awcflavin / group-software-project Goto Github PK

3. Sign in part not work properly because password used to compare with database is not hashed.

Fix: $hashpword = hash('sha224', $pword);

2. regex for email validation should cover all kind of university rather one by one
   `<?php
   $valid_email=false;
   $regex="/^([a-zA-Z0-9_-.]+){8,10}@(([[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.)|(([a-zA-Z0-9-]+.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(]?)$/";
   $email="[email protected]";
   if(preg_match($regex, $email)) {
   $valid_email=true;
   }
   $uni_email="";
   if ($valid_email){
   $uni_regex="/@(([[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.)|(([a-zA-Z0-9-]+.)+))([a-zA-Z]{2,4}|[0-9]{1,3})(]?)/m";
   preg_match($uni_regex, $email, $matches);

   $uni_email=$matches[0];
   }
   echo $uni_email;
   ?>`
   This is the email validation code that I also added to the project with sample input.

The form uploader needs to be edited to only allow PDF's. This allows for all files to be an identical type and saves messing around with different formats. File size also needs to be restricted to stop people from clogging up space on the server.

set_up file fail to connect
fix: add if ($connection) return ($connection); return (FALSE);

issue: can not fetch all result while getting data from database.

fix:using fetch_soc instead and get data by key.

The file uploader does not ye require authentication from the lecturer. At the moment anyone can upload past exams papers. This must be changed to only allow universities upload papers as they are trust worthy sources.

Limit for email should be from 8-10 for students.

The links to the courses on each college page are not working. It is just printing them to the screen and do not lead anywhere.

The college name at the top of the courses.php page needs to be dynamically generated. Take the students login information, check their email domain and pull the college name from a database

Most of the forms that allow user input are severely open to injection attacks. All input will have to be escaped and most of database queries changed over to prepared statements.