PROTECTION OF WEB APPLICATIONS FROM SCRIPTED ATTACKS (SQL INJECTION, XSS ATTACKS)

Zbog intenzivnog korištenja online usluga i pružanja privatnih informacija kako bi se usluge poput online kupovine, online usluga bankovnih aplikacija, usluga aplikacija zdravstvenih ustanova i slične mogle koristiti, sigurnost web aplikacija i web stranica postala je ključan aspekt internetske kulture i razvoja aplikacija. Cilj ovog završnog rada je analizirati sigurnosne rizike, metode testiranja te metode zaštite privatnih informacija korisnika. U prvom dijelu završnog rada analizirali smo metode testiranja korisničkih polja za unos podataka na SQL injektiranje i Cross-Site Scripting napade. U drugom dijelu spomenuli smo programske jezike, tehnologije i usluge koje smo koristili u izradi aplikacije, te smo u posljednjem dijelu predstavili metode zaštite web aplikacija od SQL injekcijskih i Cross-Site Script napada na pohranjenim procedurama, u PHP skriptama te u JavaScript skriptama.Due to the high use of online services and the provision of private information to enable services such as online shopping, online banking application services, healthcare application services and similar, the security of web applications and websites has become a key aspect of internet culture and application development. The aim of this final paper is to analyze security risks, testing methods and methods of protecting users' private information. In the first part of the final paper, we analyzed the methods of testing user input fields for SQL injection and Cross-Site Scripting attacks. In the second part we mentioned the programming languages, technologies and services we used in building the application, and in the last part we presented methods of protecting web applications from SQL injection and Cross-Site Script attacks on stored procedures, in PHP scripts and JavaScript scripts