Sie sind auf Seite 1von 134

Shipping management system

BY

Enrollment No. 073169261

Under Guidance Of

Submitted to the School of Computer and Information Sciences, IGNOU

In partial fulfillment of the requirements

For the award of the degree

BACHELOR OF COMPUTER APPLICATIONS (BCA)

INDIRA GANDHI NATIONAL OPEN UNIVERSITY


MAIDAN GARHI

Web Portal for Shipping System 1


Shipping management system

TABLE OF CONTENTS
1. Project profile
1.1 Introduction 2
1.2 Objectives 3
1.3 Project Category 4
1.4 Web Team 7
1.5 Web Engineering model used 11
2. Project planning
2.1 Requirement Analysis 16
2.2 System Requirement Specification
 Hardware Requirement 22
 Software Requirement 23
2.3 Risk Analysis 35
2.4 Cost Analysis 40
2.5 Project Scheduling 43
3. System Designing
3.1 Modules 47
3.2 Database Design 53
3.3 Data Flow Diagram (DFD) 61
3.4 Scope and Limitation 68
3.5 Input Output Specification 69
4. Deployment
4.1 Web Testing 109
4.2 Hosting & Deployment 114
4.3 Security 115
4.4 Maintenance 124
5. Annexure
5.1 About Organization 125
5.2 References 129

PROJECT PROFILE

INTRODUCTION

Shipping is physical process of transporting goods and cargo. Virtually


every product ever made, bought, or sold has been affected by
shipping .Despite the many variables in shipped products and locations,
there are only three basic types of shipments: land, air, and sea.

Web Portal for Shipping System 2


Shipping management system

Land or “ground” shipping can be either by train or by truck. Trucking is


easily the most popular form of shipping. Even in air and sea shipment,
ground transportation is still required to take the product from its origin
to the airport or seaport and then to its destination. Ground transportation
is typically more affordable than air shipments, but more expensive than
shipping by sea. Trucks are much faster than ships and rail but slower
than planes.

Many trucks will take freight directly from the shipper to its destination
in what is known as a door to door shipment. Vans and trucks of all sizes
make deliveries to sea ports and air ports where freight is moved in bulk
also. Much shipping is done aboard actual ships. An individual nation’s
fleet and the people that crew it are referred to its merchant navy 0r
merchant marine. Merchant shipping is essential to the world economy,
carrying the bulk of international trade. The ships are also extremely
expensive constructions themselves, being some of the largest man-made
vehicles ever. The term originates with the shipping trade of wind power
ships, and has come to refer to the delivery of cargo and parcels of any
size above the common mail of letters and postcards.
Ground shipping can be cheaper and less restrictive to size, quantity,
weight, and type of freight than by air transport. Air transport is usually
reserved for products which must be sent within a shorter time frame.
Some carriers offer ground shipping that operates on an exact timeline as
air does.

OBJECTIVES

Shipping is an industry that rarely sales on SIMS. Products and services


are periodically hit by fluctuating demand, unstable revenues and
escalating costs. Unless the right solutions are applied at the right time,
bad situations can become worse. The proposed project gives extensive
domain expertise can bring the benefits of information technology to
shipping information system by using courier , container and cargo
handling air , land and sea port the world over , giving them operational

Web Portal for Shipping System 3


Shipping management system

agility and providing seamless information integration , apart from


effecting considerable cost savings .

SIMS enables the effective and accurate capture of packets/container


operations, gate operations storage area operation and rail operations. It
aids in warehouse management and resource management. Apart from
operations capture, the system features include automatic invoice
generation, effective and easier EIS reporting and EDI messaging
facilities.
Shipping Information Management System (SIMS) ensures:
• No duplication of data entry
• Consistency and integrity of data
• Centralized control for data access
• Co-ordination between different work groups , leading to higher
personnel productivity
• Time management
• Easier and more effective executive information system reporting
• User friendly
• Cost reduction
• Customization level as per user requirement
• Better graphical user interface
• Information security

Project Category
Today, software takes on a dual role. It is a product and, at the same time, the
vehicle for delivering a product. As a product, it delivers the computing
potential embodied by computer hardware or, more broadly, a network of
computers that are accessible by local hardware... As the vehicle used to deliver
the product, software acts as the basis for the control of the computer (operating
systems), the communication of information (networks), and the creation and

Web Portal for Shipping System 4


Shipping management system

control of other programs (software tools and environments).


Software delivers the most important product of our time information.

Software is a logical rather than a physical system element and posses following
characteristics:-
1. Software is developed or engineered; it is not manufactured in the classical
sense.
2. Software doesn't "wear out."
3. Although the industry is moving toward component-based assembly, most
software continues to be custom built.

Our application lies in the category of Web-based software. It consists of web


pages retrieved by a browser are software that incorporates executable
instructions written in HTML,, C#, Java, Perl etc and data of type hypertext and
a variety of visual and audio formats. In essence, the network becomes a
massive computer providing an almost unlimited software resource that can be
accessed by anyone round the globe.

These general characteristics apply to all Web Applications :-

• Informational. Read-only content is provided with simple navigation and


links.
• Download. A user downloads information from the appropriate server.
• Customizable. The user customizes content to specific needs.
• Interaction. Communication among a community of users occurs via chat
room, bulletin boards, or instant messaging.
• User input. Forms-based input is the primary mechanism for communicating
need.
• Transaction oriented. The user makes a request (e.g., places an order) that is
fulfilled by the Web Application.
• Service oriented. The application provides a service to the user (e.g., assists
the user in determining a mortgage payment).

Web Portal for Shipping System 5


Shipping management system

• Portal. The application channels the user to other Web content or services
outside the domain of the portal application.
• Database access. The user queries a large database and extracts information.

Reasons to use Web Engineering:

Network intensive:- By its nature, a Web Application is network intensive. It


resides on a network and must serve the needs of a diverse community of
clients.

Content driven:- In our case, the primary function of a Web Application is to


use hypermedia to present text, graphics, audio, and video content to the end-
user.

Continuous evolution. Unlike conventional application software that evolves


over a series of planned, chronologically spaced releases, Web applications
evolve continuously and require updating.

Immediacy. Web-based applications have an immediacy that is not found in


any other type of software. That is, the time to market for a complete Web site
can be a matter of a few days to few weeks to few months. Developers must use
methods for planning, analysis, design, implementation, and testing that have
been adapted to the compressed time schedules required for Web Application
development.

Security. Because Web Applications are available via network access, it is


difficult, if not impossible, to limit the population of end-users who may access
the application. In order to protect sensitive content and provide secure modes
of data transmission, strong security measures must be implemented throughout
the infrastructure that supports a Web Application and within the application
itself.

Web Portal for Shipping System 6


Shipping management system

Aesthetics. An undeniable part of the appeal of a Web Application is its look


and feel. When an application has been designed to market or sell products or
ideas, aesthetics may have as much to do with success as technical design.

Internet Standards:- Since the application is used by the wide variety of end
user possessing different infrastructural hardware and software. So it becomes
difficult to maintain uniformity. Hence some internet standards are given by
W3C and IEEE. The web application should follow these standards.

Web Team

Client on Project Stake Holder

Web Portal for Shipping System 7


Shipping management system

Project Manager

Information Quality
Architect Assurance
Team
Team

Content Team Technical Team


Editor Developer
Graphic Design Team
Copy Writer Database
Design Product Artist
Administrator
Designer

Project Stake holder:- the Project Stake holder, sometimes called


the Business owner, is the person responsible for initializing the project.
This person could be, from the marketing department an external client,
editors, producers, or even the CEO of the company. The stake holder
deliverables could include:-
1. Project Concept or Idea
2. Budget
3. Marketing Plan
4. Page Mockups
5. Third Party Contents

Project Manager: - Project Manager Considered as the sole of


Project. He has following duties to perform.
1. He is the one who co-ordinates everything.

Web Portal for Shipping System 8


Shipping management system

2. Assign task to different team members.

3. Defines Project Budget

4. Sets time lying from different task

5. Acts as communication link between each aspect of project.

6. Sets even design direction

Information Architect Team:- The work of information architect


team start from the initialization state to the development state of the
project.
Performing team of task:-
1. It collects all the information required for project initialization.

2. It is also responsible for requirement analysis

3. He performs a significant role in project planning

4. He is responsible for feasibility study

5. He is responsible for creation of graphical user interface designing

6. He is responsible for logical connectivity of GUI.

Quality Assurance Team:-

Task: - 1. Keep strict check on development phase.

Web Portal for Shipping System 9


Shipping management system

1. He is responsible for all the type of testing.

2. He is in charge of maintenance of the project. Finally he is responsible


for deployment of the project.

3. After deployment of the project he collects feedback from the stake


holder.

Copy Writer:- Copy writer go to the stake holder and then Asked the
problem and this problem will be note on to the paper and then this
problem send to the editor And then editor works start.

Editor:- Editor collects this information and arrange the better format
of data. And then after requirement analysis on the data. After
requirement analysis editor make the report of the data. If some
information is less copy writer again
go to the stake holder collect all Information sends to the editor. Editor
again
collecting this information. This cycling process is continuing.

Graphic Design Team: - Graphic design teams play a very


important role in the project. Graphic design team is a center gravity of
the project. After making the report of the requirement analysis graphic
design team design the form
or prototyping designing on to the paper as per user requirement.
Graphic design
team also designs the database of the form. Graphic design team also
makes the flow of the data.
Technical Team: - after design the prototype technical team will
work out. Technical team will write the logical programming and HTML
designing. Technical team wills enforce of the deployment of the project.
Technical team will be playing the database administrator role.
Technical team will write the coding of database connectivity.

Web Portal for Shipping System 10


Shipping management system

My role in the project:- I have involved in various phases of


project development like,
I have designed the various web forms, Created Table & Stored
procedure for database and completed the Analysis , testing &
documentation.
database query for database purpose and design the full and final project
deliver to the stake holder and after collecting feedback of the project.

Web Engineering Model

The S/W Engineering Model used here is a combination of Spiral Model


and Component Based Model because no single model can serve all the

Web Portal for Shipping System 11


Shipping management system

purpose for the development of the software, that’s why we are


considering some features of “Spiral Model” and some features of
“Component Based Model”.
The combination of these two models forms a “Hybrid
Model”.

The Spiral Model

The spiral model, proposed by Boehm, is an evolutionary software


process model that couples the iterative nature of prototyping with the
controlled and systematic aspects of the linear sequential model. It
provides the potential for rapid development of incremental versions of
the software. Using the spiral model, software is developed in a series of
incremental releases. During early iterations, the incremental release
might be a paper model or prototype. During later iterations, increasingly
more complete versions of the engineered system are produced.

A spiral model is divided into six task regions:-

•Customer communication:- tasks required to establish effective


communication between developer and customer.

•Planning:- tasks required to define resources, timelines, and other


project related information.

• Risk analysis:- tasks required to assess both technical and


management risks.

• Engineering:- tasks required to build one or more representations of


the application.

