AIRCC's International Journal of Computer Science and Information Technology

C. Sireesha ¹, G. Jyostna ¹, P. Raghu Varan ¹, P. R. L. Eswari ¹

Affiliations
1 Centre for Development of Advanced Computing, Hyderabad, IN

Abstract

PHP is one of the most commonly used languages to develop web sites because of its simplicity, easy to learn and it can be easily embedded with any of the databases. A web developer with his basic knowledge developing an application without practising secure guidelines, improper validation of user inputs leads to various source code vulnerabilities. Logical flaws while designing, implementing and hosting the web application causes work flow deviation attacks. In this paper, we are analyzing the complete behaviour of a web application through static and dynamic analysis methodologies.

Keywords

Authentication and Authorization Bypass, Cross-Site Scripting, Session Hijacking, Code Injection, Command Injection.

Full Text