Web Application Development Project: Online Bookstore

Desklib provides past papers and solved assignments for students. This project details the creation of an online bookstore web application.

WEB APPLICATION DEVELOPMENT

Contents
Introduction:....................................................................................................................................3
LO1: Understand the concepts of web application development....................................................4
1.1:...............................................................................................................................................4
1.2:...............................................................................................................................................4
1.3:...............................................................................................................................................5
LO2: Be able to design web applications………………………………………………………...8
2.1:...............................................................................................................................................8
2.2:.............................................................................................................................................13
2.3:.............................................................................................................................................15
2.4:.............................................................................................................................................15
LO3: Be able to implement web applications for the given case study in task 2..........................18
3.1:.............................................................................................................................................18
3.2:.............................................................................................................................................19
3.3:.............................................................................................................................................20
LO4: Be able to test web applications...........................................................................................20
4.1:.............................................................................................................................................20
4.2:.............................................................................................................................................23
4.3:.............................................................................................................................................24
4.4:.............................................................................................................................................25
Conclusion:....................................................................................................................................26
References:....................................................................................................................................27
2

Table of Figures:
Figure 1: Home page.......................................................................................................................9
Figure 2: Sign up...........................................................................................................................10
Figure 3: Log in.............................................................................................................................11
Figure 4: Books..............................................................................................................................12
Figure 5: Cart.................................................................................................................................13
Figure 6: Architecture....................................................................................................................15
Figure 7: ER Diagram....................................................................................................................16
Figure 8: Wordpress website.........................................................................................................17
Figure 9: Wix Website...................................................................................................................18
Figure 10: Square Space website...................................................................................................19
Figure 11: Home Page...................................................................................................................21
Figure 12: Login Page...................................................................................................................22
Figure 13: Book Page....................................................................................................................24
Figure 14: Cart Page......................................................................................................................24
Figure 15: Product Table...............................................................................................................25
Figure 16: All Tables.....................................................................................................................25
Figure 17: Cart Table.....................................................................................................................26
Figure 18: Book Table...................................................................................................................26
Figure 19: Order Table..................................................................................................................27
Figure 20: Customer Database.......................................................................................................27
Figure 21: Customer Table............................................................................................................28
3

Introduction:
The given assessment report is about creating a website and also managing it with the help of a
database. For creating a website, HTML, CSS and PHP are used. This website contains an online
book store named, ShipShop Creations. From this website, the user can log in or signup and then
order any book whichever is available on the website and can do the payments online. This
website comprises of many pages and are linked together which contain different tabs that
include Home, Contact Us, About Us and Gallery. Home includes basic introduction of website
through which user can sign up for the website, Contact Us is for readers who have any query or
issue can contact to the website owner, About us contains the details of the website in short and
Gallery contains the books which are available and one can select books by searching into
gallery. This is just an overview of the website, in short, further steps and screenshots will
explain the process through which the website has created (How To Make a Website 2019).
4

LO1: Understand the concepts of web application development.
1.1:
Pages of web applications interact with requests of the user and also respond to them, not like
website pages where pages are already formatted. In this report, online books purchase is used.
And for storing permanent information related to pricing and purchasing of the books and all
orders, an organized database is managed for the website. With the help of web application one
can have the following advantages: First and most trending is online buying and selling goods
according to the individual budget by easy searching and also helps in tracking orders and
packages for both customers as well as the seller. One can analyze different campaigns which
comprise of distributed data that have collected from various enterprises and offices. Any
enterprise using web application can remain available for customers anytime and anywhere.
There is no particular time and place for a customer to buy goods. One can find the information
about the product in detail also easy comparisons can be done by the user before buying any
goods. As web applications contain proper centralized data which makes the enterprise data
secured and easy backups are available. As every computer system contain browser so there is
zero need to install any application which saves storage of the device. Web Applications are
helpful as easy and quick updates are also sent to the customer on time. Web Applications plays
important asset to any enterprise as it saves a lot of resources for the enterprise like attending
phone calls of a customer of product detail also allows customers to alter their details which can
include address, contact number, and other such information.
Desktop application is much more superior than Web application but there are some advantages
of using web application that include that web application codes are platform independent also
maintenance and patches are easy to provide but there are some advantages of desktop
applications also that include zero installation of any app and have a cross platform.
1.2:
For a website, there are two different forms of scripts that are required and these are Server end
and Client end. Server end is basically for the back end of the website and client end is server
5