Web Portal for Shipping System 12


Shipping management system

• Construction and release:- tasks required to construct, test,


install, and provide user support and training.

• Customer evaluation:- tasks required to obtain customer


feedback based on evaluation of the software representations created
during the engineering stage and implemented during the installation
stage. The spiral model is a realistic
approach to the development of large-scale systems and software.
Because software evolves as the process progresses, the developer and
customer better understand and react to risks at each evolutionary level.
The spiral model uses prototyping as a risk reduction mechanism but,
more important, enables the developer to apply the prototyping approach
at any stage in the evolution of the product. It maintains the systematic
stepwise approach suggested by the classic life cycle but incorporates it
into an iterative framework that more realistically reflects the real world.
The spiral model demands a direct consideration of technical risks at all
stages of the project and, if properly applied, should reduce risks before
they become problematic.

Key Strength:-
• Efficiently applies risk driven approach.
• Tries to eliminate errors in early phases.
• Provides efficient mechanism for Quality Assurance.
• Works well for a complex, dynamic and innovative projects.
• Re evaluation after each phase allows changes in user
perspectives, technology advances or financial perspective.

Key Defects:-

• Lacks explicit process guidance to determine modular division,


their objective, their constrains and alternatives.

Web Portal for Shipping System 13


Shipping management system

• Due to continuous risk assessment at every stage it would


become difficult to complete a project on a given deadline.

Component model

Object-oriented technologies provide the technical framework for a


component-based process model for software engineering. The object-
oriented paradigm emphasizes the creation of classes that encapsulate

Web Portal for Shipping System 14


Shipping management system

both data and the algorithms used to manipulate the data. If properly
designed and implemented, object-oriented classes are reusable across
different applications and computer-based system architectures.

The component-based development model incorporates many of the


characteristics of the spiral model hence can be easily use with Spiral
Model. It is evolutionary in nature, demanding an iterative approach to
the creation of software. However, the component-based development
model composes applications from prepackaged software components
called classes.
The engineering activity begins with the identification of candidate
classes. This is accomplished by examining the data to be manipulated
by the application and the algorithms that will be applied to accomplish
the manipulation. Corresponding data and algorithms are packaged into a
class.

Classes created in past software engineering projects are stored in a class


library or repository. Once candidate classes are identified, the class
library is searched to determine if these classes already exist. If they do,
they are extracted from the library and reused. If a candidate class does
not reside in the library, it is engineered using object-oriented methods.
The first iteration of the application to be built is then composed, using
classes extracted from the library and any new classes built to meet the
unique needs of the application. Process flow then returns to the spiral
and will ultimately re-enter the component assembly iteration during
subsequent passes through the engineering activity.

The component-based development model leads to software reuse, and


easy braking of task into smaller components which provides a number
of measurable benefits. Component assembly leads to a 70 percent
reduction in development cycle time; an 84 percent reduction in project
cost, and a productivity index of 26.2, compared to an industry norm of
16.9.

Web Portal for Shipping System 15


Shipping management system

PROJECT PLANING

Requirement Analysis

Web Portal for Shipping System 16


Shipping management system

Requirements engineering is difficult. It’s not just a simple matter of


writing down what the customer says he wants. A fundamental problem
in business is that requirements are inherently dynamic; they will change
over time as our understanding of the problem we are trying to solve
changes. The importance of good requirements and the underlying
dynamic nature of the process mean that we must be as accurate as
possible, and yet be flexible. Ineffective requirements practices are an
industry wide problem. A more disciplined approach to requirements
development and management is needed in order to improve project
success rates. A requirement is a necessary attribute in a system, a
statement that identifies a capability, characteristic, or quality factor of a
system in order for it to have value and utility to a customer or user.
Requirements are important because they provide the basis for all of the
development work that follows. Once the requirements are set,
developers initiate the other technical work: system design,
development, testing, implementation, and operation.

Requirements Types:-
Hardware Requirements:-
Performance requirement:- How will user interact with the
system, How many users will be using system at a time, what type of
user will interact
Interface requirement:- how will the GUI work
Specialty engineering requirement:- check for the o/s
requirement or any additional software needed
Environmental requirement:- Infrastructural need like Power
supply, HDD space etc

Software Requirements:-
Functional requirement:- identify the number of function system
would perform

Web Portal for Shipping System 17


Shipping management system

Nonfunctional requirement: - how system will generate error


messages when a query fails to run to completion or a legacy system is
not responding within the allotted time. Or unauthorized access occurs in
our system

How to proceed:-
• Customer Needs and Expectations:- (Requirements Analysis
Input)
Business requirements:- Managers need access to timely
and accurate data on personnel in order to meet operational
needs.
User requirements:- The user needs the capability to search
on personnel across the entire company by predefined skill
sets.
Product requirements :- Data formats shall be translated
across legacy system boundaries into the format supported by
the local user’s system.
Environmental requirements :- There shall be no
operational impact on any user other than the impact on
information retrieval caused by having a larger
Population of employees from which to select.

• System Requirements Specifications :- (Requirements


Analysis Output)
High-level (or system-level) requirements:- the system shall
maintain cross-references for information types contained in
the legacy systems.
Functional requirements:- The local user shall be able to
search all legacy systems in a predefined local, regional, or
national geographical area for

Web Portal for Shipping System 18


Shipping management system

Personnel meeting a specified skill set.


Nonfunctional requirements:- The system shall make use of
the public switched network (PSN) and not require dedicated
lines of communication.
Derived (or design) requirements:- and design constraints
The system shall use public key infrastructure (PKI)
communications security.
Performance requirements:- The system shall support up to
20 simultaneous users without any noticeable degradation of
service. The system shall return all available skill sets to the
user within 1 minute of initiating a search.
Interface requirements:- The system shall present a look and
feel consistent with each local office’s legacy system.

Requirement register

Project Name: - Online Shipping Management System

Stake Holder: - Shipping Company

Project Manager: - Mr. Abhishek Jain

Register Generator: - Satya Narayan Misra

Web Portal for Shipping System 19


Shipping management system

Chart about Requirement Register:-

Require- Description Type Reason Method Used Priority


-ment Id
1 Information about Real Creating Static pages
Communication 85
Company company info,contact
With stake
Details, Privacy policy Holder

2 Where we have to Derived Positioning the static Derived from 75


Place static pages Pages previous
information
3 What types of rates Real Define the working of Communication 80
have To be Rate calculator With stake
calculated Holder
4 Parameter Required Real Source to destination Communication 80
for Rate calculator Distance, Mode of With stake
delivery of goods Holder
5 Output of rate Real Printing the total Communication 80
Calculator amount With stake
Holder
6 This page contain Real Client Login and Communication 82
information about Registration With stake
client &make login holder
or authentication
system
7 Fields of the Real We providing the Communication 81
Registration form Fields With stake
Holder
8 What type of Real Registering the user Communication 81
Registert to be user With stake
holder
9 Are future Real Checking for future Communication 85
Modification aspect With stake
Required for holder
Registration details
10 This page contain
Real Address book for Communication 85
complete Client With stake
information about holder
client &staff
11 Required the fields Real What type of fields to Communication 84
of Address book Be used With stake
holder

Web Portal for Shipping System 20


Shipping management system

12 Limit(size of Real Define the limit of Communication 85


address Book) Address Book With stakeholdr
13 This page contain Real Form for client for the
Communication 80
information about Generation of order With stake
order form Form holder
14 Required the format ofReal Define the condition Communication 80
Order form Of order form With stake
holder
15 Define each fields in Real Field format of order Communication 81
Order form Form With stake
holder
16 Printing, Searching, Real To make print the order
Communication 82
Modification are form With stake
Required in order holder
Form
17 What type Real
of Client can check Communication 85
consignment Consignment detail With stake
detail had to be holder
check by user
18 This page contain Real Feeding of rate tariff Communication 85
information about With stake
prize list according holder
to goods and
services
19 Details of the form Real Define the detail of Communication 82
For Feeding rate Rate With stake
Tariff holder
20 In future content of Derived Future aspect of rate Derive from previous
66
The Rate tariff has Tariff Information
to be Modified or
deleted
21 Who has to use Real Information about Communication 85
Tracking system Tracking system With stake
holder
22 For Whom and how Real Which person are used Communication 85
Tracking system has to To be tracking system With stake
Be used holder
23 How the claim Real Define criteria for Communication 85
Management works claim management With stake
system holder
24 What business rules areDerived Rules for claim Derive from previous
65
Defined for claim Management system information
Management system
25 How the claim will Derived Rules for claim Derive from previous
65
be Settled Management system information
26 Who are the senders orReal Information of Communication 85
Receiver ofinformation transaction system With stake holder

Web Portal for Shipping System 21


Shipping management system

27 What type of Derived Type of information Derive from previous


65
information has to Has to be transmitted information
be transmitted
28 Is there any need of Derived Saving the records Derive from previous
65
Saving information information
29 Define the Real Suitable person to Communication 85
designation & Allot suitable work With stake
There specific role holder
In the office

SYSTEM REQUIREMENT SPECIFICATION

Hardware Requirement

Web Portal for Shipping System 22


Shipping management system

 10 GB Online Database Space

 100 MB Online Web Space

 One Domain Name Server

 Shared Hosting Control Pannel

 160 GB HDD with 9600 RPM

 Intel P4 Dual Core Processer 2.0 with 5 MB L2 Cache Memory

 4 GB of RAM with 666 MHz of FSB

 VGA Color Monitor that Support a resolution of 1024*768

Software Requirements

Development Tool:

Microsoft Visual Studio -2008

Web Portal for Shipping System 23


Shipping management system

Adobe Dreamweaver-9.0(web page design)

Adobe Photoshop-9.0(image editing)

Cute FTP

Internet Information Server

Analysis Tool :

COCOMO II 2000

Code Counter

Technologies Used:
ASP.NET
SQL Server-2005

FRONT END: - Any web browser having support for java script , Cascading
Style Sheet, Shock Wave File, HTML like MS-Internet Explorer 6 or above.

MIDDLE WARE: - Microsoft Internet information Services- 6(IIS)


Web Server-Microsoft .NET framework
SDK 2.0/3.5 SMTP Server, SMS gateway.

BACK END: - MS-SQL Server 2005.

DEVELOPMENT TOOL

Web Portal for Shipping System 24


Shipping management system

1. VisualStudio.NET

Microsoft Visual C# is just one of the languages that uses


Visual Studio .NET as its development environment. Other
programming languages supplied by Microsoft that use Visual
Studio .NET include Visual Basic .NET and Visual C++
.NET. In addition, companies other than Microsoft are
supplying compilers for Visual Studio .NET, which will
enable you to develop solutions that include Eiffel, COBOL,
and other languages. All programming using these languages
can take advantage of the same set of tools and features
offered by Visual Studio .NET, including all of the designers
and tool windows that are part of the integrated development
environment (IDE) as well as the integrated help system.
Although this chapter focuses on how you can use and
customize Visual Studio .NET with the Visual C#
programming language, most of this information will apply to
all Visual Studio .NET languages.

