Κλειστό

Longin system using PHP and connects to a MySQL backend database.

Secure Programming 1

Assignment 1

The purpose of this assignment is to give you some practical experience in attacking vulnerable source code and also

experience in trying to secure this insecure code.

You will be supplied with a simple Web application. The app is coded using PHP and connects to a MySQL backend database. There are two parts to the assignment, both worth the same (50/50).

You need to find weaknesses, exploit them and finally fix them.

For the first part of your assignment you need to analysis the code and look for possible weaknesses.

You then need to try exploit any weakness you think you have identified. If you think a form field is vulnerable to XSS, then perform some attack to show the weakness.

(Only one example, per location, each field, is required to show that it is vulnerable).

For the second part of the assignment you need to try secure the code, by correcting any flaws you find by writing new secure code.

Setup

Firstly you’ll need to get the code running so you can test it. You’ll need to setup a webserver and a database, I suggest using WAMP which is the easiest solution to automatically set everything up for you. You’ll also need to create a database and a table. The easiest way to do this is using MyPHPAdmin create a database (test) and then run the SQL script I’ve included with the source to create and set up a table.

Once up and running you can start your assignment.

Section 1 (50%)

OK you have some source code to review and try to break. There are plenty of basic errors in the code so you should be able to find some. You need to list each weakness that you think you have found and briefly mention what type of weakness it is. You should also try and exploit each weakness, with some real world hacking.

You should highlight exactly what you did to exploit each weakness. If you find a possible weakness but fail to exploit

it, then you should still include it, and mention anything you tried in your attempt to exploit it.

Section 2 (50%)

The second part of your project is to correct the source code to fix as many of the identify weaknesses as you can. Your final corrected code must still run without changes needed by me.

You must correct the code I give you, not just hand me back a completely different app. If you tried to fix a bit of code but it won’t compile or gives errors, then include it in your source code, so I can see what you tried and where.

In your documentation you need to include a brief mention of each bit of code you tried to correct and how your code fixes the problem.

Deliverables

A zipped file with your completed report and all of the corrected source code uploaded to Moodle by the 8th of November (Sunday).

Note: MAX word count should be between 2,500 and 3,000 words, but reports can be considerably less. I don’t want a history of vulnerabilities in your report. Just what vulnerabilities you found, how you found them and how you fixed them in code.

Ικανότητες: MySQL, PHP, Αρχιτεκτονική Λογισμικού

Περισσότερα: writing to a file in c, writing secure code, writing a field report, world programming system, where to start programming, what is your weakness, what is a weakness, what do i need to start php programming, what can you do with php and mysql, what can i do with php and mysql, what are your weaknesses, what are some weaknesses, what are some of your weaknesses, web programming using php, weaknesses list, Weakness, way of writing a report, sql php application without programming, solution to assignment problem, solution of assignment problem, set a bit in c, script writing web app, script writing app, problem solution assignment, problem set analysis

Σχετικά με τον Εργοδότη:
( 1 αξιολόγηση ) United Kingdom

Ταυτότητα Εργασίας: #8800053

22 freelancers are bidding on average £513 for this job

meet2amitvw

Let's discuss more about project to finalize the proper scope with estimated cost and time so ping me over the freelancer chat. I am myself developer so you will directly work with me. No mediators. No managers. No Περισσότερα

£721 GBP σε 10 μέρες
(158 Αξιολογήσεις)
9.3
KESHAVINFOTECH

Hi Thanks for your valuable time. :-) Just reply with 'Yes' and We will come up with a. Detail project plan with our comments/queries. b. Best-feasible-real COST & TIMELINE Latest Projects : [login to view URL] Περισσότερα

£747 GBP σε 30 μέρες
(628 Αξιολογήσεις)
8.4
buraqtech

1. Tours Site + Booking Module We already designed and developed a complete portal for online tours listing with complete online bookings of tours with departures and much more other things in a complete cms based sol Περισσότερα

£749 GBP σε 15 μέρες
(98 Αξιολογήσεις)
8.0
aqualeafitsolpl

A proposal has not yet been provided

£750 GBP σε 10 μέρες
(119 Αξιολογήσεις)
8.0
webbookstudio

Hello, my name is Olya. I represent Ukrainian IT Company «Webbook». We provide website design and web development services for organizations, public and government institutions, company or private web-pages. We got Περισσότερα

