Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-24202: Raffle Draw System using PHP and JavaScript Free Source Code

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.

CVE
#sql#vulnerability#web#apache#js#java#php

Submitted by oretnom23 on Monday, December 12, 2022 - 14:54.

This is a simple project called Raffle Draw System. It is a web-based application that was developed with PHP and JavaScript. The application manages the raffle draw tickets, draws winners, and randomly selects the draw winners. It has a simple and pleasant user interface with the help of Bootstrap v5 Framework. it also consists of user-friendly features and functionalities.

****How does Raffle Draw System work?****

This Raffle Draw System is a simple web program that allows a certain organization or event management to conduct an automated raffle draw. It does not require any user registration or log in to access the features and functionalities of the system.

Here, the user must or event staff must populate first the list of ticket details. He/She can also edit or delete the ticket(s) from the list. The system is able to select the draw winner randomly which has a user interface for randomly selecting the winner per draw. The draw selection is displayed in a simple slider. The draw winner details will be shown on a modal after the application has determined the winner.

****Technologies****

Here are the following Technologies I used for developing the application

Database

  • MySQL (MariaDB v10.4.24)

****Front-end****

  • HTML
  • CSS
  • JavaScript
  • jQuery
  • Ajax
  • Bootstrap

****Back-end****

  • PHP

****Features and Functionalities****

Here are the features and functionalities of the Raffle Draw System

  • Create New Ticket
  • Edit Ticket
  • Delete Ticket
  • List Tickets
  • Random Raffle Draw Winner Selection
  • Switch for Including/Excluding the Winners
  • List Winners

****Snapshots********Ticket List****

****Raffle Draw Page****

****Draw Winner Modal****

****List of Winners****

The Raffle Draw System was mainly developed for educational purposes only in terms of giving the IT/CS students of new programmers a reference of how to develop such an application using the mentioned languages or technologies. I have provided the project source code file on this article and is free to download.

****How to Run?****

****Requirements****

  • Download and Install any local web server such as XAMPP.
  • Download the provided source code zip file. (download button is located below)

****System Installation/Setup****

  1. Open your XAMPP Control Panel and start ****Apache**** and ****MySQL****.
  2. Extract the downloaded source code zip file.
  3. Copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory.
  4. Browse the ****PHPMyAdmin**** in a browser. i.e. ****http://localhost/phpmyadmin****
  5. Create a new database named ****raffle_db****.
  6. Import the provided ****SQL**** file. The file is known as ****raffle_db.sql**** located inside the source code root folder.
  7. Browse the Raffle Draw System in a browser. i.e. ****http://localhost/php-js-raffle-draw/****.

DEMO VIDEO

That’s it! You can now test the Raffle Draw System on your end. I hope this PHP Project will help you with what you are looking for and that you’ll find something useful from the source code for current and future projects. Feel free to modify the application the way you desire to enhance your programming capabilities.

Explore more on this website for more Tutorials and Free Source Codes.

Enjoy :)

  • 1944 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907