Visual Studio
2008 Vertical

The Start Page

Web Portal for Shipping System 25


Shipping management system

The Visual Studio .NET Start Page, shown in Figure 1-2,


provides a home base for obtaining information and services
that extend beyond your machine. Many of the tabs available
to you on the Start Page require an Internet connection. These
tabs provide late-breaking information about Visual Studio
.NET, provide links to new downloads, and enable you to host
Web services with just a couple of mouse clicks.

Solution Explorer

Web Portal for Shipping System 26


Shipping management system

Solution Explorer displays a tree of the current Visual


Studio .NET solution. Using Solution Explorer, you can
browse through all the projects that make up the current
solution, as well as the files that belong to each project.
Double-clicking a project file will open the file for editing.
Opening a file will change the menu and toolbar items that are
available. For example, if you open an XML file, a top-level
menu item for XML operations will be added to the main
menu. Right-clicking on any element in Solution Explorer will
display a shortcut menu with actions that you can perform on
that element. For example, the shortcut menu for the solution
icon allows you to perform tasks such as adding a new project
to the solution, whereas the shortcut menu for a project
enables you to add new items to the project and perform other
project-related activities.
Properties
The Properties window is used to declaratively set properties
for different elements of your solution. The contents of this
window vary depending on the type of item you’re currently
working with. If you click an icon in Solution Explorer,
properties for the selected item will be displayed. If you’re
working with user interface controls or forms, many of the
control and form properties can be set through this window.
Likewise, if you’re working with an HTML or XML
document, object model properties for these documents can be
set in this window.

Server Explorer:-

Web Portal for Shipping System 27


Shipping management system

Server Explorer provides access to system services that are


available on your machine as well as on other machines on
your network. Normally, Server Explorer is tucked away
under the edge of the Visual Studio .NET window, with just a
small icon visible, as shown earlier in Figure 1-3. If you
position the mouse pointer over the Server Explorer icon, the
window expands to display a list of servers available on your
network, as shown in Figure 1-5. To lock the Server Explorer
window in place, click the pin icon in the upper-right; this will
prevent the window from auto-hiding until the pin icon is
clicked again.
Server Explorer provides easy access to event logs, databases,
performance counters, and other system services. Server
Explorer is more than just a console for viewing information;
you can drag objects from Server Explorer into your project,
and Visual C# .NET will automatically generate code to make
use of the new objects in your project. For example, to add a
database connection to a Windows application, you can
simply drag a database icon from Server Explorer to an open
form in the Visual Studio .NET Windows Forms Designer.

Microsoft SQL Server 2005

Web Portal for Shipping System 28


Shipping management system

Microsoft SQL Server is a relational database management


system (RDBMS) produced by Microsoft. Its primary query
languages are MS-SQL and T-SQL.
Microsoft SQL Server 2005 includes a component named
SQL CLR via which it integrates with .NET Framework.
Unlike most other applications that use .NET Framework,
SQL Server itself hosts the .NET Framework runtime, i.e.,
memory; threading and resource management requirements
of .NET Framework are satisfied by SQLOS itself, rather than
the underlying Windows operating system. SQLOS provides
deadlock detection and resolution services for .NET code as
well. With SQL CLR, stored procedures and triggers can be
written in any managed .NET language, including C# and
VB.NET. Managed code can also be used to define UDTs
which can be persisted in the database. Managed code is
compiled to .NET assemblies and after being verified for type
safety, registered at the database. After that, they can be
invoked like any other procedure. However, only a subset of
the Base Class Library is available, when running code under
SQL CLR. Most APIs relating to user interface functionality
are not available.

TECHNOLOGIES

Web Portal for Shipping System 29


Shipping management system

C#

C# (pronounced C-Sharp) is a new programming language introduced


with the Microsoft .NET framework and is no doubt the language of
choice in .NET environment. It was first created in the late 1990's as part
of Microsoft’s whole .NET strategy. It is a whole new language free of
backward compatibility curse and a whole bunch of new, exciting and
promising features. It is an Object Oriented Programming language,
which at its core, has similarities with Java, C++ and VB.

In fact, C# combines the power & efficiency of C++, simple & clean OO
design of Java, and code simplification of Visual Basic. Like Java, C#
also does not allow multiple inheritance and use of pointers (in safe and
managed code) while it does provide garbage memory collection at
runtime, type and memory access checking. But, contrary to java, C#
keeps the different useful concepts of C++ like operator overloading,
enumerations, pre-processor directives, pointers (in unmanaged and un-
safe code), function pointers (in the form of delegates), also promises to
have template support (with the name of generics) in next versions. Like
VB it also supports the concepts of properties (context sensitive accessor
to fields).

In addition to this, C# comes up with some new/exciting features like


reflections, attributes, marshalling, remoting, threads, streams, data
access with ADO.NET, etc. C# programming language is designed from
the scratch keeping in mind the Microsoft.Net environment. MS.Net
(and thus C#) programs runs on top of the Common Language Runtime
(CLR), which provides the runtime support to them.

Microsoft.NET platform

Web Portal for Shipping System 30


Shipping management system

Microsoft .NET is a software development platform based on


virtual machine based architecture. Dot net is designed from
the scratch to support programming language independent
application development. The entire .NET programs are
independent of any particular operating system and physical
hardware machine. They can run on any physical machine,
running any operating system that contains the
implementation of .NET Framework. The core component of
the .NET framework is its Common Language Runtime
(CLR), which provides the abstraction of execution
environment (Physical machine and Operating System) and
manages the overall execution of any of the .NET based
program.
With .NET, Microsoft introduces a completely new
architecture for Windows applications (WinForm), Data
Access (ADO.NET), Web Applications (ASP.NET), Windows
components (Assemblies), Distributed Applications (.NET
remoting), and above all the XML based Web Services.

The Relationship of C# to .NET


C# is a relatively new programming language and is
significant in two respects:
• It is specifically designed and targeted for use with
Microsoft's .NET Framework (a feature-rich platform for the
development, deployment, and execution of distributed
applications).
• It is a language based on the modern object-oriented design
methodology, and when designing it Microsoft learned from the
experience of all the other similar languages that have been around

Web Portal for Shipping System 31


Shipping management system

since object-oriented principles came to prominence some 20 years


ago.
One important thing to make clear is that C# is a language in
its own right. Although it is designed to generate code that
targets the .NET environment, it is not itself part of .NET.
Some features are supported by.NET but not by C#, and you
might be surprised to learn that some features of the C#
language are not supported by .NET (for example, some
instances of operator overloading)!
However, because the C# language is intended for use with
.NET, it is important for you to have an understanding of this
Framework if you want to develop applications in C#
effectively.

ASP.NET Framework
A framework is commonly thought of as a set of class libraries
that aid in the development of applications. The .NET
Framework is more than just a set of classes. The .NET
Framework is targeted by compilers using a wide variety of
programming languages (over twenty at the time of this
writing).
These languages are used to create a wide range of
applications, including everything from small components that
run on handheld devices to large Microsoft ASP.NET
applications that span Web forms, where multiple Web servers
act together to improve the performance and fault tolerance of
a Web site. The .NET Framework is responsible for providing
a basic platform that these applications can share. This basic
platform includes a runtime set of services that oversee the

Web Portal for Shipping System 32


Shipping management system

execution of applications. A key responsibility of the runtime


is to manage execution so that software written by different
programming languages uses classes and other types safely.

If you are using Visual Web Developer or Visual Studio, you


first need to create a new website. Start Visual Web Developer
and select the menu option File, New Web Site. The New
Web Site dialog box appears. Enter the folder where you want
your new website to be created in the Location field and click
the OK button.

After you create a new website, you can add an ASP.NET


page to it. Select the menu option Web Site, Add New Item.
Select Web Form and enter the value FirstPage.aspx in the
Name field. Make sure that both the Place Code in Separate
File and Select Master Page check boxes are unchecked, and
click the Add button to create the new ASP.NET page.

Stored procedure

A stored procedure is a precompiled executable object that contains


one or more SQL statements. A stored procedure may be written to
accept inputs and return output.

Advantage of using stored procedure over the SQL queries

Writing the SQL statements inside our code is usually not a good
idea. In this way you expose your database schema (design) in the
code which may be changed. Hence most of the time programmers
use stored procedures instead of plain SQL statements. A stored
procedure is a precompiled executable object that contains one or
more SQL statements. Hence you can replace your complex SQL
statements with a single stored procedure. Since, stored procedures
are precompiled objects they execute faster at the database server.

Web Portal for Shipping System 33


Shipping management system

Most of the time, stored procedures contain more than one


command; in this case, the time to pass the individual commands to
the database server from the program is saved. The database is
issued just one command (to execute the stored procedure) and the
DB server executes all the commands and returns the result in the
end. Hence, the overall interaction time with the DB server reduces
in a great deal. This can result in a huge optimization in case where
the DB server is accessed via a slow network.

How do stored procedures look like?


Here we are presenting a brief review of four basic type of stored
procedure for SELECT, INSERT, UPDATE and DELETE
operations. In SQL Server, you can create and add stored
procedures to your database using the SQL Server Enterprise
Manager.

UPDATE Stored Procedure


A simple stored procedure to update a record is
CREATE PROCEDURE UpdateProc (
@artId as int,
@title as varchar(100),
@topic as varchar(100),
@authorId as int,
@lines as int,
@dateOfPublishing as datetime)
AS
UPDATE Article SET
title=@title, topic=@topic, authorId=@authorId,
lines=@lines, dateOfPublishing=@dateOfPublishing
WHERE artId=@artId
GO
The name of stored procedure is UpdateProc and it has the input
parameters for each of the fields of our Article table. The query to
be executed when the stored procedure is run updates the record
with the supplied primary key (@artId) using the supplied
parameters. It is very similar to the code we have written to
initialize command in the previous example and we hope you don’t
have any problem in understanding this even you are not familiar
with stored procedure.

INSERT Stored Procedure


A simple stored procedure to insert a record is
CREATE PROCEDURE InsertProc (

Web Portal for Shipping System 34


Shipping management system

@artId as int,
@title as varchar(100),
@topic as varchar(100),
@authorId as int,
@lines as int,
@dateOfPublishing as datetime)
AS
INSERT INTO article (artId, title, topic, authorId, lines,
dateOfPublishing)
VALUES(@artId, @title, @topic, @authorId, @lines,
@dateOfPublishing)
GO
The stored procedure above is named InsertProc and is very similar
to the UpdateProc except that here we are using the INSERT SQL
statement instead of the UPDATE command.

DELETE Stored Procedure


A simple stored procedure to delete a record is
CREATE PROCEDURE DeleteProc (@artId as int)
AS
DELETE FROM article WHERE artId = @artId
GO
Here we have used only one parameter as to delete a record you
only need its primary key value.

