Projects

QR-Based Digital Business Card System

Unique profile pages and QR code system per employee. vCard download, WhatsApp redirect, SMTP form and CSRF protection.

PHPSMTPQR CodevCardCSRF Protection

This system developed for a manufacturing company equips all company employees with unique digital profile pages and matching QR codes. When a QR code is scanned instead of a physical business card, the visitor always reaches up-to-date contact information; when an employee’s data changes, the QR code does not need to be reprinted. The system moved employee contact infrastructure to a centralized, easy-to-maintain structure.

Problem

Physical business cards have an unchangeable problem: once printed, you are left with a pile of paper carrying outdated information even when a phone number, email, or title changes. In this project, employee mobility and title changes made this problem felt in practice: outdated business cards were causing clients to reach the wrong number or address. Beyond that, there was no tracking of who was given which business card and when; the process of adding someone to a contacts book required multiple steps on mobile devices; and there was no dedicated redirect for WhatsApp, the most practical channel for reaching the company.

Solution

A unique URL was generated for each employee along with a QR code linked to that URL. When an employee’s data changes, a single update from the admin panel is sufficient; QR codes remain the same and automatically display the updated information. Profile pages were designed mobile-first: one-tap vCard download, direct WhatsApp chat, and an SMTP-based contact form were highlighted as three core actions. CSRF token validation and rate limiting against abuse were applied for form security.

Key Features

  • Unique URL and QR Code per Employee: Each profile lives at its own path; centralized management from a single panel across the entire company
  • vCard Download: One-tap contact addition to iOS and Android address books; compliant with the .vcf standard, works seamlessly on both platforms
  • WhatsApp Direct Message: A button to start a conversation directly without saving a phone number; single-step access to the most frequently used channel for client communication
  • SMTP Contact Form: Messages sent from the profile page are delivered directly to the relevant employee’s email
  • CSRF Protection and Rate Limiting: Every form submission passes through token validation; rate limiting is applied against spam and abuse attempts
  • Print-Ready QR: Downloadable as high-resolution PNG; suitable for direct use in offset and digital printing

Technical Infrastructure

The backend was developed in PHP. Employee data is kept in a centralized structure; profile updates are made from the admin panel and all QR code redirects are fed from this centralized source that updates instantly. QR code images are generated server-side and stored as static PNG files; sufficient resolution for print quality is guaranteed. SMTP integration connects directly to the server configuration; the contact form works without requiring a third-party email service. The CSRF token mechanism generates a new token on each form load and verifies it server-side upon submission.

Results

The company now manages employee contact information from a single place. Adding a new employee is completed within minutes; the QR code is immediately ready for use. When an employee’s phone number or title changes, a single update is sufficient; all distributed QR codes automatically display the updated information. vCard integration reduced the friction of adding a contact to zero, while the WhatsApp button reduced reaching the company to a single step. Since clients and business partners always reach correct and up-to-date information by scanning the QR code, communication breakdowns caused by outdated business cards were eliminated.