Web Applications Help

https://www.owasp.org/images/f/f6/Owasp_api_security_toc.pdf

Browsed OWASP site & seems like OWASP API Security guide or checklist
was just initiated in Dec '18:

a) did I miss or there is already a guide that have been released? Can
point me to it? The above link only give a Table of Content, is there
a full guide?

b) if it's not released yet, perhaps can point me to a full guide on API
security?

4 Comments

Python 3 Fundamentals

LVL 13

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

HI, this question is related to:
https://www.experts-exchange.com/questions/29141798/Tech-Writing-Need-less-technical-term-than-granularity.html

If I have a graph in a document with three lines (e.g. red, green, orange), I believe that the supporting info that shows that red=max profit, green = min profit, and orange = average profit is called a "legend".

But what do you call the values along the bottom (x-axis) (e.g. 4/1, 4/8, 4/15). The scale? Can it also be called a legend? Thanks.

9 Comments

In a web application, the user has the choice of choosing daily, weekly, or monthly as the time interval along the bottom of a graph that controls the data points.

In my current revision, I say something like:
Please choose the granularity of the graph (Daily/Weekly/Monthly)

Even though our audience is reasonably technical, I'm not sure everyone will understand "granularity".

Is there a better term I could use?
Thanks.

7 Comments

Hi Folks,
So a couple of my websites on my domain are getting flagged for phishing on virustotal.com. I need to go through the delisting process and cannot find where I should do that. This is happening with AegisLab WebGuard and CyRadar specifically. Can anyone point me toward the resource to do that?

6 Comments

How do you demonstrate PCI Compliance 11.3 compliance (segmentation) using SOA/web services? (Apigee, F5, Layer 7, Crosscheck) I do not need specific instructions for any particular solution (but it might help) just a high level overview or the process and what questions to ask.

1 Comment

I am trying to whitelist youtube on OpenDNS. I whitelisted the youtube and the site shows up, but unfortunately the videos don't play. What URLs do I need to whitelist in order to fully open up youtube?

1 Comment

Can you reference a asp tag that is passed in variable. I have a table that contains rows which
contain asp id's example aspTagName = txtFirstName, fielRequired = false

I want to look at the column fieldRequired and based on value of false
remove the attribute required from the asp page using the value of
the aspTagName(txtFirstName)

Please advise.

Thanks in advance

5 Comments

Hello,

For a web application, documented in a Wiki, I have a data element (call it THING) which can contain one or more WIDGETS There exist two places in the instruction set for THING where I refer the user to the separate instructions for WIDGET.

TO ENTER A THING:

1. blah blah blah
2. Enter a Widget. Click here for info. ("Here" takes you to a separate section for widget entry,))
3. To generate additional sequential widgets (one more month)
a. Click "GENERATE SEQ"
b. Enter number of Widgets
c. For each month, enter a widget. Click here for info.
4. Enter notes for the Thing.
5. Click OK to Save.

My instructions to enter a widget are somewhat involved, and, in the interest of "reusability" are contained in their own section.

Widget Entry: (located in its own section which I can link to.)
1. Enter cost.
2. Enter date.
3 etc.
4 etc.

To my question: after user completes step 4, I want him to return to the "Thing" instruction at the point where he left off. (which could be one of two places. How can I best handle this situation. I see two possible ways:

1. Say nothing, and trust that the reader will know to click the BACK Button to return to where he left off in the instructions.
2. Write something like "Return to Enter Thing instructions where you left off" to gently nudge him to hit the BACK button. (To avoid the temptation for wandering eyes to continue with the next section in the document.)

Thanks,
Steve

25 Comments

Is there a way to have an open web page to the general public in SharePoint? I need a page where folks can download files for our company. Nothing sensitive. If not, is there any other free solution out there where I can do this?

9 Comments

LVL 1

Question by

jana

2019-02-27SolvedPrivate

How to export spicework SW service calls

Hello,

How can I export IT helpdesk software SW (spiceworks) tickets including the body contents.

Thank you.