SELECT Stored Procedure


A simple stored procedure to delete a record is
CREATE PROCEDURE SelectProc
AS
SELECT * FROM Article
GO
This probably is the simplest of all. It does not take any parameter
and only selects all the records from the Article table.
All the four stored procedures presented above are kept extremely
simple so that the reader does not find any difficulty in
understanding the use of stored procedure in his C#/VB.Net code.

Risk Analysis

Uncertainty, which is constantly present in our daily lives,


frequently impacts our decisions and actions. When we talk about

Web Portal for Shipping System 35


Shipping management system

risk, we normally mean the chance that some undesirable impact


will occur. Hence, we normally seek to avoid or minimize risk. If
there is a chance of rain, and we don't want to get wet, we may
choose to stay indoors -- avoiding that risk -- or we may take an
umbrella to minimize the impact of rain upon us. Uncertainty can
impact our decisions and actions in desirable as well as undesirable
ways. In risk analysis we usually focus on what can go wrong --
the outcomes that represent loss or damage -- although an effective
analysis will also help us understand what can go right as well.
A risk assessment involves evaluating existing physical and
environmental security and controls, and assessing their adequacy
relative to the potential threats of the organization. A business
impact analysis involves identifying the critical business functions
within the organization and determining the impact of not
performing the business function beyond the maximum acceptable
outage. Types of criteria that can be used to evaluate the impact
include: customer service, internal operations, legal/statutory and
financial.
Our business processes depend heavily on technology and
automated systems, and their disruption for even a few days could
cause severe financial loss and threaten survival. The continued
operations of this organization depend on management’s awareness
of potential disasters, their ability to develop a plan to minimize
disruptions of mission critical functions, and the capability to
recover operations expediently and successfully. The risk analysis
process provides the foundation for the entire recovery planning
effort.
A primary objective of business recovery planning is to protect the
organization in the event that all or part of its operations and/or
computer services is rendered unusable. Each functional area of the
organization should be analyzed to determine the potential risk and
impact related to various disaster threats.
Regardless of the prevention techniques employed, possible threats
that could arise inside or outside the organization need to be
assessed. Although the exact nature of potential disasters or their
resulting consequences are difficult to determine, it is beneficial to
perform a comprehensive risk assessment of all threats that can
realistically occur to the organization. Regardless of the type of
threat, the goals of business recovery planning are to ensure the
safety of customers, employees and other personnel during and
following a disaster.
Uncertainty can arise in several ways:

Web Portal for Shipping System 36


Shipping management system

• If the quantity we'd like to know is a competing firm's planned


product price, uncertainty arises from our lack of knowledge: The
price may be well known to that firm's employees, but it's unknown
to us.
• If the quantity is market demand for products like ours, uncertainty
arises from the complexity of the process: Demand depends on
economic factors, fashions and preferences, and our and other
firms' actions -- and even if we knew all of these, we couldn't fully
calculate their net impact on final demand.
• If the quantity is a material thickness in nanometers, uncertainty
may arise from limits on our ability to measure this physical
quantity. We may also have limits on our ability to control
fabrication of the material.
• Many processes that we want to model -- from the failure rate of an
electronic component to the behavior of a macromolecule -- have
inherent randomness for all intents and purposes.

Web Portal for Shipping System 37


Shipping management system

Web Architecture on which Risk analysis will be enforced

Web Portal for Shipping System 38


Shipping management system

Risk register

ID Description Effect Prevention Priority


1 All the required informationThis may adverselyProper requirement 90
Might not be collected Effect project cost orAnalysis must be
Project schedule perform
2 Cost risk Project budget will be
To control the cost of85
High The project
3 Schedule risk Project delay will not
Dividing the work 85
Deliver on time According to time
Schedule properly
4 Support risk S/W will not make To all member of the85
Easy to correct Team work properly
5 Unauthorized access should Unanimous user may Use of proper 90
be corrupt the data Authentication system
Blocked
6 Proper think client must beContent might not be For better use indicate
85
Used Visible On each page for
Proper think client
7 Proper resolution must be Content might get Indicate on each page85
Selected Dispose Particular screen
Resolution must be
Used
8 Business process logic must Have wrong result A strict check should90
be Must be octain Be kept on logical
Applied correctly Programming
9 All the input fields must beAmbiguous data may By applying appropri- 86
Checked before data insertion
Be entered ate validater on each
field
10 Validation work must be Server may take more By using client side 90
Perform on client side Time for data process-
Validaters
ing
11 Data redundancy must be Disk space might beProper use of 90
Reduced Wastage Normalization

12 Checking overall budget ofSome hidden cost may Proper & timely cost85
The project Increase project Analysis must be done
Budget
13 Graphical user interface
The user may have Prototype must be 90
might Difficulty in accessing
Validated as per user
Not be user friendly Page contents Requirement
14 Data on static pages Project& appearance isExpert form designer90
dynamic Not good Must be preferred
Form may not be clearly
Visible

Web Portal for Shipping System 39


Shipping management system

15 Checking complexities of the


A complex system Simplified logical 90
Logical process Might be generated Programming might
Be used
16 1 MB storage of data Data corrupt Use of sql server 2005
90
persistence
17 Checking product engineering
GUI’s developed may Proper engineering 90
Not be stable or Model must be used
Feasible
18 Checking the limit of address
Disk space must Abelimit of hundred 85
Book wastage Infused
19 Performance checking Project speed is not To increase the RAM85
Good Or hard disk

Cost Analysis

The purpose of estimating effort is to predict the amount of effort


required to accomplish a given task based on the knowledge of

Web Portal for Shipping System 40


Shipping management system

previous similar projects and other project characteristics that are


believed to be related to effort.Web company may find that to
predict the effort necessary to implement a new Web application, it
will require the following input.
• Estimated number of new Web pages
• The number of functions and features (e.g., shopping cart) to be
offered by the new Web application
• Total number of developers who will help develop the new Web
application
• Developers’ average number of years of experience with the
development tools employed
• The choice of the main programming language used

One of the first algorithmic models to be proposed in the literature


was the constructive cost model (COCOMO; Boehm, 1981).
COCOMO aimed to be a generic algorithmic model that could be
applied by any organisation to estimate effort at three different
stages in a software project’s development life cycle: early on in
the development life cycle, when requirements have not yet been
fully specified (basic COCOMO); later in the cycle, once detailed
requirements have been specified (intermediate COCOMO); and
even later when the application’s design has been finalised
(advanced COCOMO). Each stage corresponds to a different
model, and all three models take the same form :
EstimatedEffort = a EstSizeNewprojb EAT,where the following
statements apply

Web Portal for Shipping System 41


Shipping management system

• EstimatedEffort is the estimated effort, measured in person


months, to develop an application.
• EstSizeNewproj is the size of an application measured in
thousands of delivered source instructions (KDSI).
• a and b are constants that are determined by the class of the
project to be developed. The three possible classes are as follows:
• Organic: The organic class incorporates small, uncomplicated
software projects developed by teams that have a great amount of
experience with similar projects, and where software requirements
are not strict.
• Semidetached: The semidetached class incorporates software
projects that are halfway between small and easy, and large and
complex. Development teams show a mix of experiences, and
requirements also present a mix of strict and slightly vague
requirements.
• Embedded: The embedded class incorporates projects that must
be developed within a context where there are rigid hardware,
software, and operational restrictions.
• EAF is an effort adjustment factor, calculated from cost drivers
(e.g., developers, experience, tools).
The COCOMO model makes it clear that size is the main
component of an effort estimate. Constants a and b, and the
adjustment factor EAF, all vary depending on the model used, and
in the following ways.
Basic COCOMO uses a value EAF of 1; a and b differ depending
on a project’s class.
Parameter values for basic and intermediate COCOMO
Class a b
Organic 2.4 1.05
Basic
Semidetached 3.0 1.12
Embedded 3.6 1.20
Class a b
Organic 3.2 1.05
Intermediate
Semidetached 3.0 1.12
Embedded 2.8 1.20

Intermediate COCOMO calculates EAF based on 15 cost drivers,


grouped into four categories: product, computer, personnel, and
project. Each cost driver is rated on a six-point ordinal scale
ranging from very low importance to extra high importance. Each
scale rating determines an effort multiplier, and the product of all
15 effort multipliers is taken as the EAF.

Web Portal for Shipping System 42


Shipping management system

Advanced COCOMO uses the same 15 cost drivers as


intermediate COCOMO, however they are all weighted according
to each phase of the development life cycle; that is, each cost driver
is broken down by development’s phase. This model therefore
enables the same cost driver to be rated differently depending on
the development’s phase. In addition, it views a software
application as a composition of modules and subsystems, to which
the intermediate COCOMO model is applied to.
R C
Cost Ratin D I
P U
Driver g D T
D T
1. 1.
Very 1. 1.
3 3
low 8 5
5 5
0. 0. 0.
1.
ACAP Low 8 8 8
2
(Analy 5 5 5
st Nom
1 1 1 1
Capabi inal
lity) 0. 0.
0. 0.
High 7 8
9 9
5 5
0. 0. 0.
Very 0.
5 7 7
high 7
5 5 5
The four development phases used in the advanced COCOMO
model are requirements planning and product design (RPD),
detailed design (DD), coding and unit test (CUT), and integration
and test (IT). An overall project estimate is obtained by
aggregating estimates obtained for subsystems, which themselves
were obtained by combining estimates made for each module.

PROJECT SCHEDULING

Web Portal for Shipping System 43


Shipping management system

GANTT CHART

A grant chart or bar chart is the simplest form of formal project


management. The GANTT chart is used
almost exclusively for scheduling purpose and therefore controls
only the time dimension

10jan 15jan 17jan 27jan 9feb 16feb


2009 2009 2009 2009 2009 2009
Start Information
Gathering
Problem
Identification
Requirement
Analysis
Risk
Analysis
Cost
Analysis
Prototype
Designnig

20feb 2mar 2apr 17apr 24apr 3may 6may


2009 2009 2009 2009 2009 2009 2009
Deployment
&validation
Modules
System
Integration

Testing
Deployment
Documentation Finish

Web Portal for Shipping System 44


Shipping management system

2mar2009 4mar2009 5mar2009 6mar2009 10mar2009 13mar2009


Start Module
Planning

Prototype

Web
Form
Design
Coding

Database
Programmin
g
Testing Finish

Admin Module

16mar2009 16mar2009 16mar2009 17mar2009 18mar2009 19mar2009


Module
Planning

Prototype

Web Form
Design
Coding

Database
Programmin
g
Testing Finish

Client Module

Web Portal for Shipping System 45


Shipping management system

9mar2009 9mar2009 9mar2009 10mar2009 11mar2009 12mar2009


Start Module
Planning

Prototype

Web
Form
Design
Coding

Database
Programmin
g
Testing Finish

Back Office Module

Web Portal for Shipping System 46


Shipping management system

19mar2009 20mar2009 20mar2009 23mar2009 24mar2009 25mar2009


Start Module
Planning

Prototype

Web Form
Design
Coding

Database
Programmin
g
Testing Finish

Tracker Module

13mar2009 13mar2009 13mar2009 16mar2009 17mar2009 18mar2009


Start Module
Planning

Prototype

Web Form
Design
Coding

Database
Programmin
g
Testing Finish

Home Module

Web Portal for Shipping System 47


Shipping management system

Registration Module

System Designing

MODULES:-

There are 6 modules in the project. They are as follows.

