martin226/intentionally-bad-website

A website intentionally made with security vulnerabilities and bad practices, made for training and testing web developer applicants for the SACHS app dev team.

Intentionally Bad Website

An intentionally bad website made for testing new applicants for the web development team of SACHS App Dev.

For applicants...

There are four (4) types of critical security vulnerabilities in the PHP code of this website, located in the /src folder.

Your task is NOT to fix any styling or frontend related issues, but rather to spot and fix these vulnerabilities. Although, if you want, it wouldn't hurt to make this website look a bit nicer.

Helpful Resources

• https://www.securecoding.com/blog/fixing-security-vulnerabilities-in-php-sites/
• https://www.sitepoint.com/top-10-php-security-vulnerabilities/
• https://privacyaustralia.net/7-most-common-php-vulnerabilities/