Arkansas Tech University SQL Injection Worksheet

Write secure code for the given php project to protect from SQL injection only.

As I have shown in the class, based on a given user name password this system cross-checks with a database table to authenticate the information to show the user information. But the solution is not sql injection protected. Your task is to modify the code so that sql injection can be prevented. Code is written using HTML, CSS and PHP as server side scripting language. Mysql database used as backend database. User information was manually entered into the database table.

Login Information added to the database table:

No Username – Password

1. Andrew – As112358
2. Stephen – Sc@112358
3. Ab – 123456
4. test – 123456
5. test’s – 123456

I am attaching all the php files and database backup as .sql file. As you know, php is a server-side scripting language. You have to run it in a web server (example xamp) to run this project. To get webserver, you can install xamp, which comes with a built-in MySQL database.

Deliverable:

1. Submit secure code as zip folder including all the files (Include comments in your code where you are changing or adding the code)
2. Take screenshots showing that your code is running and working.
3. Make sure, for username: test’s and Password: 123456 are working correctly in your system. (Take one screenshot.)

*Please keep reusability in your mind while changing or adding code.