(1). Administration Module

26mar2009 27mar2009 27mar2009 30mar2009 1apr2009 2apr2009


Start Module
Planning

Prototype

Web Form
Design
Coding

Database
Programmin
g
Testing Finish

(2). Registration Module

(3). Home Module

(4). Back office Module

Web Portal for Shipping System 48


Shipping management system

(5). Client Module

(6).Tracker Module

MODULE DESCRIPTION

1. Administration Module :

In administration module, the authorized persons can


only access the project by entering username and password.

Unauthorized persons cannot access the project at all. It also maintains


the component information, employs information etc.

It is also having the flexibility to add new component/item, add or modify


user details.

If the user fills correct name and password on AdminLogin.aspx page


then only new page will be displayed otherwise not.

After he Administrator is successfully logged on, the


AdminWelcome.aspx page will be displayed. This page contains links to
different pages to control whole administrator process.

Admin modules also manage the office staff.

2. Registration Module:

Reasons to Registers

Create a shipment

Web Portal for Shipping System 49


Shipping management system

Ship with UPS quickly and easily. Create professional shipping


labels and bill shipment to a credit card or your UPS Account.

• Use international Tools

Manage the movement of international goods in a timely,


efficient and compliant manner. You can screen for denied
parties, check import compliance , harmonies tariff codes ,
estimate landed cost and access shipping forms .

• Enhanced Tracking

Receive proof of delivery for your shipment, and import and


save tracking numbers to avoid re-entering them each time you
track a shipment.

• Signature Tracking

Receive proof of delivery with a signature image, full name and


delivery address , and more .

In registration process following information provide :

Registration information, contact information, shipping services


and packaging, payment option, acceptance of terms and
conditions.

Web Portal for Shipping System 50


Shipping management system

1. Managing Product list : Company provide service so that clients


maintain their product list by their packaging , weight and
containers

2. Address Book: Address book maintain to find the shipment


source or destination company of the clients

3 Tracking Module:

1. Add Tracking Features

My offers several additional features to help you determine the


status and details of your shipments, which may include collection
information, reference number information and more. Find out
what time a shipment arrived and who received the shipments with
proofs of delivery information.

2. Import Tracking Numbers

Save time by importing up to 100 tracking numbers that can be


tracked at one time. Tracking results can be sent to you by e-mail
or in a CSV (comma-separate value) file that you can use in most
spreadsheet applications.

Web Portal for Shipping System 51


Shipping management system

3. Save Tracked Numbers

Select up to 25 tracking numbers to save for future reference. You


can check the status of undelivered packages as often as you want
without having to key in tracking numbers every time.

More wage to track

UPS offers registered users several convenient ways to track


packages

Track by E-mail: by sending an e-mail message including your


Tracking numbers to totaltrack.gbeng@arieslogistic.com. We’ll
send your tracking summary in a reply message.

Track by reference number: by using the reference numbers you


assign to your packages.

4. Freight Service Module:

This module includes following 3 types of services:

Critical freight

Supply chain solutions SM is a leading provider of global time


critical freight services with access to almost any kind of aircraft
are vehicle around the world. You get the benefits of our vast
network of transportation options, specialized equipment, proactive
communications, advanced tracking & world wide reach.

Web Portal for Shipping System 52


Shipping management system

Features

Multiple transportation modes: air, surface, Charter and hand carry

Mode and route optimization capabilities

Specialized equipment & the value added services.

Air Freight

To meet your freight deadlines, you need an air freight service


provider with high performance standards & the flexibility to meet
your changing needs. With our comprehensive portfolio of time
definite, guaranteed & cost-saving options, UPS can meet your air
freight requirements with confidence and reliability. Choose from
transit times as fast as next day to three to five days to gain global
coverage with more possibility than ever before.

Ocean Freight

UPS supply chain solutions SM offers a full array of freight


forwarding in global transportation services.

From almost any origin, destination, or carrier, we can provide a


single, streamlined source to book your cargo, arrange for pickup,
and manage the shipping documentation. We can accommodate
almost any size shipment, and our advance tracking technology
provides you with visibility of critical milestones.

As one of the world’s leading non-vessel operating common


carriers (NVOCC).* we can maximize your routing and transit
time options by managing your ocean shipments door –to – door
with ease, visibility & global reach . Chose from our flexible ocean
freight services based on your timing, cargo size & equipment
needs.

Web Portal for Shipping System 53


Shipping management system

Full Container Load Service: Access frequent departures at


competitive rates for full container load (FCL)

Shipments from major ports around the world.

Less-than-Container Load Service- Utilize less-than Container


load(LCL) departures between major ports, managing every step to
give you visibility throughout the process.

5. Locations: Provide world wide locations world wide company


provide services.

6. Support: Customers services include; finding rates and delivery


time, preparing your package, paying for shipment, brokerage
services, Checking shipment status and return your shipment
service.

4 Back office Module:

Back office contains the information of rate tariff. Back office


creating new tariff, add tariff, and modify the old tariff.

Back office creating new check point & deleting the old check
point, creating new brach, deleting old branch.

Back office also modifies the client detail, containing the


information of client delivery, back office also checking claim
management.

Web Portal for Shipping System 54


Shipping management system

Back office contains the information of present and past


consignments detail.

5 Client modules:

In this module client can check the consignments detail and also
check the old bill detail .

In this module client can updating the profile in the bases of user id
and password to allot in the registration module.

In this module client can giving the suggestion to back office.


Client also check the past and current status.

6 Home Module:

Home module contains the company information, industry


information, company vision and company mission, company
growth.

Home module contains several link pages in our module. Also


contain information of main office and branch office.

Web Portal for Shipping System 55


Shipping management system

Home module contains the information of tool which tools are used
in the project and some calculators are used to calculate the total
cost.

Home module also contains the information of service mode.

Database Design
Database is designed in Microsoft SQL server 2005, which provides
facilities to manage the database, create tables and procedures in to
database.
Tables, created for this system into database are given below:-

Tables

Table Name:-Client Tab

Primary Key: - CID

Field Data Type Size Allow Null Description

CID int 4 A System Generated Client ID posted


To this column
FName nvarchar 25 Not Null First name of the client
LName nvarchar 25 Not Null Last name of the client
Address nvarchar 50 Not Null Address of the client
City nvarchar 25 Not Null City of the client
State nvarchar 25 Not Null State of the client
Zip nvarchar 6 Not Null Zip of the client
Email nvarchar 25 Not Null Email of the client
Pwd nvarchar 10 Not Null Password of the client
Add Stat Small int 2 Not Null Flag for block/unblock of the client

Web Portal for Shipping System 56


Shipping management system

Table Name:-Annou tab


Primary Key:-AOID

Field Data Type Size Allow Null Description

Annou nvarchar 200 Not Null New announcement generated by admin


Offer nvarchar 200 Not Null New Offer generated by admin
AOID nvarchar Auto Not Null Announcement Offer Id

Table Name:-CliAdd Tab

Composite Key:-CID, CAID

Field Data Type Size Allow Null Description

CID Int 4 Not Null This value must be present in


client tab
CAID Int 4 Not Null Client Address ID
Ad Name nvarchar 50 Not Null Client address name
Ad City nvarchar 25 Not Null Client address city
Ad Addressnvarchar 50 Not Null Client Address
Ad State nvarchar 25 Not Null Client Address State

Web Portal for Shipping System 57


Shipping management system

Ad Zip nvarchar 15 Not Null Client Address Zip


Ad email nvarchar 25 Not Null Client Address email
Ad Phone nvarchar 12 Not Null Client Address Phone
Table Name:-CliOrd Tab

Primary Key: - Order ID

Field Data Type Size Allow Null Description

OrderId int Not Null A system generated Order or consign-


-ment ID
SName nvarchar 50 Not Null Source name of order
SAddress nvarchar 50 Not Null Source Address of order
SCity nvarchar 25 Not Null Source City of order
S State nvarchar 25 Not Null Source State of order
SZip nvarchar 16 Not Null Source Zip of order
SPhone nvarchar 12 Not Null Source Phone of order
DName nvarchar 50 Not Null Destination name of dispatching order
DAddress nvarchar 50 Not Null Destination address of dispatching
order
DCity nvarchar 25 Not Null Destination city of dispatching order
DState nvarchar 25 Not Null Destination state of dispatching order
DZip nvarchar 16 Not Null Destination Zip of dispatching order
DPhone nvarchar 12 Not Null Destination phone of dispatching
order
ShipMode nvarchar 15 Not Null Which mode is used to dispatch the
Order:- By Train, By Road, By
Airplane
Volength int 4 Not Null Consignment length
VoBreath int 4 Not Null Consignment Breadth
VoHeight int 4 Not Null Consignment Height
VoWeight int 4 Not Null Consignment Weight
PayAmt. int 4 Not Null Pay amount
PayMode nvarchar 7 Not Null Which mode is used to payment :-
By Cash, By Check, By DD
Bank Name nvarchar 25 Not Null Bank Name
Branch Name nvarchar 25 Not Null Branch Name of the Bank
DD No. nvarchar 15 Not Null DD No.
DD Date nvarchar 10 Not Null DD Date
Pay Code nvarchar 15 Not Null In Case of Online Payment
Client ID(CID) Int 4 Not Null This value must be present in client tab

Web Portal for Shipping System 58


Shipping management system

Table Name:-CliBill Tab

Primary Key:- Billno

Field Data Type Size Allow Null Description

Bill No. int 4 Not Null A system generate a Bill No.