5 Comments

Become a CompTIA Certified Healthcare IT Tech

LVL 13

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

Dear Experts,

I am looking for a simple web page where I have thousands of customers who send lot of documents and invoices; what I am looking for

Customer would have login id (based on his number)

all his details would be populated in the opening page like name, address, bank details etc (pre populated from old database; any changed to existing details needs permission)

and he should be able to attach file ( only pdfs and images) and click submit and it should get saved in a database

I should be able to download the invoices

the customer should be able to do it from any platform ( mobile pc etc.)

thank you for your help in advance!!!

8 Comments

I need to prepare a web application demo.

So I'll have to learn what the web application does and show it to other technical people in the team.

Since I would like to do a good job I'd love to have inputs about the key points to make my demo really good.

Any suggestion or pointer is very welcome (flow, tools, timing, pace).

Thanks for your kind help.

Web Applications

5 Comments

Looking for examples of modern distributed web applications.

Hello all,

I am trying to understand some examples of complex modern web applications which are used in companies like Kroger , Office Depot or financial companies like Freddie Mac , Fannie Mae etc.

If someone wants to one day get ready to work in these companies as a junior / senior programming what all things they should know

this is a very broad question but some answers will help me ask some more targetted specific questions

I am very interested in learning about designing and making Enterprise Applications

thanks
-anshu

11 Comments

LVL 1

Question by

tracyms

2019-02-08Solved

Authenticate Before Opening File

Hello Experts,

I have about separate 10 web pages for users. Instead of sending them the URL each time a new person needs access to the page, I’d like to set it up as so:

I have an app that will open each of the web pages when you select it. I’d like some way to authenticate the user so it’ll only go to the page for them.

So let’s say Tom needs access to FINANCE and GRANTS pages, but should not see the rest. I would want to add Tom to the FINACE and GRANTS group so when he opens the app below, his only options would be HRD.html and Finance.html pages.

I suppose I could do some case statements in the script and a prompt to validate hard coded user names but I’d rather not put user names in the script.

Could I use a prompt to authenticate to a file/group before opening the page? Any ideas? Thanks!

<html>
<head>
<title>Apps</title>
<HTA:APPLICATION
   Application ID = "Test"
   APPLICATIONNAME = "Test"
   BORDER="thin"
     SCROLL="no"
     SINGLEINSTANCE="yes"
     WINDOWSTATE="normal"
	 SysMenu="no"
 />
</head>
<script language="vbScript">

Sub Window_onLoad
window.resizeTo 680,470
End Sub

Sub GetURL
thisURL = urldrop.value
document.getElementById("noiwin").innerHTML = "<iframe width='800' height='500' src='" & thisURL & "'></iframe>"
End Sub

</SCRIPT>
<body>
<select name="urldrop" style="width: 200px" onchange="GetURL">
<option value="AppSelect.html">Select Application</option>

<option value="Finance.html">FINANCE</option> - If username in

Open in new window

…

6 Comments

In a user document, I have something like the following (scrubbed).

Select a company name. (e.g. Microsoft)

Do I need a period after "Microsoft"? I'm leaning toward not needing it b/c "e.g. Microsoft" is not really a sentence, but then again, what do I know?

Thanks.

7 Comments

Experts,
We have 2013 farm with 10 web applications. One of the web application has 1 TB database. Last year we had a problem while upgrading database. This web application has only two site collections. We would like to split the database. I would like to have suggestions and best approach to split database. Is there any plan template for this activity?

Please advice

11 Comments

There arent enough of us to do the full testing we should do on new features we build for our website, plus to just make sure things keep on functioning as they should. We need to set up automated testing of all of our website features, like logging in, getting special pricing levels based on who you are, shipping API's functioning as they should, general website functionality etc. Is Selenium a good way to go? If so, can somebody please give me a bullet point list of how to get started and implemented? This is for a large website on LAMP stack. Thanks very much.

12 Comments

We get a lot of repeated errors in Weblogic logs that seem to start at about the same time as when a non-credential (& non-bruteforce) external penetration testing (using Nessus) started:

<Jan 15, 2019 5:12:36 AM SGT> <Warning> <Socket> <BEA-000450> <Socket 1,544 internal data record unavailable (probable closure due idle timeout), event re
ceived -32>
<Jan 15, 2019 5:12:36 AM SGT> <Warning> <Socket> <BEA-000450> <Socket 1,546 internal data record unavailable (probable closure due idle timeout), event re
ceived -32>
Hibernate: SELECT AAAA_CO_CD from YYYYYY_COMPANY where CO_CD = ?

https://support.oracle.com/knowledge/Middleware/1052919_1.html
Above link (which I don't have a login to Oracle) appears to indicate load testing could trigger BEA-000450 errors :
Anyone encountered this?

a) how can the penetration test proceed further? By limiting the non-intrusive scan to 1 thread (we've reduced from 10 to 5)?
b) is there any patch or ways to fix this?

