Secure Website with JavaScript and PHP Database Connection

A secure web application demonstrating client-side input validation, server-side sanitization, XSS defense, and SQL injection prevention using PHP and JavaScript.

Course

MSCS-535 Secure Software Development
University of the Cumberlands

Files

• index.html - Front end login form with JavaScript validation
• validate.js - Client-side input sanitization and validation
• submit.php - Server-side validation, XSS sanitization, and parameterized query execution
• db.php - Secure database connection using PDO

Security Features

• Client-side input validation via JavaScript
• Server-side re-validation of all incoming input
• PDO prepared statements blocking SQL injection
• Output encoding preventing XSS
• Generic error responses preventing information leakage
• Password hashing using bcrypt

References

• Richardson, T., & Thies, C. N. (2012). Secure software design. Jones & Bartlett Learning.
• Kohnfelder, L. (2021). Designing secure software. Random House Publishing Services.