Order No. int 4 Not Null This value must be present in cliordtab
Bill Date nvarchar 10 Not Null Bill Date of the Order
CID int 4 Not Null This value must be present in client tab
Paid stat Small int 2 Not Null Check status Paid/Unpaid
Bill Mo. Small int 2 Not Null Month of the Bill
Bill Yr Small int 2 Not Null Year of the Bil

Table Name:-Precon Tab

Primary Key: - PCT ID

Field Data Type Size Allow Null Description

PCT ID int 4 Not Null System generate a present consignment ID


Con ID int 4 Not Null This value must be present in Cliord tab
Bill ID int 4 Not Null This value must be present in CliBill Tab
CID int 4 Not Null This value must be present in Client tab
Time int 4 Not Null Which time is updation perform
CP Sou nvarchar 25 Not Null Check Point Source
CP Dest nvarchar 25 Not Null Check Point Destination
Remark nvarchar 200 Not Null Incase of delay Query send to BackOffice

Table Name:-Pstcon Tab

Primary Key: - Con ID

Web Portal for Shipping System 59


Shipping management system

Field Data Type Size Allow Null Description

Con ID int 4 Not Null This value must be present in Cliord tab
Bill ID int 4 Not Null This value must be present in CliBill Tab
CID int 4 Not Null This value must be present in Client tab
Timeee int 4 Not Null Which time is updation perform
Source nvarchar 25 Not Null Check Point Source
Desti nvarchar 25 Not Null Check Point Destination
Remark nvarchar 200 Not Null Incase of delay Query send to BackOffice
Con Del nvarchar 10 Not Null Confirm delivery

Table Name:-Claim Tab

Primary Key: - Claim ID

Field Data Type Size Allow Null Description

Claim ID int 4 Not Null System must be generated a Claim ID


Con ID int 4 Not Null This value must be present in Cliord tab
Bill ID int 4 Not Null This value must be present in CliBill Tab
CID int 4 Not Null This value must be present in Client tab
Remark nvarchar 200 Not Null Which Consignments is claim generated

Table Name:-Sugg Tab

Primary Key:- Sugg ID

Web Portal for Shipping System 60


Shipping management system

Field Data Type Size Allow Null Description

Sugg ID int 4 Not Null A system generated claim ID

SType nvarchar 12 Not Null BackOffice generate Query For Suggestion

SSubject nvarchar 30 Not Null Which Subject is to Query Generated

CID int 4 Not Null This value must be present in Client tab

SBody nvarchar 200 Not Null Matter type to the suggestion Body Field

Table Name:-Admin Tab


Primary key:-UserID

Field Data Type Size Allow Null Description

User ID nvarchar 15 Not Null Which UserID is used for the login
User Pwd nvarchar 10 Not Null Which Password is used for the login
User Name nvarchar 25 Not Null Which Username is used for the login
User Type nvarchar 10 Not Null Which types of User:-BackOffice,Admin,
Tracker
User Stat Small int 2 Not Null User Status

Table Name:-TraQue Tab


Primarykey:-TQT ID

Field Data Type Size Allow Null Description

User ID Nvarchar 15 Not Null This value must be present in User Tab
TQT ID Int 4 Not Null A system generate a tracker Query tab ID
Q Subject Nvarchar 15 Not Null Tracker send Query to Back office

Web Portal for Shipping System 61


Shipping management system

Q Body Nvarchar 200 Not Null Query Subject is type into Query Body field
Q Solution Nvarchar 200 Not Null Back office send solution to tracker
Q Date Date Time 8 Not Null Query Date
S Date Date Time 8 Not Null Solution Date

Table Name:-Rate Tab


Primarykey:-RateID

Field Data Type Size Allow Null Description

Rate ID int 4 Not Null Rate ID is used for identification of


rows
System must be generate
Source nvarchar 25 Not Null Source of the consignment
Destination int 25 Not Null Destination of consignment
Dist. int 4 Not Null District of Consignment
Charge int 4 Not Null Charge is Apply to consignment
Fule Surcharge int 4 Not Null Fule surcharge is Added to
consignment
Service Tax int 4 Not Null Service tax is Added to consignment
Cess int 4 Not Null Cess is also include
Trans Mode nvarchar 10 Not Null Which mode is used to Consignment
Delivery:-By Road, By Train, By
Airplane
PS Charge int 4 Not Null Extra Premium Charge is Added to
Urgent Delivery
State nvarchar 25 Not Null State of the Client
Zip Nvarchar 6 Not Null Zip of the Client

Table Name:-Branch Tab


Primary key:-BranchId

Field Data Type Size Allow Null Description

Branch ID int 4 Not Null A System Generate Branch ID


Branch Name nvarchar 50 Not Null Branch Name Of the Company
Address nvarchar 100 Not Null Address of the company
State nvarchar 25 Not Null State of the company

Web Portal for Shipping System 62


Shipping management system

City nvarchar 25 Not Null City of the company


Pin nvarchar 6 Not Null Pin of the company
Cont Per nvarchar 25 Not Null Contact Person
Phone nvarchar 12 Not Null Phone of contact Person
email nvarchar 25 Not Null Email Address of company

Table Name:-Checkpt Tab

Primary Key:-Conid

Field Data Type Size Allow Null Description

Source City nvarchar 25 Not Null Source city of the checkpoint


Desti City nvarchar 25 Not Null Destination city of the checkpoint
Timee int 4 Not Null Which time is updation perform
Remark nvarchar 200 Not Null Remark of the checkpoint detail
CPID int 4 Not Null Checkpoint id
ConId int 4 Not Null Consignment id

DATA FLOW DIAGRAM (DFD’s)

Web Portal for Shipping System 63


Shipping management system

Web Portal for Shipping System 64


Shipping management system

Web Portal for Shipping System 65


Shipping management system

Web Portal for Shipping System 66


Shipping management system

Web Portal for Shipping System 67


Shipping management system

Web Portal for Shipping System 68


Shipping management system

Web Portal for Shipping System 69


Shipping management system

DATABASE DESIGN

Web Portal for Shipping System 70


Shipping management system

Scope of the project:

Shipping management system is designed for only small types of shipping


company. In future we are making our project is global.

We identify the working area of shipping company. We design the project for
shipping company for transferring of goods.

It means design the effective system for less money. if we designed the global
system for accessing all the world for future aspect.

Limitation of the project:

 Predefine the size of address book

 Predefine source and destination

Web Portal for Shipping System 71


Shipping management system

 Cost management

 Time management

INPUT/OUTPUT SPECIFICATION:

Web Portal for Shipping System 72


Shipping management system

Default.aspx

Web Portal for Shipping System 73


Shipping management system

Aboutus.aspx

Web Portal for Shipping System 74


Shipping management system

BranchContact.aspx

Web Portal for Shipping System 75


Shipping management system

Careers.aspx

Web Portal for Shipping System 76


Shipping management system

ConsGuideline.aspx

Web Portal for Shipping System 77


Shipping management system

Contact.aspx

Web Portal for Shipping System 78


Shipping management system

ConversionCalculator.aspx

Web Portal for Shipping System 79


Shipping management system

DestinationCalculator.aspx

Web Portal for Shipping System 80


Shipping management system

Faq.aspx

Web Portal for Shipping System 81


Shipping management system

Info.aspx

Web Portal for Shipping System 82


Shipping management system

Mission.aspx

Web Portal for Shipping System 83


Shipping management system

Profile.aspx

Web Portal for Shipping System 84


Shipping management system

ProhibitedItem.aspx

Web Portal for Shipping System 85


Shipping management system

RateCalculator.aspx

Web Portal for Shipping System 86


Shipping management system

Services.aspx

Web Portal for Shipping System 87


Shipping management system

TimeCalculator.aspx

Web Portal for Shipping System 88


Shipping management system

Tools.aspx

Web Portal for Shipping System 89


Shipping management system

TrackRecord.aspx

Web Portal for Shipping System 90


Shipping management system

AdminLogin.aspx

Web Portal for Shipping System 91


Shipping management system

BlockUser.aspx

Web Portal for Shipping System 92


Shipping management system

CreateUser.aspx

Web Portal for Shipping System 93


Shipping management system

` DeleteUser.aspx

Web Portal for Shipping System 94


Shipping management system

Logout.aspx

Web Portal for Shipping System 95


Shipping management system

Welcome.aspx

Web Portal for Shipping System 96


Shipping management system

Addaddress.aspx

Web Portal for Shipping System 97


Shipping management system

Changepassword.aspx

Web Portal for Shipping System 98


Shipping management system

Checkcurrentstatus.aspx

Web Portal for Shipping System 99


Shipping management system

Checkpaststatus.aspx

Web Portal for Shipping System 100


Shipping management system

Claimrequest.aspx

Web Portal for Shipping System 101


Shipping management system

Clogin.aspx

Web Portal for Shipping System 102


Shipping management system

Confirmorder.aspx

Web Portal for Shipping System 103


Shipping management system

Deleteaddress.aspx

Web Portal for Shipping System 104


Shipping management system

FinalOrder.aspx

Web Portal for Shipping System 105


Shipping management system

Generateorder.aspx

Web Portal for Shipping System 106


Shipping management system

Logout.aspx

Web Portal for Shipping System 107


Shipping management system

Paidbill.aspx

Web Portal for Shipping System 108


Shipping management system

Suggestion.aspx

Web Portal for Shipping System 109


Shipping management system

Unpaidbills.aspx

Web Portal for Shipping System 110


Shipping management system

Updateprofile.aspx

Web Portal for Shipping System 111


Shipping management system

Welcome.aspx

Web Portal for Shipping System 112


Shipping management system

DEPLOYMENT

Testing

Software testing is a critical element of software quality assurance and


represent the ultimate review of specification design, coding, purpose of
product testing is to verify and validate various work products viz unit
integrated unit, final product to ensure that they meet their requirements.

TESTING OBJECTIVES

Basically testing is done for the following purposes.


• Testing is a process of executing program with the intent of finding
an error.
• A good test case is one that has a high probability of finding an as
yet undiscovered error.
• A successful test case is one that uncovers an as yet undiscovered
error.
Our objective is to design test cases that systematically uncover different
classes of error and do so with a minimum amount of time and effort.
This process has two parts:
• Planning
This involves writing and reviewing unit integration, functional,
validation and acceptance test plans.
• Execution
This involves executing these test plans, measuring. Collecting data and
very fine if it meets the quality criteria. Data collected is used to make
appropriate changes in the plans related to development and testing.

Web Portal for Shipping System 113


Shipping management system

The quality of a product or item can be achieved by ensuring that the


product meets the requirements by planning and conducting the following
tests at various stages.

TESTING OF CURRENT PROJECT

Software testing is arguably the least understood part of the development


process. Through a four-phase approach, the author shows why
eliminating bugs is tricky and why testing is a constant trade-off.
Virtually all developers know the frustration of having software bugs
reported by users. When this happens, developers inevitably ask: How
did those bugs escape testing? Countless hours doubtless went into the
careful testing of hundreds or thousands of variables and code statements,
so how could a bug have eluded such vigilance?
Four phases:
• Modeling the software’s environment
• Selecting test scenarios
• Running and evaluating test scenarios
• Measuring testing progress
These phases offer testers a structure in which to group related problems
that they must solve before owing on to the next phase.

EMBED Word.Picture.8

Web Portal for Shipping System 114


Shipping management system

Performance&Scalability:

The scalability in the testing lab features powerful workstations and top-
of-the-line networking equipment and is capable of testing the
performance and scalability of an end-to-end solution, not just individual
components. The lab is capable of generating a realistic load of thousands
of virtual users consisting of a mix of user profiles while simultaneously
exercising different portions of a dynamic Web application, based on
real-world Web usage patterns.

Testing tools can capture a variety of critical statistics, such as per-page


user response times, web interactions per second, transaction error rates
and network traffic. The testing lab also reports on empirical performance
metrics of e-commerce products subjected to massive user load, versus
projecting results based on smaller load tests. This approach ensures that
the data reported provides an accurate depiction of the actual performance
of the tested products. Through arrangements with many of the leading
web testing tool vendors, Testing lab is capable of generating complex
scripts to be used in testing.