end of the website. The basic difference between two is that server scripting requires a server for
the processing and client scripting require the browser to run.
For both types of scripting, different languages are required:
Server-side scripting languages include ColdFusion, C#, PHP, Java, C++, Python, Ruby and
many other but some are explained further. Similarly, for Client-side scripting HTML, CSS,
JavaScript languages are used. Further details for both the type of scripting languages are
mentioned:
HTML: HTML is a client-side scripting language that acts as a basic building block for web
programming that helps in providing a particular frame to a website and helps in describing the
arrangement of the content for a website. This is hypertext markup language and is powerful for
framing website but not as powerful as compared to python.
Python: This is a server-side scripting language that is much faster, as well as shorter code, can
be done in this language. This language focuses on readability as well as on simplicity of the
code which makes this language effective and efficient for users and especially for beginners.
This language is very trending nowadays and used in various sites that include Google and
Youtube also. This language function works pretty well in the object-oriented environment also.
This is the most powerful and effective language as compared to any other.
CSS: Full form of CSS is Cascading Stylesheets which is helpful in making the website more
attractive and catchy. It provides designing to the graphic elements. This is Client side scripting
language. This is used to decorate the website.
PHP: This is Server side scripting language which is used in many famous sites which include
Wikipedia, Wordpress, and Facebook as well. This language is used on the web which is
designed to extract as well as to manipulate any type of data or information from the database.
This language is used with SQL language which is used in the databases. This is used to design
back end of the website, unlike CSS.
Similarly, many other languages are also used for both client sides as well as for server-side
scripting and to make a website both should be coordinated properly("The steps to creating a
website (HTML & CSS) – Code The Web", 2019).
6

1.3:
Web applications are helpful for the enterprise to enhance the sale but as a large amount of data
is on a server of an enterprise then it must ensure the security of data and all the information
regarding the enterprise. As technology is getting advanced, crimes that can snatch access from
an enterprise owner and hacking of data is also enhancing so some preventive measures should
be taken. There are some issues along with their preventive measures are mentioned below:
Broken Authentication: Broken Authentication can cause myriads of the problem that may or
may not be connected with each other these problems can include:
 Gaining access through predicting session ids can be a major problem for the website that
contains enterprise data.
 The Password if not encrypted in storage or transit can result in major hacking of the data
and information.
 Session fixation or Session hijacking can be possible and can lead to major security issue
or URL may contain session id that can be leaked.
So these are some basic problems that can occur if authentication is weak or broken so some
measures that can be taken are:
The simplest and most commonly used to make a website secure is by using frameworks as they
can be implemented in the correct way and are easier to use. Also whatever code is used, one
needs to educate properly about the code by considering every pitfall that may occur or can cause
problems ("Testing Broken Authentication", 2019).
Cross Site Scripting: This is the most common mistake that can be made by the coder. This is
widespread input sanitization failure as it can give any web application JavaScript tags on input
whenever this input returns to user unsensitised and browser of the user will execute it. When
any page loads, the script runs like it can be used to post cookies to the attacker.
A preventive measure that can be used is by not returning the HTML tags to the clients. By
doing this one can provide defense against HTML injection which includes a similar attack when
an attacker injects HTML content which proves to be annoying.
Injection Flaws:
7

This flaw occurs on failure to filter the untrusted input and this can occur when unfiltered data is
passed to SQL server or to the server of LDAP or on any other servers. The major issue that can
occur here is that the attacker might inject commands in these entities which can result in the
hijacking of the browser of the client or it can lead to loss of data.
Some preventive measures that can be taken by simply filtering the input although filtering can
prove to be a tough task so it is preferable to rely on framework’s function that is easy to perform
and are scrutinized properly.
Insecure Direct Object References:
This case is based on user input trust and price is paid in a security vulnerability from the result.
Direct Object References refers to an internal object that may include any file or any database
key that is exposed to the user. The problem that can occur is that any hacker can provide
reference and if authorization is broken then the hacker can have all the access. Also, one more
problem that can occur is that password reset functions which get rely on the input of the user to
find that who is the owner and by clicking on valid URL a hacker might modify username field
and alter it to admin.
Preventions of the problem include performing authorization of user properly with consistency.
Also by avoiding relying on stored data, which is stored internally, being passed from the client
through CGI parameters.
8

LO2: Be able to design web applications.
2.1:
Figure 1: Home page
This is the basic structure of the home page of the website which displays all the functions and
buttons of the website. And contain basic information regarding the website like what is the
website about and what services it can provide to the customers.
9

Figure 2: Sign up
This is the sign-up page of the website for that customer who wishes to register themselves for
the website. They need to fill the given details before signing up.
10

Figure 3: Log in
This is the login page for customers if they are already registered then they just need to fill their
email and password for logging into the website.
11

Figure 4: Books
This web page is another page of the website that contains all the books that are available and by
checking this page a customer can select any book which he/she wishes to read also prices of the
books are mentioned in this page. For this website, only nine books are there only so in this
mockup only pictures are shown. For a working website, more books can be available to
customers.
12