Design and Implementation of an E-commerce Website using PHP and MySQL

Desklib provides past papers and solved assignments for students. This project details e-commerce website development.

WEB APPLICATION DEVELOPMENT
1

Contents
Introduction:....................................................................................................................................4
LO1. Understand the concepts of web application development....................................................4
P1.1 – Critically evaluate the functions and advantages of web applications.............................4
P1.2 – Critically compare different types of server-side and client-side scripting languages.....5
P1.3–Examine web security and make recommendations for security improvements...............6
LO2 Be able to design web applications.........................................................................................7
P2.1 Design a web application to meet requirements given in the case study............................7
P2.2 synthesise client-side and server-side functionality in a web application.........................10
P2.3 Apply a database design for the given scenario................................................................12
P2.4 Evaluate alternative designs and solutions to meet the given requirement as explained in
the case study.............................................................................................................................13
LO3 Be able to implement web applications.................................................................................16
3.1 Implement a web application to a prepared design using client -side and server-side
scripting languages....................................................................................................................16
3.2 implement a web-enabled database management system to store, retrieve and manipulate
data in a web application...........................................................................................................24
3.3 Identify and implement opportunities for error handling and reporting..............................28
Lo4 Be able to test web applications.............................................................................................29
4.1 Critically review and test a web application using a web enabled database management
system........................................................................................................................................29
4.2 Analyse actual test results against expected results to identify discrepancies.....................29
4.3 Critically evaluate independent feedback on a developed web application and make
recommendations for improvements.........................................................................................30
4.4 Create user documentation for a developed web application..............................................31
Conclusion.....................................................................................................................................39
References......................................................................................................................................40
2

Introduction:
The shopping arena website is an e commerce website which is designed in this assignment by
using the PHP programming language. The functions of web applications is increasing day by
day & with such rapid advancement in technology the web applications has become the basic
necessity for mostly all the business organizations. The functions of shopping arena website are
discussed. Also, the different categories of web applications present in current scenarios are also
mentioned. Different categories of client side & server side scripting languages are compared
with each other. The basic requirement of a website is also discussed. A database is also
designed for the shopping arena website. The designed website is also evaluated by conducting
different tests on the website like performance test, compatibility test, security, etc. Also the
errors generated during the implementation of the website are explained. Some other
technologies & programming languages present which can also be used to design such website is
also discussed with some advantages & disadvantages.
LO1. Understand the concepts of web application development
P1.1 – Critically evaluate the functions and advantages of web applications
Web applications are widely used nowadays by different organizations & business to perform
different functions. Different web applications perform different functions. Web applications
are being used for different purposes like: handling information, determining figures, visual
generation, manipulation of data & many more. In present scenario, many web applications
are developed which are playing a significant role in managing the different variety of
operations & functions related to business which also contributing a lot in the enhancement
of efficiency & accuracy of those functions performed by the specific applications. Such
business applications include enterprise resource planning, project management software,
scheduling software, project management software, resource management software, time
management software & many more. There are web applications which are used as a gaming
app like clash of clans, temple run, angry birds, etc. & even almost 25% web apps available
on the play store falls in the category of gaming apps. Also, many web applications provide
the facility for education. One can learn wide range of things through education apps like:
Duolingo – Learn Languages for Free, Lumosity (brain training), Photo path (camera
calculator). Many web applications contribute in improving the ease, comfort & facilities
related to travelling & also help in booking the vehicles online. Some travelling apps are
Uber, Ola, United Airlines, Google Earth, etc. Other categories of web applications are
lifestyle apps & entertainment apps. Lifestyle apps have a wide scope in context of human
interests & activities varying from fitness, weight loss, shopping etc. Some lifestyle apps are:
PINK nation, Tinder, around me, etc. Also, there are many web apps which can be used for
the purpose of chatting, doing live streams & used to watch videos & shows online. Such
entertainment apps are: Dub mash, Netflix, Amazon prime video, etc.
3

