A Carlos Paz is one of the most well-known rental portals in Villa Carlos Paz. The project arrived with two overlapping problems: the codebase ran on PHP 5.6 with 394 calls to APIs removed from the language, and three malicious files were active in production, collecting visitor IPs and silently redirecting traffic to external domains without the client's knowledge. The intervention started with the most critical finding: identifying, isolating and removing the compromised files. Then came the full codebase migration to PHP 8.4 + mysqli across 44 documented phases, using a dual Docker environment (PHP 5.6 + PHP 8.4) to validate compatibility throughout the transition. The closure included real hardening: admin passwords migrated to bcrypt, CSRF protection on critical forms, sensitive deletes blocked on GET, upload validation, secure session cookies and HTTP blocking of legacy artifacts. The site was approved for production on May 13, 2026, running PHP 8.4.21 with no warnings or fatals on any route.
Constructora SaaS
Multi-tenant SaaS backoffice for construction companies: projects, budgets, expenses and inventory with real per-organization isolation and full traceability.