What should I check before releasing a web application?

Question

I almost finished the web application. I need to test it and find security issues before its release. Are there any methods / recommendations for this kind of testing? Or are there any tools to help me verify that my application is ready for online connection? Thank.

Answer 1

I would say:

• make sure there are no warnings or errors even in strict mode (error report).
• If you store sensitive data (such as passwords, credit cards, etc.), make sure that they are encrypted with non-standard algorithms. Use SSL and try somehow paranoid with it.
• root.
• ( unit test, ). .
• (Firefox, Chrome, Opera, Safari, IE), .
• HTML/CSS (W3C). ()
• , . ( ).
• -/ script .
• , .
• :)

, :

• //- .
• (, , ..).
• ( , , ).
• ? .
• ( )? , (?), , .

, . , .

Answer 2

, , , - , .

, , 100%. .

, , .: http://projects.webappsec.org/Web-Application-Security-Scanner-List

: http://en.wikipedia.org/wiki/Web_Application_Security_Scanner

.

Answer 3

Here you can find a practical checklist for use before launching the http://launchlist.net/ website.

And here is a list of all the things you forgot to check out
http://www.thebraidytester.com/downloads/YouAreNotDoneYet.pdf