Skip to content

Built a PHP-based login system with input validation, hashing, and role-based access control. Followed secure development lifecycle practices for backend security.

Notifications You must be signed in to change notification settings

Tariqshinwar/secure-web-application

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

15 Commits
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

πŸ”’ Project 13: Develop a Secure Web Application

This project demonstrates how to build a secure PHP web application using the LAMP stack (Linux, Apache, MariaDB, PHP). The application includes user registration and login functionality, secure session management, and proper password handling using hashing.


🎯 Objective

To develop a web application with basic user authentication and apply security best practices such as:

  • Password hashing
  • Input validation
  • Secure session management
  • Restricted access to authenticated users

🧰 Technologies Used

  • Ubuntu 22.04 LTS
  • Apache2
  • MariaDB (MySQL replacement)
  • PHP 8+
  • Git
  • PHPMyAdmin (optional)

πŸ”¨ Key Features

  • βœ… Secure registration form
  • βœ… Passwords hashed with password_hash()
  • βœ… Login page with session-based protection
  • βœ… Dashboard accessible only after login
  • βœ… Clean logout flow using session_destroy()

πŸ“Έ Screenshots

πŸ“¦ LAMP Stack Installed

packages-installed

πŸš€ Services Running

services-status

πŸ” MariaDB Secured

mysql-secured

πŸ§‘β€πŸ’» DB and User Created

mysql-db-user-created

πŸ“ App Folder Setup

app-folder-created

βš™οΈ DB Configuration File

db-php-file

πŸ“ Registration Page

register-form

πŸ”‘ Login Page

login-form

πŸ“Š Users Table in DB

users-table-created

🧭 Logged-In Dashboard

browser-register-login


πŸ§ͺ How to Run Locally

  1. Clone the app into your Apache root:
cd /var/www/html
git clone https://github.com/YOUR_USERNAME/secure-web-app.git

About

Built a PHP-based login system with input validation, hashing, and role-based access control. Followed secure development lifecycle practices for backend security.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published