A typical scalability testing involves the following steps:

• Consult with the client to determine the activities that will be


exercised during testing;

• Code the test tool script to stress the website;

• Coordinate the enabling of appropriate server log files during the


test;

• Consult with the client regarding a response time threshold value;

Web Portal for Shipping System 115


Shipping management system

• Determine how many concurrent virtual users cause the response


time to exceed the threshold value; and

• Calculate average response times under various load conditions.

CompatibilityTesting
Testing lab examines a website’s compatibility with multiple operating
system/browser combinations. Testing lab works closely with clients to
develop a compatibility-testing matrix that will include the relevant
combinations to be tested. Available configurations typically include
Intel-based systems with Windows operating systems and associated
browsers as well as Macintosh systems and associated browsers. Testing
lab will test the major features of the website during the compatibility
testing, using various approaches.
Testing lab works with clients to develop a test matrix that reflects the
hardware and software combinations to be tested and uses a variety of
different editions and service packs of operating environments in the
testing. Our Testing lab has identified more than 70 possible
combinations of configurations. During testing, Testing labs evaluates the
ability of the website to work in a satisfactory manner using both high-
and low-speed connections. All major functions of the website will be
exercised by each configuration.

FunctionalityTesting

functionality in testing labs includes examination of website pages,


menus, options, and links to determine if the site functions as intended.
Testing labs logs on to a client site and, acting as multiple types of users,
performs many functions associated with that site. Testing labs should
accomplishes functionality testing by utilizing labs-developed test scripts,
client-developed test scripts, or some combination of both. These testing

Web Portal for Shipping System 116


Shipping management system

labs works with clients to determine the appropriate operating system and
browser combinations to be tested. Typically, Testing labs exercises all
site functions including links, search operations and responsiveness.

UsabilityTesting

To conduct usability testing, Testing labs assembles a focus group of


testers with a broad range of experience in personal computer and
Internet usage. Working with its client, all testing lab’s highly skilled
Usability Testing Team will develop a questionnaire that addresses the
various aspects of the client’s website. The questionnaire, along with the
focus group debriefing, is designed to elicit the responses and opinions of
the members of the focus group regarding the usability of the website. A
final report will include testing labs’s expert opinion as well as the
individual responses and group consensus regarding the comparative
usability of the website.

Web Portal for Shipping System 117


Shipping management system

HOSTING AND DEPLOYMENT

WebHosting:

Domain Booking:

Domain is the indicator of the business strength and hence domain name
selected care fully so that it fulfills the business need of the client.

Hosting Process:-

» Book your domain online.

» Purchase the space on a web server.

» Now configure your domain for the Name Server.

» Now open Control Panel


Add Domain
MYcompany.com
Create database
» Open on your computer SQL Server.

» Upload database tables & stored procedures in the database.

» Using ftp client upload all the web forms, images & streaming media
files.
» Test the domain

» Hosting process completed.

Web Portal for Shipping System 118


Shipping management system

Web Project Security

Current state
• Web applications represent highly vulnerable attack avenues
• Most discussions on web application security, center on attacking it
and secure coding to protect it
• Methods for detecting such attacks are coming into their own
• Existing detection methods are being tested before customers
accept these solutions as standard

Detection Techniques

Detection Techniques

Static Techniques Dynamic Techniques

Anomaly-based Signature-based

• Using static techniques

Web Portal for Shipping System 119


Shipping management system

– Happens post-occurrence of event


– Parse log files using standard tools/techniques
– Aim is forensics investigation
• Using dynamic techniques
– Detect the attack as it happens
– Trigger alarms when attack is happening
– Aim is detect/prevent in real-time

Static detection techniques


• Data sources to look at:
o Web Server Logs
o Application Server Logs
o Web Application’s custom audit trail
o Operating system logs
• What’s missing:
o POST data (only GET data available)
o HTTP Headers only partially represented
Dynamic Detection Techniques
• The web application intrusion detection space is divided into
two possibilities:
– Signature-based
– Anomaly-based
• Each has its own implementation and effectiveness issues

Securing Data Base


There are many ways to attack a database. External attacks may exploit
configuration weaknesses that expose the database server. An insecure
Web application may also be used to exploit the database. For example,
an application that is granted too much privilege in the database or one
that does not validate its input can put your database at risk.
Internal threats should not be overlooked. Have you considered the rogue
administrator with network access? What about the database user tricked
into running malicious code? For that matter, could any malicious code
on the network compromise your database?
Threats and Countermeasures
An attacker can target and compromise a database server in a number of
ways by exploiting a variety of configuration and application level
vulnerabilities.
The main threats to a database server are:

Web Portal for Shipping System 120


Shipping management system

1. SQL Injection
With a SQL injection attack, the attacker exploits vulnerabilities in your
application's input validation and data access code to run arbitrary
commands in the database using the security context of the Web
application.
Vulnerabilities
Vulnerabilities exploited by SQL injection include:
• Poor input validation in your Web applications
• Unsafe, dynamically constructed SQL commands
• Over-privileged application logins to the database
• Weak permissions that fail to restrict the application's login to the
database
Countermeasures
To counter SQL injection attacks:
• Our application should constrain and sanitize input data before
using it in SQL queries.
• Use type safe SQL parameters for data access. These can be used
with stored procedures or dynamically constructed SQL command
strings. Using SQL parameters ensures that input data is subject to
type and length checks and also that injected code is treated as literal
data, not as executable statements in the database.
• Use a SQL Server login that has restricted permissions in the
database. Ideally, you should grant execute permissions only to
selected stored procedures in the database and provide no direct table
access.
2. Network Eavesdropping
The deployment architecture of most applications includes a physical
separation of the data access code from the database server. As a result,
sensitive data, such as application-specific data or database login
credentials, must be protected from network eavesdroppers.
Vulnerabilities
Vulnerabilities that increase the likelihood of network eavesdropping
include:
• Insecure communication channels
• Passing credentials in clear text to the database; for example:
• Using SQL authentication instead of Windows
authentication
• Using SQL authentication without a server certificate
Countermeasures
To counter network eavesdropping:
• Use Windows authentication to connect to the database server to
avoid sending credentials over the network.

Web Portal for Shipping System 121


Shipping management system

• Install a server certificate on the database server. This results in the


automatic encryption of SQL credentials over the network.
• Use an SSL connection between the Web server and database
server to protect sensitive application data. This requires a database
server certificate.
• Use an IPSec encrypted channel between Web and database server.
3. Unauthorized Server Access
Direct access to your database server should be restricted to specific
client computers to prevent unauthorized server access.
Vulnerabilities
Vulnerabilities that make your database server susceptible to
unauthorized server access include:
• Failure to block the SQL Server port at the perimeter firewall
• Lack of IPSec or TCP/IP filtering policies
Attacks
Direct connection attacks exist for both authenticated users and those
without a user name and password; for example:
• Tools such as Query Analyzer (Isqlw.exe) or the command line
equivalent (Osql.exe) are used to establish a direct connection to SQL
Server and issue commands.
• Server information, such as software version, is revealed to an
attacker who sends carefully constructed packets to listening ports.
Countermeasures
To counter these attacks:
• Make sure that SQL Server ports are not visible from outside of the
perimeter network.
• Within the perimeter, restrict direct access by unauthorized hosts,
for example, by using IPSec or TCP/IP filters.
4. Password Cracking
A common first line of attack is to try to crack the passwords of well
known account names, such as sa (the SQL Server administrator
account).
Vulnerabilities
Common vulnerabilities that lead to password cracking are:
• Weak or blank passwords
• Passwords that contain everyday words
Attacks
Common password cracking attacks include:
• Dictionary attacks
• Manual password guessing
Countermeasures
To counter these attacks:

Web Portal for Shipping System 122


Shipping management system

• Create passwords for SQL Server login accounts that meet


complexity requirements.
• Avoid passwords that contain common words found in the
dictionary.

Securing Web Server


A secure Web server provides a protected foundation for hosting your
Web applications, and Web server configuration plays a critical role in
your Web application's security. Badly configured virtual directories, a
common mistake, can lead to unauthorized access. A forgotten share can
provide a convenient back door, while an overlooked port can be an
attacker's front door. Neglected user accounts can permit an attacker to
slip by your defenses unnoticed.
What makes a Web server secure? Part of the challenge of securing your
Web server is recognizing your goal. As soon as you know what a secure
Web server is, you can learn how to apply the configuration settings to
create one. This chapter provides a systematic, repeatable approach that
you can use to successfully configure a secure Web server.
Threats and Countermeasures
The fact that an attacker can strike remotely makes a Web server an
appealing target. Understanding threats to your Web server and being
able to identify appropriate countermeasures permits you to anticipate
many attacks and thwart the ever-growing numbers of attackers.
The main threats to a Web server are:

Web Portal for Shipping System 123


Shipping management system

Profiling
Profiling, or host enumeration, is an exploratory process used to gather
information about your Web site. An attacker uses this information to
attack known weak points.
Vulnerabilities
• Common vulnerabilities that make your server susceptible to
profiling include:
• Unnecessary protocols
• Open ports
• Web servers providing configuration information in banners
Attacks
Common attacks used for profiling include:
• Port scans
• Ping sweeps
• NetBIOS and server message block (SMB) enumeration
Countermeasures
Countermeasures include blocking all unnecessary ports, blocking
Internet Control Message Protocol (ICMP) traffic, and disabling
unnecessary protocols such as NetBIOS and SMB.
Denial of Service
Denial of service attacks occur when your server is overwhelmed by
service requests. The threat is that your Web server will be too
overwhelmed to respond to legitimate client requests.
Vulnerabilities
Vulnerabilities that increase the opportunities for denial of service
include:
• Weak TCP/IP stack configuration
• Unpatched servers
Attacks
Common denial of service attacks include:
• Network-level SYN floods
• Buffer overflows
• Flooding the Web server with requests from distributed locations
Countermeasures
Countermeasures include hardening the TCP/IP stack and consistently
applying the latest software patches and updates to system software.
Unauthorized Access
Unauthorized access occurs when a user without correct permissions
gains access to restricted information or performs a restricted operation.
Vulnerabilities
Common vulnerabilities that lead to unauthorized access include:
• Weak IIS Web access controls including Web permissions
• Weak NTFS permissions

Web Portal for Shipping System 124


Shipping management system

Countermeasures
Countermeasures include using secure Web permissions, NTFS
permissions, and .NET Framework access control mechanisms including
URL authorization.
Arbitrary Code Execution
Code execution attacks occur when an attacker runs malicious code on
your server either to compromise server resources or to mount additional
attacks against downstream systems.
Vulnerabilities
Vulnerabilities that can lead to malicious code execution include:
• Weak IIS configuration
• Unpatched servers
Attacks
Common code execution attacks include:
• Path traversal
• Buffer overflow leading to code injection
Countermeasures
Countermeasures include configuring IIS to reject URLs with "../" to
prevent path traversal, locking down system commands and utilities with
restrictive access control lists (ACLs), and installing new patches and
updates.
Elevation of Privileges
Elevation of privilege attacks occur when an attacker runs code by using
a privileged process account.
Vulnerabilities
Common vulnerabilities that make your Web server susceptible to
elevation of privilege attacks include:
• Over-privileged process accounts
• Over-privileged service accounts
Countermeasures
Countermeasures include running processes using least privileged
accounts and using least privileged service and user accounts.
Viruses, Worms, and Trojan Horses
Malicious code comes in several varieties, including:
• Viruses. Programs that are designed to perform malicious acts and
cause disruption to an operating system or applications.
• Worms. Programs that are self-replicating and self-sustaining.
• Trojan horses. Programs that appear to be useful but that actually
do damage.
In many cases, malicious code is unnoticed until it consumes system
resources and slows down or halts the execution of other programs. For
example, the Code Red worm was one of the most notorious to afflict IIS,
and it relied upon a buffer overflow vulnerability in an ISAPI filter.

