Em Andamento

Secure asp

!!Read before you BID!!

Basic

Don't bid if you might getting busy for exam or work after bid,i don't want any excuse.

Don't bid if you never work on a real project like this.

Don't bid if you are not serious and not reliable person.

Show me your demo,don't send me a simple URL and said it's your works.

Don't ask for preview of the asp site

!!Read before you BID!!

Facts

-Fully working asp site

-Windows 2003,SQL 2000 or SQL 2005

-one admin part in chinese.

-two members packs in two language: chinese and english,same coding 95%

-admin and register members use same database/tables,different sql login and roles.

-total contain total 500 asp/html files

Due to the coding skill of the programmer,there are some problem:

-SQL connection String in plain text

-No protection about SQL injection and brutal attack access

-Sensative info plain text form in SQL database

-No SSL

-No Payment page yet

-SQL Role permission

-Other possible security improvement

Task:

-Encrypt SQL connection String or change a secure method

-Coding to protect from SQL injection and brutal attack access

-Coding to work with SSL,secure whole section until logout

-Create simple payment page with amount,transaction fee,etc,integrated with Moneybookers and e-currency

credit the account after payment (Like GAF)

-Add a function to admin area,updated the Moneybookers and e-currency receiver account,adjust transaction fee.

-Coding current deposit history page (members/admin) to work with the new add above.

-Encrypt members/admin password and sensative field in database,No MD5 please (must add Salt value)

-Apply minimum SQL Role/User permission for register members.(Don't affect the current function)

-ADD EMAIL VERIFICATION and Turing number to the members register/update page

-Setup the finished site on your demo server with Free SSL installed > OK > Release escrow payment to you

**I give out the big picture,I may miss out some minor info which is out of my knowledge,More suggestion are welcome,You must have a good head and concept to made everything working fine.

**Burget $300,7 to 12 days times

**Full project will be attachment after bid

**If doing good,you will be given bonus,hired for future maintainment and updated

Thanks you!

Habilidades: ASP, Engenharia, Javascript, Visual Basic, Segurança na rede

Ver mais: two string problem, transaction escrow, total escrow, the string problem, string problem, show me my email password, setup escrow account, secure payment with escrow, reliable credit, receiver update, programmer exam, pending escrow payment, password escrow, new hired, is escrow payment, hired out, head of security, give me your password, give me a new password, getting members, full form of escrow account, fee escrow, exam one, e-secure-it, escrow transaction fee

Acerca do Empregador:
( 0 comentários ) UPLODERS, United Kingdom

ID do Projeto: #172276