Expected duration: 1 day or less OVERVIEW I need a Java programmer who can do a code review of a small, very simple Java/SQL project to manage an internal library of books/authors that student may borrow.
TASK I would like to get the code reviewed for potential security vulnerabilities or flaws - both at application code and database level. Across the development stack. Basically it has flaws and I need a list of every security issue you can find plus a possible fix/recommended course of action.
DELIVERABLE A report that lists of the issues, potential or actual vulnerabilities or flaws which includes the following 4 columns where applicable: Description of Issue ::: Location in Code/DB ::: Relevant Code Snippet & Line Number ::: Corrected/Recommended Code
A sample report extract of similar work would be appreciated - just so I can get a flavor of how you write reports. Good clear explanations required. Simple explanations are better than technical recommendations.
EXAMPLE Each identified flaw should have a one or two line description of what is it - no more than one or two lines. Examples: buffer overflow issue in input name field X. Should be managed by implementing the following control or code... Divide by Zero - on line 22 user form, correct code listed. Username/password stored in plain text - recommend that this is stored in a linked external file. Sample line of code.
SOURCE CODE All sources code, database and sample data provided to successful bidder.
BONUS Bonus available for links to websites that give additional information on the discovered flaw and a general overview of the recommended security steps to secure the entire project as it continues its development. Don't need a bit instruction manual - half a page at the absolute most - perhaps recommending a development framework or development life cycle.
TIMELINE I'm expecting this project to only take about 2 maybe 3 hours work and happy to answer questions if required. Once code reviewer/developer appointed and work starts, it needs to be delivered within 24 hours.
