Designing and implementing a secure portal for the departments alumni

3 Implementation

2 Design

4 Conclusion

1 Introduction

1.2 Work Breakdown StructurePORTAL Project

Literature Search

Project Report

Literature Survey

Literature Review

Design PORTAL

Implement PORTAL

Evaluate and Test PORTAL

Develop PORTAL Model

administrator

news

memories

n_picture_picture

n_id

n_status

n_content_fulln_content_brie

f

n_entered_for

n_date

n_title

n_time

n_entered_by

a_id

a_username

a_password

e_mail

m_id

m_content

c_username

m_time

c_picture

m_date

customer

cus_id

c_username

DoBc_picture

c_password

gender

gra_yeare_mailc_nationality

modify

modify

browse

write

write

modify

read

2.1 Entity Relationship Diagram

Department ofCommunication Systems

5 References 6 Acknowledgements

Designing and implementing a secure portal for the Departments alumni. This will enable alumni to be kept updated and update us on latest developments, e.g. new courses, job moves and various career opportunities. There will also be an area for sharing documents, e.g. new courses, modules etc.

Student Name: Lee ChadwickSupervisor: Dr Lina FagooneeCourse: Communications & Computer Systemshttp://dcs-files2/~chadwicl/navigation.php

2.2 Relational Schema

create table memories (m_id int not null auto_increment, c_username varchar (32) not null, c_picture text not null, m_time varchar (32) not null, m_date varchar (32) not null, m_content text not null, primary key(m_id));

create table news (n_id int not null auto_increment, n_title text not null, n_date varchar (32) not null, n_time varchar (32) not null, n_picture_picture text not null, n_content_brief text not null, n_content_full text not null, n_entered_by varchar(32) not null, n_entered_for varchar (32) not null, n_status varchar (32) not null, primary key (n_id));

create table customer (cus_id int not null auto_increment, c_username varchar (32) not null, gender varchar (30) not null, DoB varchar (30) not null, c_nationality varchar (30) not null, gra_year varchar (30), e_mail varchar (50) not null, c_password varchar (32) not null, c_picture text not null, primary key(cus_id));

create table administrator (a_id int not null primary key auto_increment, a_username varchar(32) not null, a_password varchar(32), email varchar(40));

3.1 SQL Tables

3.3.2 View Archived News (Alumni)

3.4.2 View Users (Administrator)

3.3.1 View/Add Memories (Alumni)

ID Task Name Start Finish Duration2006 2007

Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun

1 16d10/08/200620/07/2006Research Alumni needs and expectations

4 30d13/10/200604/09/2006Review current implementation of departmental alumni web portal

5 23d03/11/200604/10/2006Carry out security investigation on PHP, MySQL, Apache

18d14/11/200620/10/2006Compare security of other programming languages

3

2 16d29/08/200608/08/2006Attain Departments needs and expectation of an alumni portal

10d01/09/200621/08/2006Attain key and common features of various alumni implementations

6

66d19/10/200620/07/2006Definition, Plan and Assessment Criteria

10

9

8

7

143d03/04/200715/09/2006Project Implementation

47d01/05/200726/02/2007Evaluation and Testing

33d14/06/200701/05/2007Project Report

1.3 GANTT Chart

3.4.1 Login (Administrator)3.3.4 Login (Alumni)

3.3.5 Member Navigation (Alumni)

3.2 Home Page

McGlinn, J. (2005) Password Hashing [online] last accessed August 2006 at URL http://phpsec.org/articles/2005/password-hashing.html/

PHP.net (2006) Hiding PHP [online] last accessed29 May PHP.net 2007 at URL http://www.php.net/manual/en/security.hiding.php/

PHP.net (2006) Database Security [online] last accessed 29 May 2007 at URL http://www.php.net/manual/en/security.database.php/

Clark, D. (2006) PHP Security Mistakes [online] last accessed 29 May 2007 at URL http://www.devshed.com/c/a/PHP/PHP-Security-Mistakes/

Dickenson, P. (2005) Top 7 PHP Security Blunders [online] last accessed 29 May 2007 at URL http://www.sitepoint.com/article/php-security-blunders/

The project involved many stages which included – Project Planning, Design of System, Project Execution, Evaluation and Testing.

This poster illustrates some of the key features.

3.3.3 New Register (Alumni)

3.3.6 View Current News (Alumni)

Used a combination of PHP, MySQL and Apache to provide a solution to implement the required system.

Used header files and CSS to give the whole site the same look and feel.

Used MD5 (Message Digest 5) for encryption.

Used sessions to access details and methods provided by the portal.

Used PHP as opposed to HTML to hide source code.

Created database files in MySQL and made use of an Apache server.

A special thanks to Dr Lina Fagoonee my supervisor for all her help and support throughout my time working on this project. From start to finish she has been an inspiration, guided me in the right direction and given me all the help and support I have needed.

Thanks to Dr Hassan Ahmed, Lynne Drake, Dr Phil Benachour and Omer Rashid. I would also like to thank all my family and friends.

Many people have been involved in the completion of this project whether it has been in a direct and/or an indirect sense. All their help and support has been amazing and I can not thank people enough for that.

3.4.3 Insert News (Administrator)

Because the project was a follow on from a Master Students work there were various aspects in the design of the system which needed to be addressed.

In the end the database was redesigned. The use of programming in MySQL and PHP was maintained.

Special care was taken In defining the tables for the database. Data entities and their types were chosen carefully so that they matched the requirements of the project.

The project worked well and met the majority of the aims in regards to Definition of Project, Major Deliverables, Statement of Requirements and Critical Success Factors. Administrators can effectively Add/Edit/Delete data with ease.

The project has been enjoyable and rewarding in a sense of learning how to program in PHP and MySQL whilst learning important security aspects of both of these technologies.

1.1 Specification of Project