Analysis of Web Services for Vulnerabilities on the Example of Site "XI St. Petersburg Congress ‘Professional Education, Science and Innovations in the 21st Century’"
Article is devoted to questions of safety of web sites on the Internet. The main security risks of the websites and methods of protection against them are considered. As an object of a research of information security the website „The XI St. Petersburg congress ‘Professional Education, Science and Innovations in the 21st Century’“ working under control of the WordPress system - website content management is considered. The analysis of the website and its source code and the analysis of the database is described, including: validation of setup of index of the website, testing for penetration. For establishment of the protected connection between the server and the user’s browser, the SSL certiﬁcate of the website is received. The most widespread type of the attack to the database - a SQL injection is considered (implementation in a request of arbitrary SQL code).