Secure Internet Banking System using PHP

Replies

• 

  Rohan Bagchi

  How do you plan to handle the security?
• 

  Kaustubh Katdare

  I don't see it as an issue to be considered. There are several ways - one may use HTTPS for secure transactions and follow the best practises in coding. That should be enough for a minor project I guess.
• 

  Rohan Bagchi

  Banking project should be considered tricky enough. From personal experience I have known people who build security loopholes which finally result in breakage of the chain of control. HTTPS is only one side of the picture. Don't you think, admin?
• 

  Kaustubh Katdare

  Well, actual security implementation would be another big project in itself. I'm not denying that any project that involves money transaction or stores user's information needs to be highly secure. Plus security is a continual work and it's not a 'do once and forget'.
  
  I agree that banking projects are tricky. Even a leading private bank in India was found to be storing user's details without any security layer. It was exposed and it took over a month for the bank to really fix that issue.
• 

  Rohan Bagchi

  The_Big_K

  Well, actual security implementation would be another big project in itself. I'm not denying that any project that involves money transaction or stores user's information needs to be highly secure. Plus security is a continual work and it's not a 'do once and forget'.
  
  I agree that banking projects are tricky. Even a leading private bank in India was found to be storing user's details without any security layer. It was exposed and it took over a month for the bank to really fix that issue.

  Indeed admin. Liked the "Plus security is a continual work and it's not a 'do once and forget'".
  I learnt it through similar tough examples that databases with extra-sensitive information like passwords must be one-way-hashed [my personal choice is an arcane combination of md5 and SHA1, returned to the main through a member function].