长江黄金邮轮网站的安全设计  

Security Design of Yangtze Gold Cruises Website

作　　者：尚晋[1] 

机构地区：[1]重庆航天职业技术学院,重庆江北区400021

出　　处：《重庆航天职业技术学院学报》2011年第4期53-57,共5页Journal of Chongqing Aerospace Polytechnic

摘　　要：长江黄金系列邮轮陆续下水，越来越多的国内外游客将体验长江黄金系列邮轮带来的旅游价值。其邮轮网站将在企业宣传扣票务营销方面发挥更加突出的作用，网站安全设计至关重要。通过对当前网站安全隐患的分析，描述了解决网页内容免受黑客木马攻击的替换算法，并给出对应程序段；改进了口令认证方式，并指出MD5加密能够提高数据库的安全性；提出了程序验证方式，能够有效防御SQL注入式攻击在用户身份认证时发生。该网站的安全设计可为类似网站建设提供参考意见。The Yangtse River cruiser of gold series is launched. More and more travelers will share the Three Gorge sciences by Yangtse gold cruiser. The web of cruise is so important because it plays a prominent role in enterprise news releasing and ticket selling. Security of web design is very important. Based on the analysis of the current web security defects, it describes the substitute algorithm from hackers, Trojan attacks, and gives the corresponding block; improved password authentication, and point MD5 encryption that can improve the security of the database; when the user authentication, a way proposed to protect against SQL injection attacks. The web＇s security design can provide a reference for building similar webs.

关 键 词：邮轮 网站安全 SQL注入式攻击 替换算法 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]