Profile Management

Students manage their personal information, academic profile, placement profile, and achievements — all from a unified profile management section.

1. Main Profile

1.1 Personal Information

• Profile Photo: Upload or update a profile photo. Shown across the system (dashboard, leave requests, messages).
• Basic Details: Full name, date of birth, gender, mobile number, email address.
• Address: Permanent and current address.
• Emergency Contact: Parent/guardian name and phone number.

⚠ Note: Critical fields like Name, Roll Number, and Class are locked for student editing — changes to these must be requested through the HOD to prevent unauthorized modifications.

1.2 Academic Information (Read-only)

• Enrolled Class, Academic Year, Semester
• Roll Number and Enrollment ID
• Class Teacher and HOD name
• Department and Course name

1.3 Password Change

• Current password verification required before setting a new password.
• Password strength indicator — minimum 8 characters, must include a number and special character.
• On successful change, all other active sessions are logged out for security.

2. Achievements

Students record their academic, co-curricular, and extra-curricular achievements through the portal. Approved achievements feed into NAAC Criterion 5 reports.

2.1 Add Achievement

• Category: Academic, Sports, Cultural, Technical, Research, Social Service, Other.
• Achievement Title: e.g., "First Place — State Level Chess Championship"
• Date: When the achievement was received.
• Issuing Organization: University, association, or company name.
• Certificate Upload: PDF or image of the certificate — required for approval.
• Description: Additional details (optional).

2.2 Achievement Approval Workflow

• Rejected Achievements: Shown with rejection reason. Student can correct and resubmit.
• Approved Count: Visible on the student's dashboard and profile header.

3. Security & Privacy

• Student Isolation: Every data query uses WHERE student_id = ? — a student's session can never accidentally load another student's profile.
• Role Check on Load: checkRole(ROLE_STUDENT) is enforced on every student page — if the session doesn't have a student role, the user is redirected to login.
• CSRF Protection: All POST actions (profile updates, achievement submissions) verify a CSRF token before processing.
• Audit Log: All profile changes are logged — who changed what, when. The HOD can audit these logs in the administration panel.