£600 GBP σε 17 μέρες
(124 Αξιολογήσεις)
8.0
pointlogic

Hello..I have an experience of more than 6 years in web development and maintenance. I have in-depth knowledge of php, mysql, jquery, paypal integrations, API's, css, html, html5. Our team is experienced, creative & Περισσότερα

£250 GBP σε 10 μέρες
(266 Αξιολογήσεις)
8.0
posspooja

Hello, I am an PHP Certified Developer with more than 7 years of experience and shall get this done in about 15 days' time. Let me know if you have any doubts / queries about my expertise, will be more than hap Περισσότερα

£736 GBP σε 15 μέρες
(140 Αξιολογήσεις)
7.7
JoomlaVogue

Hello Sir, First of all, we would like to tell you how we will initialize the project with you. According to your project description, our team would like to discuss with you, to get more understanding of the Περισσότερα

£515 GBP σε 10 μέρες
(108 Αξιολογήσεις)
7.5
aryan151

Hello Sir, I am ready to start the work now, i am having 8 years of exp..... I am ready to start the work now, i am having 8 years of exp.....

£250 GBP σε 10 μέρες
(245 Αξιολογήσεις)
6.7
arifjaunpur

Hello, I am Sr. web developer have strong debugging and coding skills. I am full stack developer with good knowledge of Java, PHP, JavaScript, MySQL, MongoDB, AngularJS, JQuery, HTML, Bootstrap, etc. I have creat Περισσότερα

£300 GBP σε 10 μέρες
(62 Αξιολογήσεις)
6.3
cijagani

I have a lots of experience in C++,C#.net,JAVA, software Architecture, PHP, MySQL, Wordpress and Web Designing. my aim to deliver quality products to our customers within specified deadline. If hired by you I wil Περισσότερα

£255 GBP σε 4 μέρες
(97 Αξιολογήσεις)
6.1
bestofweb

Hi there, Nice to see your project. I am a developer with more than 8 years of experience with solid technical skills. I think I’m the best fit for the project. Here are our featured projects: http://ahp Περισσότερα

£750 GBP σε 20 μέρες
(9 Αξιολογήσεις)
5.8
suraj2

A proposal has not yet been provided

£500 GBP σε 29 μέρες
(45 Αξιολογήσεις)
5.6
justdotweaks

A proposal has not yet been provided

£526 GBP σε 10 μέρες
(21 Αξιολογήσεις)
5.1
jagrutibhadani

Hi There, i own a company in India. I am having 4+ years of experience in Web Developement. We have a good strength of Web Developers. We provide training in Websites to college students and to software personnel. Περισσότερα

£684 GBP σε 15 μέρες
(18 Αξιολογήσεις)
5.2
bobandjordjevic

Hi, I am new on this site, but I am a very experienced senioe PHP developer. Thanks in advance. ----------------------------

£333 GBP σε 10 μέρες
(1 Κριτική)
2.6
waytolearn

Hello, I would like to your php assignment. I am Master in Computer Engineering So i know how to do this kind of assignment. Let me know if you have any questions! Thank you for your time,

£250 GBP σε 4 μέρες
(1 Κριτική)
1.3
clearatul0

Data Management : Our areas of interest or expertise: Excel, VBA, Advanced Formulas, Conditional Formatting, Pivot Tables, Slides Preparation and Financial Calculations, Drawing Comparison, Design Suggestions. Softwar Περισσότερα

£283 GBP σε 10 μέρες
(0 Αξιολογήσεις)
0.0
shubhashishgroup

Hello, We are the group of web-developers "Shubhashish Group". We have more than 4 years of experience in developing of web-sites and mobile applications. We built some projects like this; we can develop a full funct Περισσότερα

£580 GBP σε 20 μέρες
(0 Αξιολογήσεις)
0.0
conversioIT

A team of network engineers and software developers We are a company of 20-25 employees majorly dealing with Networking and IT solutions. We have a dedicated teams on implementation and development.

£388 GBP σε 10 μέρες
(0 Αξιολογήσεις)
0.0