Secure Server Example-NPAC Grading System-2
The original primitive version of the Grading System had two security flaws
- 1- Communication between the browser and the database server was not a secure channel.
- 2- The CGI directories, which provide access to the database, was not completely private to the public.
- Because of the design issues of the Oracle database web link, database passwords are located in the CGI directories. Somebody could easily steal the password, access the database and modify the records.