Varnost sistema in izdelava ekstranet spletne aplikacije v odprtokodnem sistemu WordPress

ŽAGAR DEDUKIČ, PETRA (author), Fajfar, Iztok (mentor)

V tem diplomskem delu se srečamo z odprtokodnim sistemom WordPress z namenom izdelave spletne aplikacije z omejenim dostopom. Projekt zajema izdelavo spletne aplikacije, ki je prilagojena naročniku – pravni pisarni in zaposlenim omogoča preglednejše in efektivnejše delo. Aplikacija vključuje obrazce in tabele za vpis kontaktnih in drugih ključnih podatkov o potencialnih strankah ter obstoječih strankah in dolžnikih v sistem, kalkulator za izračun zamudnih obresti in opomnike za zaposlene v podjetju. Uporabnikom nudi dostop do podatkov in dokumentov do katerih lahko dostopajo preko računalnika, tablice ali telefona. Online sistem zagotavlja hitrejše iskanje določenih dokumentov in podatkov. Cilj projekta je olajšati delo zaposlenimi in dokumentacijo prestaviti v elektronsko obliko. Na ta način smo optimizirali delo ter tudi zmanjšali uporabo papirja. Izpostavljena je problematika varnosti, ki je pri tem projektu ključnega pomena. V sedanjosti predstavlja pomembno tehnološko temo, s tem pa tudi osrednjo temo tega diplomskega dela. Sprva sem predstavila statistiko vdorov, razumevanje in zaščito pred napadi DdoS. Nato pa opisala tudi najboljše prakse zaščite. Predstavila sem pojme kot so CMS, Ekstranet in WordPress ter izpostavila prednosti in slabosti uporabe le-teh. Četrto poglavje je osredotočeno na samo izvedbo projekta. Sprva so predstavljeni izbrani WP vtičniki in WP tema, ki sem jih uporabila za izdelavo sistema in navedla njihove lastnosti na podlagi katerih sem se jih odločila uporabiti. Podrobno sem opisala WordPress vtičnik All In One WP Security & Firewall, s katerim sem izvedla nekaj najboljših praks zaščite na tem sistemu. Sledi postopek izdelave obrazca in tabele za vpis podatkov o potencialnih strankah in obrazec za vnos opomnika ter z njim povezana tabela oziroma opomniki. Opisana je tudi izdelava kalkulatorja za zamudne obresti, na podlagi katerega so naročniki zaračunavali zamudne obresti dolžnikom. Ta aplikacija se danes uporablja v pravni pisarni v Ljubljani. Aplikacijo smo tudi nadgrajevali z dodatnimi funkcijami in omogočili tudi strankam naročnika vpogled v omejene vsebine sistema.

• Language: Slovenian
• Keywords: WordPress, ekstranet, varnost
• Work type: Bachelor thesis/paper
• Organization: FE - Faculty of Electrical Engineering
• Year: 2021
• PID: 20.500.12556/RUL-133705
• COBISS.SI-ID: 91211011
• Publication date in RUL: 10.12.2021

Secondary language

• Language: English
• Title: System security and development of an extranet web application in the open-source WordPress system

Abstract

This thesis describes the usage of an open-source system called WordPress to create a web application with limited access. The project involves the development of a web application that is tailored to the client - it enables the legal office and employees to work more transparently and effectively. The application includes forms and tables for entering contact and other key information about potential or existing customers and debtors into the system, a calculator for calculating interest rates and helpful reminders for employees. It provides users with data and documents that they can access via computer, tablet, or phone. The online system also provides faster retrieval of documents and data. The aim of the project is to facilitate employee workload and to digitize documents. This way, we optimize the workload and reduce paper usage. The main focus is on security, which is of key importance in this project. Today it represents an important technological topic, and thus making it the main scope of this thesis. The first part presents intrusion statistics, understanding and protection against DDoS attacks. The second part describes the best protection practices. Described are concepts such as CMS, Extranet, WordPress and the pros and cons of their use. The fourth chapter focuses mainly on the project development. Presented are the selected WP plug-ins and WP theme used in the project. Also listed are the properties which were a key factor for their selection. Described in detail is the WP plugin “All In One WP Security & Firewall”, which was used to achieve some of the best known security practices. What follows is the process involving the creation of the forms and tables, used for entering potential customer data and scheduling reminders. A simple interest rate calculator for debtors, is also included. The application is currently used by the law office in Ljubljana. Later on, the application was upgraded with add-on features and an insight into the limited contents of the system, was provided to the customers.

• Keywords: WordPress, extranet, security