Web Portal for Shipping System 125


Shipping management system

Vulnerabilities
Common vulnerabilities that make you susceptible to viruses, worms, and
Trojan horses include:
• Unpatched servers
• Running unnecessary services
• Unnecessary ISAPI filters and extensions
Countermeasures
Countermeasures include the prompt application of the latest software
patches, disabling unused functionality such as unused ISAPI filters and
extensions, and running processes with least privileged accounts to
reduce the scope of damage in the event of a compromise.
Note The .NET Framework 2.0 mitigates .NET remoting TCP channel
vulnerability through its support for authentication, authorization, and
encryption when using the TCP channel.
Attacks
The attacker places packet-sniffing tools on the network to capture traffic.
Countermeasures
Countermeasures to prevent packet sniffing include the following:
• Use secure authentication, such as Windows authentication, that
does not send passwords over the network.
• Encrypt SQL Server authentication credentials. If you use SQL
Server authentication, you can encrypt credentials automatically by
installing a server certificate on the database server.
• Secure communication channels. Options include using Secure
Sockets Layer (SSL) or Internet Protocol Security (IPSec).
• Use remote procedure call (RPC) encryption with Enterprise
Services applications.
• Use a segmented network, which can isolate eavesdropping to
compromised segments.
• Use the HttpChannel and SSL with .NET Remoting.
Unauthorized Access
If you fail to block the ports used by applications that run on the
application server at the perimeter firewall, an external attacker can
communicate directly with the application server. If you allow computers
other than the front-end Web servers to connect to the application server,
the attack profile for the application server increases.
Vulnerabilities
Vulnerabilities that can result in unauthorized access include:
• Weak perimeter network and firewall configurations
• Superfluous ports open on the internal firewall
• Lack of IPSec policies to restrict host connectivity
• Unnecessary active services
• Unnecessary protocols

Web Portal for Shipping System 126


Shipping management system

• Weak account and password policies


Attacks
Common attacks to gain unauthorized access include:
• Port scanning that detects listening services
• Banner grabbing that gives away available services and possibly
software versions
• Malicious application input
• Password attacks against default accounts with weak passwords
Countermeasures
Countermeasures to prevent unauthorized access include:
• Firewall policies that block all traffic except expected
communication ports
• TCP/IP filtering or IPSec policies to prevent unauthorized hosts
from establishing connections
• Disabling unused services
• Static DCOM endpoint mapping that allows access only to
authorized hosts
Viruses, Worms, and Trojan Horses
These attacks are often not noticed until they begin to consume system
resources, which slows down or halts the execution of other applications.
Application servers that host IIS are susceptible to IIS attacks.
Vulnerabilities
• Unpatched servers
• Running unnecessary services
• Unnecessary ISAPI filters and ISAPI extensions
Countermeasures
Countermeasures that help mitigate the risk posed by viruses, Trojan
horses, and worms include:
• Promptly applying the latest software patches
• Disabling unused functionality, such as unused ISAPI filters and
extensions
• Running processes with least privileged accounts to reduce the
scope of damage in the event of a compromise

Web Portal for Shipping System 127


Shipping management system

Software maintenance

Software maintenance is the modification of a software product after


delivery to correct faults, to improve performance or other attributes, or
to adapt the product to a modified environment.
The Software Maintenance Context
Software Maintenance
Existing software product Modified software product

Maintenance need
Software engineering Installation, operation,
• Enhancement
process maintenance
• Correction

Software Maintenance Covers


Basic concepts Maintenance Process Key issues in software Techniques
maintenance for maintenance
• Definitions and • Process models • Technical • Program
terminology • Management comprehensi
• Majority of • Maintenance • Cost and on
maintenance activities estimation • Re-
costs engineering
• The nature of • Software • Reverse
maintenance maintenance engineering
• Evolution of measurement
software • Impact
• Need for analysis
maintenance

• Categories of
maintenance

Web Portal for Shipping System 128


Shipping management system

About Organization

SiS Technologies

The company is incorporated in 2005. Since our founding in 2005,


hundreds of our customers have realized success because they chose to do
business with a specialist. Our approach is simple - build extensive
expertise in hosting & stay focused on our customer. While other hosting
providers are struggling to survive, we have maintained our profitability
since may 2006 and the fastest-growing managed hosting specialist in the
world be a different kind of company to-do business with -focusing on
the customer, not just technology. The SiS Technologies is one of the
largest managed hosting company based at India, with more than 700
customers in different countries serving over thousands Domains today,
we offer a wide rang of service level management, all based on unique
needs of each individual customer. In May 2007, The SiS Technologies
acclaimed partnership with network solution Inc. adding its fleet to
offering Domain Registration Services via onlineNIC Inc., China having
achieved the platinum partnership with 7 working days, we are proud to
be registering 100+ domains every month. Because solely on managed
services, we have been able to develop not only deep technical expertise

Web Portal for Shipping System 129


Shipping management system

in all aspect of monitoring & maintaining a server, but also a number of


the tools to troubleshoot any problems, our customers may come across.
We also believed in optimizing every possible operation including
Internal Back office operations, Sales operations, Tech support, Billing
operation & Domain Registration. Our in-house developed control panel,
Billing, Renewal Manager & Customer Support Ticket system make our
customer servicing more easily. We now guarantee 6 hours domain setup.
The Management : The SiS Technologies management team is leading
the company to a leadership position in the internet services arena of
Internet presence. The team has extensive, proven frontline experience in
developing; refining and implementing advanced internet technology
solution to meet the needs of a diverse business world wide. Each
member of the team brings to the SiS Technologies a wealth of successful
experience in key operating and information technology.
Mr. Manish Kumar Dwivedi, Founder, He works as a software
consultant & trainer and controls overall technical matters. He has 12
years experience as software developer, Consulting Clients and providing
high end software training.
Mr. Abhisek Jain, after acquiring MCA from Bundelkhand
University, Jhansi, has been associated with Internet technologies since
2007. He has been involved in multiple functional roles like technology
presales and project management.
Abhisek setup the technology and the traffic management team at SiS
Technologies. He is expert in developing Multilevel Marketing Web
Applications.
Mr. Vishal Govind Dubey, MCA from Rajiv Gandhi Technical
University Bhopal in 2003, He join SiS Technologies in 2006 as project
leader for developing a web-based platform to conduct global,
customized and complex quantitative market research online. It is a suite

Web Portal for Shipping System 130


Shipping management system

of applications comprising of a desktop application generating


questionnaires, which are hosted in a web application framework. It
integrates primary and secondary research results for effective
segmentation, targeting and generates customizable reports.
Now Vishal working on various marketing research products using
ASP.NET and managing projects success fully.

Why Us ?
A powerful site - but designed without the end user in mind ?
Our services are solutions. whether you are an emerging small to mad
size company , or an association looking to transform the way you
conduct activites, Computer management.com can tailor its services to
built a long term internet solution .our goal is to combine superior design
with leading–edge technology and user -driven functionality .
It all starts with consultation. We shall ask a few question
like "what services will help your organization achieve its mission?
"What can we do to help your business become successful in online
commerce?" you will here from our experts, but these decisions are
ultimately yours as it is your name ,after all, on the web site. our
development team will then plan & implement your unique internet
strategy , whether it is simple web site , a site allowing eCommerce
applications setting up a virtual community , handling your online
marketing needs or developing an extensive database-driven system.

Our Expertise

A successful site design: We have a wealth of experience in designing,


developing & maintaining a web sites for our clients ,& in revamping
sites to achieve clients goales more successfully . we work closely with

Web Portal for Shipping System 131


Shipping management system

clients to make there sites meet there purpose &to set achievable the
technical ,practical ,marketing & strategic decision for a site to be
successful.
Skills & experience We have state -of-the-art skills & technologies &
are not influenced by whims or by tradition, only by proof. SiS
Technologies has the latest online tools to built your solution faster as
well as perform reliably & efficiently.
Many of our developers have over a decade of development experience &
have worked with SiS Technologies for years .We beleave in small teams
of professionals as the most effictive way to rapidly develop high quality
solutions. Your project manager will ensure smooth flow of small
communications; everyone's focus & the goal & also overcome blocks &
slow-downs

Areas and Expertise, Experience


SiS Technologies has a team of talented designers & programmers
trained in the latest technologies for internet design. We have the
wherewithal to take on any project, small or large . many companies
built websites, but few can implement the vast realm of technology that
we use daily. graphics ,Banner Design ,Logo Design, Animation,
Original Art, Photos, Streaming Videos ,Flash, Java, HTML, DHTML,
VBScript, ASP,CGI, PHP, C++, COM.
We use the latest in database interfacing to put your information on the
web. ASP access, Oracle, MySQL, SQLServer, TSQL, COM, COM+,
MTS, We know how to make them work for you.

Web Portal for Shipping System 132


Shipping management system

References

Websites

URL’s .NET Resource Description


www.xmlws101.com XML web services for ASP.NET

www.123aspx.com Directory of .NET articles

www.vbws.com Building XML web services with VB. Net

www.soapwebservices.com SOAP Web Services

www.w3.org HTML & XML Specification


www.xmlwebservices.com XML Web Services
http://msdn.microsoft.com/
www.gotdotnet.com All about asp.net

www.mindtools.com For SAD tools

www.Amway.com
www.Mlmwatch.org
www.goodways.biz
www.rmpinfotech.com

Books

Name of Book Publication


Visual Basic.Net Programming Black Book Wiley Dreamtech
Mastering ASP.NET BPB
Complete Rereference ASP.NET TMH
.NET E-Commerce programming Sybex
Visual Studio.NET programming Wiley
Developing web applications with Vb.NET and
Wiley
ASP.NET
ICFAI Case Studies

Web Portal for Shipping System 133


Shipping management system

Web Portal for Shipping System 134

Das könnte Ihnen auch gefallen