Pa help namn sa php.. hingi sana ako ng Idea.. Gumagawa ako ng alumni website para sa thesis namin.. ang title ng system ko ay alumni tracer: a content management system.. ano bang best method para alumni lang ang makaka register sa web ko.. kasi ung web ko open to everyone . kaso gusto ng panel na dapat alumni lang ang makaka register at dapat malakas ang security ng web ko.... thx sana ma help niyo ko..
Symbianize Forum
Most of our features and services are available only to members, so we encourage you to login or register a new account. Registration is free, fast and simple. You only need to provide a valid email. Being a member you'll gain access to all member forums and features, post a message to ask question or provide answer, and share or find resources related to mobile phones, tablets, computers, game consoles, and multimedia.
All that and more, so what are you waiting for, click the register button and join us now! Ito ang website na ginawa ng pinoy para sa pinoy!
Pa help nman sa PHP.
- Thread starter kogtong11
- Start date
- Replies 12
- Views 588
- Messages
- 344
- Reaction score
- 0
- Points
- 26
It take years before mo malapalakas security ng website mo and you need to study hard. Gumawa ka ng web page na encrypted ang data. And you have to create your own encryption algorithm. Learn Linux, dont use windows server. if so you need to customize every rules in windows server.
Change port, use uri hook, use multi targeting proxy server.
- Messages
- 96
- Reaction score
- 0
- Points
- 26
Boss, pano yung may drop down list ako dba sa php tas may option dun na others tas pagkaclick nung may lalabas na textbox at kung ano yung ininut nya magsave sa database ? Pano po yun ?
- Messages
- 344
- Reaction score
- 0
- Points
- 26
Use javascript. Doon sa dropdown mo, lagyan mo ng event handler na pag click nya ng sa option may function na tatawagin para sa gusto mo mangyare.
or Manually lagay ka button sa form mo kasama yung dropdown, then pagkapili mo sa dropdown sa button event naman on click send mo sa php script mo then doon mo na gawin kung ano ang gusto mo mangyare.
I do not feed codes.
- Messages
- 96
- Reaction score
- 0
- Points
- 26
Wala ka po bang site na pwede ko pagbasehan sir ? newbie lang kasi akoo
disagree ako sa pag create ng sariling encryption algorithm, unless of course you are a certified cryptographer. Do not attempt to develop your own encryption algorithm - you are extremely likely to make an error creating a vulnerability that will leave your data open to attack. Use an peer reviewed crypto library, yung mature, open source at madami ng nag attempt na i hack pero nag fail, kahit nga yung mature na, nahahack pa din, e.g Heartbleed
Don't get discouraged, meron paraan.
0. Your first line of defense is securing your web site using a SSL certificate. Ibig saihin nyan instead na http ang connection magiging https. If you have access sa web server pwede mo i-configure yun to redirect http to https automatically. The best part is makukuha mo na ang certificate for FREE. No catches, No tricks. Just free. You can create your own certificate here. You'll need a *nix type box to run the script so you can generate the certificate.
More info on how to install here and here. Although the instructions on the second link is more easy to follow, it is intended for nginx web server. Pero same concept din sa Apache.
1. Next. You can use recaptcha sa register page ng web site mo. This is to prevent robots from creating dummy accounts.
2. Kung alumni lang ang dapat magregister, yung email ng school nyo ang kailangan gamitin ng mga bagong users. You have to regex filter the email string. Then mag send ka ng email sa new users containing a link for verification.
3. Kung may root privileges ka sa server disable mo yung mga ports other than 80, 443 and 22. Palitan mo yung default port ng ssh server eg. 54322.
4. Your web server should have the minimum amount of modules. Wag dagdagan kung hindi kailangan.
5. Avoid sql injection.
6. Choose a very good password for your database server. Also, remove default schemas.
7. Enforce strict passwords for your users eg. alpha-numeric and use at least 1 symbol.
8. Code defensively. Handle all possible errors as many as you can think of. If you can avoid reading/writing to the filesystem, do so. If you can't, at least limit access to one directory. Make this directory readable and writeable to the owner of the web server process.
9. Speaking of web server, make sure it is not run as root. Create a separate non-privileged account with no shell (Assuming you're on *nix)
10. Log all connections.
These are some of the things I can think of on the top of my head. I'm sure it's not comprehensive. Someone will probably post those I missed.
Idea lang para sure na student from your school lang ang mkkpasok sa website mu.dapat encoded na sa database m lahat ng student name and student ID sa batch nyu at sila lng ang pwedeng makapag register sa website mu.validation po pag aralan m.
- Messages
- 134
- Reaction score
- 0
- Points
- 26
Anong school ka sir? Ganito din pinagawa sakin nung prof namin sa software engineering. Alumni Tracer din ang title. Wala syang registration.. Yung mga user manggaling sa database or excel file from the registrar tapos iimport lang ng administrator sa system database para kung sino lang ang nagaral sa particular na school na yun ayun lang ang mkakagamit ng alumni tracer. Parang facebook yung sakin pwede magpost ng event (e.g. Alumni Homecoming).. tapos may profile viewing para updated ang mga alumni sa isa't isa. Pwede din magpost ng announcement si administrator na mababasa ng lahat. Wala lang PM, kasi parang di naman na need nun. Sa profile viewing kailangan ng permission bfore maview yung contact number para may privacy. Share ko lang para magkaidea ka din TS. Pero hintay ka ibang comment madami naman tutulong sayo dito 
- Thread Starter
- #11
Anong school ka sir? Ganito din pinagawa sakin nung prof namin sa software engineering. Alumni Tracer din ang title. Wala syang registration.. Yung mga user manggaling sa database or excel file from the registrar tapos iimport lang ng administrator sa system database para kung sino lang ang nagaral sa particular na school na yun ayun lang ang mkakagamit ng alumni tracer. Parang facebook yung sakin pwede magpost ng event (e.g. Alumni Homecoming).. tapos may profile viewing para updated ang mga alumni sa isa't isa. Pwede din magpost ng announcement si administrator na mababasa ng lahat. Wala lang PM, kasi parang di naman na need nun. Sa profile viewing kailangan ng permission bfore maview yung contact number para may privacy. Share ko lang para magkaidea ka din TS. Pero hintay ka ibang comment madami naman tutulong sayo dito
ty poh laking 2long nito.. sana makakaya ko to.. 1 week nalng binigay sakin.. baguhan pa namn ako..
- Messages
- 83
- Reaction score
- 0
- Points
- 26
Kung gusto mo alumni lang makaka register . kailangan mo ng access sa records ng list of graduates ng univ. nyo .
for security naman , you can implement R.B.A.C and captcha sa registration forms to prevent spams. Mas mainam din sana kung may security code activation via SMS , yung parang sa facebook . magtetext ng security code sa mobile number nung nagregister for activation .
*You dont have to create your own encryption though . Meron ng mga php library para dito. hugutin mo na lang(composer)
- Messages
- 53
- Reaction score
- 0
- Points
- 26
dis agree din ako sir... palagay ko mas madali kung may data na galing sa school. yun ilagay mo sa database mo. then pag register ni alumni, icocompare ng program mo yung nasa database at yung input from alumni sa pag register.
*i just have the idea but no good to code no more