Not only wide range of functions & applications for web apps but also there are ample
numbers of web applications. Web applications are always updated & every user uses the
same app through URL & therefore using the latest version of web app. As the web app
provide cloud storage, so infinite space is available for the purpose of storing. One can easily
use web app, simply by entering username & password. As it works through internet, so web
applications are accessible from any location where internet is available. Web applications
are user friendly & it is very easy to make a web application without compromising with the
cost effectiveness.
P1.2 – Critically compare different types of server-side and client-side scripting
languages.
Server-side Scripting language: Implementation server-side scripting language take place in
the web server. Dynamic HTML pages are developed when the request sent by the user for the
implementation of server-side script is accepted. The web browser receives the HTML pages
which are developed as a result of implementation of server- side script.
There are many server – side scripting languages present but the most common are compared
below: PHP, ASP, JSP.
Table: Difference between PHP, JSP and ASP
PHP JSP ASP
PHP is a web development
language. It has minor barrier
for fulfilling the purpose of
entry.
Have major barrier for entry. Smallest barrier is seen in
ASP.
Low cost / cost effective. Available free of cost. Less expensive in comparison
to the PHP.
PHP means personal home
page.
JSP means java server page. ASP means active server
page.
It is one of the robust
languages.
Robust than ASP & PHP. Less robust.
Apache server supports this
language.
Apache Tomcat or JBoss or
Web Sphere, Web Logic
supports JSP.
Microsoft IIS server supports
ASP.
4

Client- side scripting language: Execution of client – side scripting language also occurs in the
web browser. The code is sent to the user from the web server & code is implemented in the web
browser. The client_ side scripting languages are compared below:
VBScript: The acronym of VBScript is Visual basic script & it is a client-side scripting
language. It is the version of Microsoft visual basic & has same syntax. It helps in making
dynamic pages. It can also be used where there is a requirement of making web page interactive.
JavaScript: It is a dynamic language which is lightweight. It is interpreted & can work as object
oriented language. It is a part of web pages & assists the user in making dynamic pages by
making interaction of client side script with user. Earlier it was known by the name of Live
Script.
JQuery: J query assists in simplifying complex things which exists in the JavaScript, for
example AJAZ calls & DOM manipulation. There are many characteristics & functionalities in
jQuery like: utilities, HYTML event methods, CSS manipulation, DOM manipulation, AJAX. It
is light weight language. It contains JavaScript library , so requirement of writing more.
P1.3–Examine web security and make recommendations for security improvements.
Web security has become one of the major issues in the scenario where everything is dependent
on web-based applications. There exist different security pitfalls in web applications as discussed
below along with some recommendations for the improvement of web security:
 Injection flaws:
Injection fall is a security pitfall which is basically seen in the web applications due to failure
in filtration of the unauthorized input. The losses of the client data as well as the when web
browser get hijacked as a result of automatic injection of input data & many other functions.
LDAP sever, browser & SQL servers are the few servers in which the unauthenticated data is
entered due to injection flaws.
Recommendations for improvement of security for Injection flaws: The information & the
data from the unauthorized clients require data filtration. As it is very difficult to filter all the
data, therefore framework function needs to be used.
 Broken authentication:
Broken authentication can be generally seen in the web applications and there is no specific
reason behind the occurrence of broken authentication & ample number of causes for it:
 If SSL security is not used
 If hijacking occurs
 Presence of unencrypted password
5

 If timeouts are not executed
 If session id is present in the uniform resource locator
 If HTTP is used
 During session fixation & many more.
Recommendations for improvement of security for broken authentication: Using the framework
is the best solution for the prevention of broken authentication. In some cases, programming
codes can also be used at the place of framework.
 Exposure of sensitive data: Encryption of sensitive data & information is required. All
the information. To prevent the sensitive data from the exposure or leak, the data should
be encrypted & one should follow the same even in the transit. Encryption & hashing
requires for sensitive details like details of credit cards & debit cards as well as for the
passwords. Proper web standards & suggested guidelines need to be considered for the
algorithm mainly necessary for encrypting the data.
Recommendations for improvement of security for broken authentication:
 Use correct certificates of HTTPS
 The sensitive data need to be encrypted
 Hashing of all the sensitive details is necessary like passwords. Bcrypt can be used for
hashing & in the absence of bcrypt, salting & rainbow tables are best option.
 The storage should not contain any sensitive data like bank details. There is a possibility
that information can be leaked if it is stored in the storage.
 Sign Up processors are required to be used while going for online payments.
LO2 Be able to design web applications
P2.1 Design a web application to meet requirements given in the case study.
The appropriate & the good planning is required in order to fulfil all the requirements which the
website of the business organization require & for which the website will be used. The design of
the website should be such that it meets the requirements of the organizations & the aim of
developing the website. It should have the entire details which are mandatorily required like:
documents, required images & contact information if required. All the pages of the website
should be arranged in a sequential manner which will help the user of the website to easily use
the website & also assists in easy navigation. Some of the primary components which the basic
website requires are:
6

o Name of the website
o Homepage of the website
o Logo of the website(trademark)
o Navigations
o Option to search the query
o Contact information of the organization
o Information regarding the organization
o Map of the organization
o Section to post the feedback of the users or customers.
Figure 1: Category page
7

