Master information

Task description and requirements

Project description

The existing product website uses server-side PHP scripts to process user input. However, there is currently no comprehensive validation of this input, which poses potential security risks. In addition, an outdated user administration system is in use, which is no longer functional and should therefore be completely removed. In this context, the possibility of saving or retrieving user and configuration data on the server should also be removed.

Task

Analyze the website to identify all input points with insufficient validation (e.g. forms, URL parameters).
Implementation of secure server-side validation of all input. In addition, client-side validation should be added in the browser.
Complete removal of the login function and the entire user administration. This includes adapting the user interface and deactivating the corresponding URL endpoints.
Ensuring that no more user or configuration data is stored or processed on the server side. Corresponding interfaces and functions must be deactivated.


Requirements
Extensive experience in PHP development and sound knowledge of web security
Confident handling of form data and URL parameter validation on server and client side



Start: June
Duration: until the end of the year
Part-time
100% remote
English only

Category