Tag
#web-security
5 articles
Articles tagged #web-security
01I Invented 14 People to Break My University Website
A plain-language story about testing a university admissions website with fourteen imaginary people, from a careless applicant to a would-be hacker, and the real bugs they found that I never would have.
7 minThe Engineering Logs
02AIT: Building a University Admissions Portal From Scratch
How I turned what I learned in my XCL Technologies internship into Ahmer Institute of Technology: a university website with applicant, student, teacher, staff and admin portals, safe file uploads, Docker, and 58 end-to-end tests that found real bugs.
8 minThe Engineering Logs
03Zovita+: Building an Online Pharmacy That Adapts to Each Shopper
How I rebuilt Zovita+, an online pharmacy with 1,186 real medicines, a 3D symptom body map, personal offers, drug-interaction warnings, refill reminders, pharmacist-reviewed prescriptions, Urdu, and card or cash payments, on Laravel, React and MySQL: stack, data model, checkout locking, payments, admin, security, SEO, testing, what broke and what I'd change.
22 minThe Engineering Logs
04One Seat, Two Buyers: Race Conditions, IDOR and Keys in a Cinema Booking System
How BookMyMovie makes sure one cinema seat is never sold twice, a guessed booking number shows nothing, and a leaked or missing key can't quietly break tickets: row locks, lock order, a NULL-tolerant unique key, status compare-and-set, idempotency, IDOR scoping, HMAC tickets, captcha step-up, and the bugs that still got through.
11 minThe Engineering Logs
05BookMyMovie: Building a Cinema Ticketing Platform
The story of BookMyMovie, a cinema booking site I built alone: why buying a ticket in Pakistan is still a hassle, the one rule the whole system is built around, how two people can never end up with the same seat, the back office, the design, and the bugs that slipped through.
20 minThe Engineering Logs