Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-24197: Online Food Ordering System v2 using PHP8 and MySQL Free Source Code

Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.

CVE
#sql#vulnerability#web#apache#php

Submitted by oretnom23 on Monday, January 9, 2023 - 17:01.

This project is entitled Online Food Ordering System. It is a simple web application that main developed to automate the ordering process of a certain restaurant or food business. The source code is an updated version of the open-source project that I developed and published before (Simple Online Food Ordering System using PHP/MySQL). It has a pleasant user interface using the Bootstrap Framework. The system also consists of user-friendly features and functionalities.

****How does the Online Food Ordering System work?****

This Online Food Ordering System version has still the same process as the previous one whereas the management can simply list all their Menus (Active/Inactive), Product Categories, and manage the clients’ customers’ orders. The clients can register their accounts at the public site for free. This version now comes with the menu list pagination on the client side and a data or list summary on the admin dashboard page.

Snapshots****Public/Client Site

Menu List w/ Pagination

Shopping Cart

Admin Login Page

Admin Dashboard

****What are the changes made in Online Food Ordering System V2?****

Upon rechecking the previous source code that I developed and published, I found out that almost all of the bugs that occurred are due to PHP version incompatibility. The previous source code was developed using PHP 7 and the current source code was fixed using the PHP 8 version. I have also added some features and functionalities to this version of the Online Food Ordering System and revised the design or CSS of some page interfaces.

****New Feature Added****

  • Menu List Pagination
  • Admin Dashboard Summary
  • Secure Login using hashed Password
  • Revised the Website Header Design
  • Revised the Admin Login Design
  • Revised the Admin Template

****Online Food Ordering System V2 Features and Functionalities********Admin Side****

  • Admin Dashboard Summary
  • Category Management (CRUD)
  • Menu/Product Management (CRUD)
  • Order Management
  • Admin-site User Management (CRUD)
  • System Information/Settings Management
  • Secure Login and Logout

****Client-Side****

  • Secure Login and Logout
  • Registration
  • Menu List w/ Pagination
  • Menu/Product Details Modal
  • Add to Cart
  • Shopping Cart List Page
  • Update Shopping Cart Items
  • Checkout Page

The Online Food Ordering System V2 project source code is free to download on this website. You can download the source code zip file by clicking the Download button located below this article content. Feel Free to download and modify the project the way you wanted.

****How to Run?****

****Requirements****

  • Download and Install any local web server such as XAMPP.
  • Download the provided source code zip file. (download button is located below)

****System Installation/Setup****

  1. Open your XAMPP Control Panel and start ****Apache**** and ****MySQL****.
  2. Extract the downloaded source code zip file.
  3. Copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory.
  4. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  5. Create a new database named ****fos_db****.
  6. Import the provided ****SQL**** file. The file is known as ****fos_db.sql**** located inside the database folder.
  7. Browse the Online Food Ordering System V2 in a browser. i.e. ****http://localhost/fos/**** and ****http://localhost/fos/admin**** for the admin side.

****Admin Default Access:****

Username: admin
Password: admin123

That’s it! I hope this Online Food Ordering System V2 in PHP and MySQL Database Project helps you with what you are looking for and that you’ll find something useful from the source code for your current and future PHP Projects. Feel free to leave a comment with any queries regarding this updated version of the system source code.

Explore more on this website for more Tutorials and Free Source Codes.

****Enjoy =)****

  • 3733 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907