Website Rebuilding

An exisiting website is done in Classic ASP with MS SQL database. The sites database is to be cleaned of SQL Injection and provision to be made in all the forms to avoid it in the future. Additional requirements are in the attached file. ## Deliverables **REVAMPING ALLINDIACLUB** ** ** **Project Details** Website [login to view URL] (AIC) needs to be revamped since its giving problems. The problems in this website are listed below. **Website Introduction** AIC is developed in Classic ASP with MS SQL 2005 as database. It has 3 services B2B, Recruitment and Matrimonial. It is membership based site with Free Members and Paid Members with payment gateway. Members register on the site and use the services which they require. **Registration Process** There is main AIC Registration Form where user creates AIC Id and Password. Free members can directly access the AIC Registration Form while Paid members are physically given Temporary Username and Password. Paid members can access the AIC Registration Form by using this Temporary Username and Password. For both Free and Paid members once AIC Id and Password is generated, it becomes their permanent Login details. Records of Paid members is displayed before Free members. On creating AIC Id. members can register in B2B, Recruitment and Matrimonial. There are following registration forms in these services 1. B2B a) Company Registration Form b) Trade Leads Form - 4 different forms c) My Account Form 1. Recruitment a) Resume Form b) Company / Placement Agency Registration Form c) Job Vacancy Form d) My Account Forms for all above 1. Matrimonial a) Profile Registration Form b) My Account Form There is also an Admin Module. Trade Leads Form in B2B, Company / Placement Registration and Job Vacany Form in Recruitment and Profile Registration Form in Matrimonial are displayed on site only after approval by Admin. **Problems and Solution Required** ** ** **A. The database is corrupted by SQL Injection.** *Soln Reqd:* 1. The database needs to be cleaned of corruption keeping the good data intact. 2. Provide security solutions such as plugging the text boxes in forms, providing Captcha in all the forms, using stored procedures etc. so as to prevent SQL Injection or any other security threats in future. **Note:** You can also offer to redesign all the forms instead of rectifying the problems in the current form. **B. Admin module: Most of the current Admin Module is not working properly and gives lot of errors. Some part is working.** *Soln Reqd*. General 1. Display members registered (AIC Registration Form Data) and services used by them. B2B 1. Display B2B member details. 2. Display Trade Leads with provision for approval. Recruitment 1. Display Resume details. 2. Display Company / Placement Agency details with provision for approval. 3. Display Job Vacancy with provision for approval. Matrimonial 1. Display Profile details with provision for approval. Common Points 1. All displays will have counter for number of records. 2. All records should have provision for Add / Edit / Delete. 3. Simple system to access a particular record. **C. Forms giving errors while submitting** *Soln Reqd.* 1. To offer solution so that users won't get errors while submitting the forms and submission becomes a smooth process. Sometimes forms get submitted only with part records or without username or password. To rectify all problems related to form submission. **Note:** You can also offer to redesign all the forms instead of rectifying the problems in the current form. **D. Ensure smooth functioning** *Soln Reqd.* 1. Rectify any minor problems if any for smooth functioning of the site including display, search filters, payment gateway etc. The website should be smooth functioning. You need to rectify the issues if they occur. **E. Transfer to [login to view URL]** *Soln Reqd.* 1. Transfer [login to view URL] files to [login to view URL] which is the main website. Final website will be [login to view URL] and [login to view URL] will get redirected to [login to view URL] **F. Clean unnecessary clutter of files** *Soln Reqd.* 1. Only those files that are required for the operation of the site should be there on the server. All unnecessary files should be removed (including image files). **G. URL's without query strings (Optional - Quote separately)** *Soln Reqd.* 1. To provide a system so that all urls will be without query strings and thus become search engine indexable. **Other Instructions** 1. We have listed all major problems above. However the project should be handed over only after ensuring that there are no functional problems in any other areas apart from those mentioned above. 2. Part of the payment will be made after 1 month of project completion just to be sure that SQL Injection problem does not occur again. We had already paid once for this work but the site got infected again which means the job was not done properly. We don't want to face the same issue second time. 3. You may also send a separate quote for developing a similar site with better look and feel, better navigation, better search options, better features such as video uploads, video conferencing etc.