Security design and implementation of yangtze gold cruises website

Abstract

Based on the analysis of common web security defects, some web design considerations about web data security and user identity authentication were pointed out. A substitute algorithm and its program used in web data were described. SQL injection attack (SIA) to web data couldn't operate due to the using of this algorithm. Values generated by MD5 algorithm was added to username and password, for the goal to ensure the user table storing security. To resist SIA while identity was authenticating, a method called program authentication was proposed. These safety measures or considerations may benefit to similar web design. © Springer-Verlag Berlin Heidelberg 2011.