Figure 2: Forgot password
Figure 3: Help page
8

Figure 4: Singh up page
P2.2 synthesise client-side and server-side functionality in a web application.
The website is developed by using a particular programming language or by using the languages
like HTML or any other language which falls in the different category like client side or server-
side scripting language & other remaining required parts or sections of the website designed with
the same. The entire functioning of the website is intended to be dependent on the two main sides
discussed below:
o The processes in which the client or the user does not play any direct role & all the
functions occurs at the sever side which is hidden from the client & the different
operations related to the database management system, sever request, etc. Falls in the
category of server- side functioning.
o The processes which are implemented at the client side & the functions & operations like
providing the input & getting the required result in the form of text or any other depiction
like image or visual representation falls 9in the category of client – side functions.
9

Both client – side & sever- side performs different functions of the web application. Some of the
server- side languages are developed for performing the role of sever side & the same has been
done for the proper functioning of the client – side. The diagram below depicts the functioning &
the working of the client- side & severs- side in the web application & how they interact with
each other to achieve the required goal.
Three tier architecture: It is made of three tiers or in other words it is made up of three layers
defined in the logical computing. This is widely utilized in the client server system. The three
layers or tier are as follows:
 Presentation tier
 Application tier
 Data tier
Figure 5: Three tier architecture
(Report J,2019)
Presentation Tier: It is the top layer of the 3-tier system & it includes the user interface. The
user interface can be accessed through the web-based application or through web browser. The
graphical depictions are shown in the interface & the required information is displayed to the end
user. Presentation tier is developed on a HTML5, JavaScript, CSS, & some other web
development tool like framework & it interacts with remaining two layers by using the API calls.
Application Tier: The main capabilities for application are taken from the application tier. It has
functional business logic which can be developed in the languages like java, .NET. Python, C++.
Data Tier: The data tier consists of many components but the major parts are database system &
data access layer. Data storage system is the one of the most important components of data tier.
It includes Oracle, MySQL, Microsoft SQL server, etc.
10

Figure 6: JReport
(Report J, 2019)
The basic structure for 3 tier system consists of the presentation tier. This presentation tier or
front tier connected to the laptop, tablet, computer or some other devices like mobile. These are
connected by the web-based application or web browser with help of the appropriate web server.
The application tier which is followed by the presentation tier is connected to the network of
servers & can also be used in the cloud or any other workstation as per the requirement in the
processing. It also consists of database models and mainly many relational database models or
any other database system is used.
One example can be taken for the three-tier architecture is the log in process in ant entertainment
or media platform like Netflix or the process of watching videos online. The user can log in the
account by using the mobile application or using the website. After logging in the account of
Netflix, different videos will be visible in the presentation tier. The presentation tier is used by
the end user or the person logging in the account. The data is transferred to the application tier
after the user has the selected the video & application tier assists in querying the information in
the data tier. The same process is repeated the number of times the user will access the particular
video from the application of Netflix or the website of the same.
P2.3 Apply a database design for the given scenario.
Database management system plays an essential role in the functioning of the website.
Therefore, designing the website is one of the major tasks which need to be considered while
developing a web site as it assists in different operations like storing the data & the information,
& many other files & documents required by the organization of the website. Therefore, it act as
a knowledge base in the website & the section where all the necessary data is kept stored. The
database is designed for the entire functioning of this website. The database system is required
for storing the data & access to the information with ease, helps in query, & in regulating other
11

major operations which will directly & indirectly help the user & the organization in fulfilling
their requirements. There are different tools present in the era of web technology which can be
used in developing a database like: MySQL, DDL, etc. The relationships between different
information & attributes are shown with the help of Entity- Relationship diagram below:
Figure 7: ER Diagram
P2.4 Evaluate alternative designs and solutions to meet the given requirement as
explained in the case study.
Different programming languages & technologies are present to design the design arena website
as discussed below:
Language Pros Cons
Python Simple & easy Low as line by line execution
present.
VBScript Simple structure Transferring to another OS is
very tedious.
WIX It is very helpful in developing
good interface with the less
cost.
Advertisements are present
which cannot be easily
removed.
12