2 Comments

Hello,
I am currently maintaining my catering business on MS Excel;
I maintain the following columns:
1-      Category
2-      Product
3-      Kcal
4-      Element (ingredient)
5-      Measurement (How the ingredient is bought: KG, Pack, Box etc.)
6-      Output (How many end products this element produces)
7-      Cost per element
8-      Total cost
9-      Sale price (per client)
10-      P/L
11-      Orders (by client)
12-      Expenses (Rents, Salaries, and Deliveries etc.)
Are you aware of a simple web based system that can cover this for me?
Not only accounting, I am selling B2B and B2C. I do sandwiches, juices, salads, and parfaits. I want to track the cost of each item and its elements.

I want to sell to each client with different price depending on a criteria I want to maintain.

Be able to follow up with orders placed by clients and print out their invoices and receipts.

Thanks,

18 Comments

CompTIA Cloud+

LVL 13

The CompTIA Cloud+ Basic training course will teach you about cloud concepts and models, data storage, networking, and network infrastructure.

A small real estate firm is looking to have a website that would display their property listings, blog, documents and other static information.
It needs to be mobile compatible as well.
They want to post the listings themselves.

Is there a company that produces these sites? Something that runs under WordPress?

Thanks.

4 Comments

can you use google alerts without a google account ?
I wanna use my business account instead of my google account.
once I do that, it asks me to sign into my google account.

2 Comments

I have a series of apx 25 documents that describe 25 instances of a configuration screen on which you select - or enter - one or more data elements.. Each screen deals with a different concept (e.g. age, gender, etc).) But they all have common elements (e.g. how to clear all settings, how to display only selected items etc.

I'm leaning toward including these concepts on each of the 25 pages. (Ease of reading for our audience.) But, if, for some reason, our developers change the process of (e.g.) deleting all data elements), they I'd have to change it in 25 places.

I guess I could include these commands on a separate page, and simply say (on the 25 pages), "Click here for global commands."

Thoughts?
Thanks,
Stephen

5 Comments

Hi everyone,

I'm trying to install the Microsoft Lync Web App Plugin. I get to a point during the process where I'm prompted to run the plug in, in order to get audio and video. However, as the progress bar gets to about 90% complete a dialogue box generates and indicates the "The specified account already exists", then closes and the users is never able to reach their meeting.

Here are some details surrounding the setup -

The device is a Dell laptop

The OS is a WIN 7 64-bit platform

Running Microsoft Office 2013

This is a domain environment

The user is a standard user on the laptop

I, as an admin, have installed the Skype Meetings App as I can see it listed in Control Panel

I've also got the latest version of Silver Light installed

I've also uninstalled and reinstalled the Skype Meetings App a couple times and get the same dialogue box - Account Already Exists

I've cleared the cache and history

We don't run Office 365

I'm a bit stumped. Any thoughts?

Thanks for your help.

2 Comments

Hi,

I'm documenting a connected series of screens that contains list of geographic locations. There are three screens;

Continent
Country
State

Each geographic entity can be assigned a value. e.g.

North America = 3
USA = 6
Ohio = 4

The returned value is the one for the most specific entity:]

If you are in Ohio: 4
If you are in the USA but not in Ohio: 6
If you are in North America but not in USA: 3

For this document, I have an intro, and then three sections (Continent/Country/State)

Would it be better practice to repeat the above derivation of the returned value in each section (3 instances) or just once (in the intro). My concern is that if I put it in the intro, and someone is reading only the State section, they'd miss out on this explanation.

What you do think?

Thanks,
Steve

19 Comments

STEM education is growing rapidly and preparing the next generation to fulfill the needs of our society's technology demands.

In what ways has EE helped you continually learn, even as professionals?
How can EE support STEM as a great learning resource?

9 Comments

Web Applications

Related Topics

Web Applications

Related Topics