Integrated professional cybersecurity application template into Campaign Builder

app.py

@@ -36,15 +36,37 @@ def setup_campaign():
     subject = request.form.get('subject')
     body = request.form.get('body')
     
-    contacts_file = request.files.get('contactsFile')
-    if not contacts_file:
+    if not contacts_file or contacts_file.filename == '':
         return jsonify({'error': 'Contacts file is required.'}), 400
+    
+    # Secure filename and check extension
+    allowed_extensions = {'.csv', '.xlsx', '.xls'}
+    file_ext = os.path.splitext(contacts_file.filename)[1].lower()
+    if file_ext not in allowed_extensions:
+        return jsonify({'error': f'Invalid file type. Allowed: {", ".join(allowed_extensions)}'}), 400
+
+    # Basic input validation
+    if not sender_email or "@" not in sender_email:
+        return jsonify({'error': 'A valid sender email is required.'}), 400
+    if not sender_password or len(sender_password) < 8:
+        return jsonify({'error': 'A valid App Password is required.'}), 400
+    if not subject or not body:
+        return jsonify({'error': 'Subject and Body are required.'}), 400
+
+    # Verify SMTP credentials BEFORE starting campaign
+    try:
+        server = smtplib.SMTP('smtp.gmail.com', 587)
+        server.starttls()
+        server.login(sender_email, sender_password)
+        server.quit()
+    except Exception as e:
+        return jsonify({'error': f'SMTP Login Failed: Ensure 2-Step Verification is on and you are using an "App Password". Error: {str(e)}'}), 401
         
     campaign_id = str(uuid.uuid4())
     campaign_dir = os.path.join(app.config['UPLOAD_FOLDER'], campaign_id)
     os.makedirs(campaign_dir, exist_ok=True)
     
-    contacts_path = os.path.join(campaign_dir, contacts_file.filename)
+    contacts_path = os.path.join(campaign_dir, "contacts" + file_ext)
     contacts_file.save(contacts_path)
     
     # Handle attachments
@@ -52,13 +74,18 @@ def setup_campaign():
     attachment_paths = []
     for att in attachments:
         if att.filename:
+            # Check attachment extension for safety
+            att_ext = os.path.splitext(att.filename)[1].lower()
+            if att_ext in {'.exe', '.bat', '.sh', '.msi'}:
+                return jsonify({'error': f'Security Alert: File type {att_ext} is not allowed as an attachment.'}), 400
+                
             att_path = os.path.join(campaign_dir, att.filename)
             att.save(att_path)
             attachment_paths.append(att_path)
             
     # Parse Contacts
     try:
-        if contacts_file.filename.endswith('.csv'):
+        if file_ext == '.csv':
             df = pd.read_csv(contacts_path)
         else:
             df = pd.read_excel(contacts_path)
@@ -66,7 +93,7 @@ def setup_campaign():
         return jsonify({'error': f'Failed to read contacts file: {str(e)}'}), 400
         
     if 'RecipientEmail' not in df.columns:
-        return jsonify({'error': 'Contacts file must contain a "RecipientEmail" column.'}), 400
+        return jsonify({'error': 'Excel/CSV must contain a "RecipientEmail" column.'}), 400
         
     for col in ['EmailSent', 'DateSent', 'Notes']:
         if col not in df.columns:

email_automation.py

@@ -44,8 +44,8 @@ class EmailAutomation:
         self.delay_between_emails = 10  # seconds
         
         # Email configuration (user will set these)
-        self.sender_email = "princekothiya1604@gmail.com"  # Replace with your email
-        self.sender_password = "fwdbspylwenitvvi"   # Replace with App Password
+        self.sender_email = "[EMAIL_ADDRESS]"  # Replace with your email
+        self.sender_password = "[PASSWORD]"   # Replace with App Password
         self.sender_name = "Prince Kothiya"
         
     def get_email_template(self, company_name):
@@ -72,8 +72,8 @@ Thank you for considering my application. I look forward to hearing from you.
 
