HW#5 --- last modified February 17 2019 19:29:06..

Solution set.

Due date: Dec 6

Files to be submitted:
  Hw5.zip

Purpose: To develop your own web-site that makes use of localization, Flex, memcached, and security precautions.

Related Course Outcomes:

LO3 -- Write server-side scripts that process HTML forms.

LO4 -- Write client-side scripts that validate HTML forms.

LO5 -- Develop and deploy web applications that involve components, web services, and databases.

Specification:

Specification:

For this assignment you are to develop as cool a web-site of your choice in PHP, XHTML 1.1, FLEX, and Javascript as possible subject to the following constraints:

1. Your homework should be in a git repository as in HW3 and HW4 and it will be checked that it meets the requirements we had in those HWs for repositories.
2. In the root directory of your project you need to have a readme.txt file listing each group member's name and id and explaining how and where to look to establish you have satisfied the points below. You should also describe how to set up your web-site in as painless a manner as possible.
3. Your site should make use of the directory structure for the MVC pattern established in Hw2 and Hw3.
4. Your site needs to have two versions of a guest book feature, one subject to XSS and one not. You should say what inputs to test XSS on in the readme.txt file.
5. Your site needs to make use of forms and validate their inputs with Javascript.
6. Your site needs to make use of sessions and you should have one page that is vulnerable to a CSRF attack and one that is not and explain in the readme.txt file how to check this.
7. Your site should make non-trivial use of Mysql to store your models.
8. Your site should make non-trivial use of Memcached to speed up model retrieval.
9. Your site must have at least one page localized in two languages using gettext.
10. Your site must make non-trivial use of a Flex application.

You are allowed to use Javascript frameworks such as JQuery for this homework, but make sure to put them in the repository so the grader does not have to independently grab them.

Point Breakdown