Write the project business logic (part-time is possible)

Welcome! We are expanding our team and looking for a person for long-term collaboration on this and other our projects. Your estimated budget for the project for all future stages (including optimization, refactoring, and security audit plan) is ~300,000 UAH. It may be increased if new tasks are added.

We can offer you to complete a simple trial task, or immediately take on a larger module for development.

The project has an architect, analyst, senior developers, a clear plan for each stage, and assistance with technical steps.
Work is not tracked via tracker, without micro-management, but with clear stages and deadlines.

EXPERIENCE WITH ANY MVC FRAMEWORK IS REQUIRED! 

Experience with Docker will be a plus.

If you suffer from "overengineering" — we are not a good fit, we do not like that.

If you are a pragmatic developer — we really like that.  

We need a developer who works quickly and for results, who can write working code and, after approval and adjustments, refactor it (of course, paid separately). 

The frontend for the project is already prepared and integrated with the database. You will need to develop business logic according to business requirements and integrate two services (payment and retrieving product list from a separate service — read-only requests). Most of the work will involve refining ORM queries, there are no complex selections or role systems (3 standard roles — admin, manager, user).

Brief overall description (more detailed business requirements will be sent to candidates separately):

You need to connect an external API for selecting and requesting rented products (documentation will be provided).
The API already has ready code, only binding to the current database is required.

Filtering page:

• Access from one of the site sections

• Single-page interface, language — Russian

• Filtering by parameters: category (2 options), country, dates, number of placements, year, size

• Geolocation search with autocomplete

• Results sorted by ascending cost

• Filter clearing option

• Support for pagination

• Result cards display image, price, region, model, year, button to go to details

Product page:

• Name

• Rental dates

• Region

• Price

• Main image and slider with additional images

• Description, parameters

• Send request button

• Request opens a form with fields: name, email, phone

• After submission, data is sent to the manager's email

Order placement:

• The user registers and places an order through their personal account

• The price is generated by the system

• Payment via Stripe

• After payment, information is updated: number of available spots, product, date, amount

• Access to the product is limited in time (30 days)

• A gift feature is provided: during checkout, the recipient's email can be specified, and they receive a card and access

Student's personal account:

• Access appears after payment

• Viewing and passing modules in order

• Completed modules can be reviewed repeatedly

• Progress and current rank display

• Rank updates after each completed module

Instructor's personal account:

• List of students

• Ability to view answers

• Comments on answers

• The instructor cannot edit students' answers

Blog and feedback:

• Four article categories

• Nested subcategories with menu navigation

• Display of article list and full version

• Two pages with feedback forms, data stored in database

Forms are already designed, can be copied from other pages

Technical non-functional stages:

Optimization

• Improve filter page load speed through lazy loading of results

• Limit number of images in cards, apply compression

• Add caching for geolocation requests

• Translate form submissions to asynchronous sending with confirmation

• Optimize pagination — infinite scroll or ajax loading

• Configure filter preservation during page navigation

• Add indexing for search fields in the database

• Move some client-side logic to server-side to reduce browser load

Refactoring

• Split filter into independent modules for reuse

• Extract common components of cards, headers, modals into separate templates

• Convert all forms to a single template with validation

• Move display parameters to config

• Clean up repetitive code in card display logic

• Unify layout: colors, sizes, margins

• Replace manual form handling with centralized validator

• Simplify route structure, remove duplicate links

Security audit and protection

• Check all forms for XSS and CSRF

• Ensure access restrictions to protected pages (by roles)

• Check if unnecessary data is transmitted in API requests

• Audit storage of user data — encryption, hashing

• Check Stripe integration for duplicate payments and sum forgery

• Protect administrative access and operations in admin panel

• Configure logging of all key user and admin actions

• Implement IP/geography restriction policies for the control panel

• Audit third-party libraries for vulnerabilities (composer audit)

• Enable regular database and log backups

The project is on Yii2, but since work mainly involves services and ORM — we consider candidates with experience in any framework.

Describe your experience, attach the last 3 completed projects, including code examples if possible.
How much time do you have available for the project each day?