Development and Testing of a Secure E-commerce Web Application

Desklib provides past papers and solved assignments for students. This project focuses on web application development.

WEB APPLICATION DEVELOPMENT
1

Contents
Introduction......................................................................................................................................4
LO1. Understand the concepts of web application development....................................................5
P1.1 critically evaluate the functions and advantages of web applications.................................5
1.2 – Critically compare different types of server-side and client-side scripting languages.......7
1.3 – Examine web security and make recommendations for security improvements................9
LO2 Be able to design web applications.......................................................................................10
P2.1 Design a web application to meet requirements given in the case study..........................10
2.2 Synthesize client-side and server-side functionality in a web application..........................13
2.3 Apply a database design for use in a web application.........................................................15
2.4 Evaluate alternative designs and solutions to meet a given requirement............................16
LO3 Be able to implement web applications.................................................................................17
3.1 implement a web application to a prepared design using client-side and server-side
scripting languages....................................................................................................................17
3.2 implement a web-enabled database management system to store, retrieve and manipulate
data in a web application...........................................................................................................20
3.2 Identify and implement opportunities for error handling and reporting.........................21
Lo4 Be able to test web applications.............................................................................................23
4.1 Critically review and test a web application using a web-enabled database management
system........................................................................................................................................23
4.2 Analyse actual test results against expected results to identify discrepancies.....................24
4.3 Critically evaluate independent feedback on a developed web application and make
recommendations for improvements.........................................................................................25
4.4 Create user documentation for a developed web application.........................................26
Conclusion.....................................................................................................................................29
Reference.......................................................................................................................................30
2

List of figures
Figure 1: Contact form.....................................................................................................................8
Figure 2: Cart...................................................................................................................................9
Figure 3: About us...........................................................................................................................9
Figure 4: Server and client-side model..........................................................................................10
Figure 5; Database design..............................................................................................................11
Figure 6: About us.........................................................................................................................13
Figure 7: Cart.................................................................................................................................13
Figure 8: Contact form...................................................................................................................14
Figure 9: List of products..............................................................................................................15
Figure 10: Cart detail.....................................................................................................................15
Figure 11; Database 1....................................................................................................................16
Figure 12: Database 2....................................................................................................................16
Figure 13: Database 3....................................................................................................................17
Figure 14: Document 1..................................................................................................................21
Figure 15: Document 2..................................................................................................................22
Figure 16: Document 3..................................................................................................................22
Figure 17: contact document 4......................................................................................................23
3

Introduction
For the business organization, web-based applications are simple and widely used by the
organization, which is simply used for services and products. the web application is developed
by using some of the programming languages in it, this language can be server side or client side
language. A web application is also increased some security problems and as well as use some
pitfall and security actions for it. There is a wide range of programming applications and
platforms which are simply used the web applications for it. These applications can be done by
using the programming applications in it.
4

LO1. Understand the concepts of web application development
P1.1 critically evaluate the functions and advantages of web applications
There are various kinds of web applications are present which is present era with having
different functionality inside it, these functions and applications also used in various field. There
are various or many applications are present which is used in education, payment, travelling and
so many others filed like there is also some lifestyle apps which is used to develop human
interaction with it. for entertainment purpose also these kinds of applications are very much
useful or important because a user can use and watch any kind of TV series, or show at any
period of time. For payment and online banking purpose, these types of applications are used,
there are also many types of applications present which make and use to complex application to
make such kind of application, in which it include simply contact forms and other message
boards and as well as some interfaces in it.
Advantage of web application: Web applications have various numbers of advantages in it
because using application is far more easy and efficient rather than using an app.
 It is much more accessible for the user
 It is very much convenient for the user to use.
 To access any web application only on the internet connection is required.
 For using web application user can implement this at any browser like firefox, chrome
etc.
 Web applications don't require every time to get installed
 The application doesn't really require internal storage in the user phone and other devices
because for application there is a lot of storage given by the cloud.
 Updating application is much easy because they can easily update just by using URL
(Baca, 2019)
Functions:
Web applications perform various functions in different filed
1. It is simply used in the shopping process
5

2. Online educations and tutorials for making simple paths for human beings
3. Social networking and other things
4. Online payment to make a more convenient path for the user.
6

1.2 – Critically compare different types of server-side and client-side scripting
languages
Server-side language: For the web server and application web application simply used server
scripting language in this, in this file web server simply dynamic HTML for the execution of the
file according to the user request, the simple browser which is used in this sent to the client from
the server, in server scripting language there is different kind of database also used to store the
data for this:
 PHP
 ASP
PHP ASP
1. It is cheap in cost Less cost than PHP
2. Robust in nature Less robust
3. It is supported by the Apache server Supported by IIs
These are the simple difference between the databases which we used in the server side
language.
Client-side script language: This is a simple type of language which is implemented in the web
browser, all the process and information has done in the client side by the end user, in client-
server side language all the work has done in the browser. there is some kind of client-server side
language present in this (Hostpresto, 2019)
VB Script JQuery Javascript
It is an actively used
scripting language
It is widely used in
the web browser
It is a fast and short
library
It is used to validate
server-side
It is not considered
as a programming
language
It is validated as a
client-side language
7

It is not a sensitive
language
It is compatible to
use
It is case sensitive
8

1.3 – Examine web security and make recommendations for security improvements.
Developing any web applications there is so many types of security and pitfalls are used, so to
secure and to use the security there are various types of steps used in this:
Broken authentication: This is the most common and basic security issue or problem which is
occurring in the web-based application, the main reason because this security issue occurs in an
application
 Session hijacking
 Session Fixation
 Absence of other security like (SSL)
Prevention for this: by using the frame broken authentication can prevent, also another way to
prevent this is to generate programming code for this.
Exposure of sensitive data: In web application for crypt ion most common thing is to encrypt
the data, but in the first formation data should be protected not encrypt, all the private
information like debit and credit card should be kept encrypted.
Prevention:
 Never store private or bank card detail in the storage.
 All passwords should be hashed.
These are the 2 most common security issues occurs in web application and also these are the
simple preventions which may be used to secure all the information and data (T, 2019).
9

LO2 Be able to design web applications
P2.1 Design a web application to meet requirements given in the case study
For better designing of any web applications website with some detail is required
o About us page
o Cart
o Contact
Figure 1: Contact form
10

Figure 2: Cart
Figure 3: About us
11

2.2 Synthesize client-side and server-side functionality in a web application
A web application is simply developed and make by using a simple programming language like
PHP, HTML etc, this is simply used to make related components as well, all the functions which
are related and working in this is:
 Client-side language
 Server-side language
Client-side language: All the process which are required as input and as the client end, and also
used to display the result for this, it includes image and text inside it that is known as the client-
side language.
Server-side language: All the process and methods which are implemented in server-side
language are hidden from the user.
These both types of scripting language is simply used to implement different functionality inside
it, PHP is also considered as the simple server-side language.
Figure 4: Server and client-side model
(Source: Walker, 2013)
12