 Best regards,
 Prince Kothiya
-+91 9979936073
-princekothiya1604@gmail.com
+
+[EMAIL_ADDRESS]
 LinkedIn: linkedin.com/in/prince-kothiya-331073287
 GitHub: github.com/prince1604
 Rajkot, Gujarat, India"""

templates/campaign.html

@@ -154,15 +154,39 @@
                                         Subject</label>
                                     <input name="subject" required
                                         class="rounded-lg border-slate-200 px-4 py-2.5 w-full dark:bg-slate-800"
-                                        placeholder="Hey {FirstName}, special offer inside!" type="text" />
+                                        value="Application for Cybersecurity Position - Prince Kothiya | BSc IT 2026"
+                                        type="text" />
                                     <p class="text-xs text-slate-500">Tip: Use {ColumnName} to personalize</p>
                                 </div>
                                 <div class="flex flex-col gap-2">
                                     <label class="text-sm font-semibold text-slate-700 dark:text-slate-300">Email Body
                                         Message</label>
                                     <textarea name="body" required
-                                        class="w-full border-slate-200 rounded-lg p-4 dark:bg-slate-900"
-                                        placeholder="Start typing your message..." rows="8"></textarea>
+                                        class="w-full border-slate-200 rounded-lg p-4 dark:bg-slate-900" rows="12">Dear Hiring Manager,
+
+I am writing to express my strong interest in the Cybersecurity position at {CompanyName}. As a final-year BSc Information Technology student at Harivandana College with hands-on experience in penetration testing, secure web development, and Laravel application security, I am eager to contribute to your security team.
+
+KEY HIGHLIGHTS OF MY PROFILE:
+• Developed comprehensive Kali Linux-based security toolkit with 50+ integrated penetration testing tools
+• Created secure Laravel web applications implementing JWT authentication, input validation, and SQL injection prevention  
+• Built automated OSINT tool for reconnaissance across 15+ data sources
+• Currently working as Junior Laravel Developer Intern at Eminent Coders, focusing on secure web development
+• Proficient in: Penetration Testing, Web Application Security, Python, PHP/Laravel, Bash Scripting, Kali Linux Tools
+• Completed practical cybersecurity simulations with Deloitte Australia and Tata
+
+I am particularly drawn to {CompanyName}'s work in cybersecurity. My combination of development experience and security testing skills positions me to contribute effectively to your security initiatives.
+
+I have attached my resume for your review and would welcome the opportunity to discuss how my background in security testing and secure application development can benefit {CompanyName}.
+
+Thank you for considering my application. I look forward to hearing from you.
+
+Best regards,
+Prince Kothiya
+
+[EMAIL_ADDRESS]
+LinkedIn: linkedin.com/in/prince-kothiya-331073287
+GitHub: github.com/prince1604
+Rajkot, Gujarat, India</textarea>
                                 </div>
                             </div>
                         </section>
@@ -285,13 +309,37 @@
                     <div class="flex flex-col gap-1.5">
                         <label class="text-sm font-semibold text-slate-700">Subject Line</label>
                         <input name="subject" required class="w-full rounded-lg border-slate-200 text-sm p-3"
-                            placeholder="Enter email subject" type="text" />
+                            value="Application for Cybersecurity Position - Prince Kothiya | BSc IT 2026" type="text" />
                     </div>
                     <div class="flex flex-col gap-1.5">
                         <label class="text-sm font-semibold text-slate-700">Email Body</label>
                         <textarea name="body" required
                             class="w-full border border-slate-200 rounded-lg text-sm p-3 resize-none focus:ring-1 focus:ring-primary"
-                            placeholder="Write your message... {FirstName}" rows="6"></textarea>
+                            rows="10">Dear Hiring Manager,
+
+I am writing to express my strong interest in the Cybersecurity position at {CompanyName}. As a final-year BSc Information Technology student at Harivandana College with hands-on experience in penetration testing, secure web development, and Laravel application security, I am eager to contribute to your security team.
+
+KEY HIGHLIGHTS OF MY PROFILE:
+• Developed comprehensive Kali Linux-based security toolkit with 50+ integrated penetration testing tools
+• Created secure Laravel web applications implementing JWT authentication, input validation, and SQL injection prevention  
+• Built automated OSINT tool for reconnaissance across 15+ data sources
+• Currently working as Junior Laravel Developer Intern at Eminent Coders, focusing on secure web development
+• Proficient in: Penetration Testing, Web Application Security, Python, PHP/Laravel, Bash Scripting, Kali Linux Tools
+• Completed practical cybersecurity simulations with Deloitte Australia and Tata
+
+I am particularly drawn to {CompanyName}'s work in cybersecurity. My combination of development experience and security testing skills positions me to contribute effectively to your security initiatives.
+
+I have attached my resume for your review and would welcome the opportunity to discuss how my background in security testing and secure application development can benefit {CompanyName}.
+
+Thank you for considering my application. I look forward to hearing from you.
+
+Best regards,
+Prince Kothiya
+
+[EMAIL_ADDRESS]
+LinkedIn: linkedin.com/in/prince-kothiya-331073287
+GitHub: github.com/prince1604
+Rajkot, Gujarat, India</textarea>
                     </div>
                 </div>
             </section>