access & admin
- Invite-only (public registration closed)
- Manage users: create accounts, manager role, delete, storage sizes
- Password reset flow (forgot/reset) for managers and users
- Server log viewer for managers
- Public patch notes for product updates
Security & platform
- HTTPS with secure session cookies (HttpOnly, Secure, SameSite)
- CSRF protection on state-changing actions
- Rate limits on login, password reset, guest comments, uploads, user create
- Guest tokens stored as SHA-256 hashes; prepared statements; auth-fail logging
- Mobile-polished UI (actions menu, note FAB, dark theme)
Private / invite-only · Built and maintained by Chris Deichman
System map
App structure · sitemap
Outcome
A live, private art-review product that carries the same discipline as production design work: clear ownership, structured feedback, status to approval, and a package ready to hand off. Built end-to-end—product design through deploy and iteration—not a template site.
← All work