SIGURNOST CMS-A

Content Management Systems (CMS) are often used for website development. Websites are targets of various malicious attackers, and therefore it is necessary to be familiar with the security level of websites.The paper describes some basic features of the well-known open source CMS platforms: WordPress, Joomla and Drupal. It also explains the ten most common web vulnerabilities. Web vulnerability testing has been carried out by means of various software tools. The basic installations of the CMS systems have been tested. After having tested each web vulnerability, a possible additional web security measurement for each CMS is indicated. The web vulnerabilities which cannot be directly affected by the CMS security settings have been explained. It has been shown that the basic installations of the CMSs fail to ensure safety requirements due to irresistance to some threats. Necessary software tools for the tested CMSs have been specified in order to ensure the resistance to threats which have not been provided in the basic installation of the tested CMSs. A questionnaire has been developed for the purpose of examining the security level on the websites of business entities in Croatia, and a survey has been conducted in Croatian business entities engaged in computer science, accounting and industry.Za razvoj web-sjedišta danas se često koriste CMS-ovi. Web-sjedišta meta su raznim malicioznim napadačima, stoga je potrebno poznavati razinu sigurnosti web-sjedišta i postaviti maksimalnu moguću razinu sigurnosti. U radu su prikazane osnovne značajke poznatijih CMS-ova u otvorenom pristupu Wordpress, Joomla i Drupal. Objašnjeno je deset najčešćih web-ranjivosti. Izvršeno je testiranje web-ranjivosti pomoću različitih programskih alata. Testirane su osnovne instalacije CMS-ova. Nakon testiranja svake web-ranjivosti za svaki CMS navedena je moguća dodatna mjera sigurnosti. Objašnjene su web-ranjivosti na koje sigurnosne postavke CMS-ova ne mogu direktno utjecati. Pokazano je da osnovne instalacije CMS-ova ne zadovoljavaju sigurnosne zahtjeve jer nisu otporne na neke prijetnje. Specificirani su potrebni programski dodaci na testirane CMS-ove kako bi se osigurala otpornost na prijetnje koje osnovne instalacije testiranih CMS-ova nisu osigurale. Za potrebe provjere stanja sigurnosti na web-sjedištima poslovnih subjekata u Hrvatskoj izrađen je anketni upitnik i provedena je anketa nad poslovnim subjektima u Hrvatskoj za djelatnosti informatika, računovodstvo, industrija

USPOREDBA FRONT END FRAMEWORKA ZA IZRADU WEB-APLIKACIJA

Modern web applications, due to the functionalities they provide in their user interfaces, have a complex program structure. Manually writing a program code, due to the complexity of the entire application, can result in uneven quality and content of individual application parts. Maintaining such developed applications is more difficult. Because of this, web applications are often developed by using different frameworks. A framework allows structuring, simpler and more uniform program script writing, and thus easier web application maintenance. There are various frameworks that can be used in the development of web applications, for different parts of the application. Those analyzed in this paper are used in the development of front end parts of web applications. According to their design, a web application can be developed as the Multi Page (MPA) or the Single Page (SPA). This paper explains the difference between MPA and SPA web applications. The advantages and disadvantages of MPA are demonstrated in relation to SPA web applications. Required characteristics that the framework should have in order to be optimized for creating MPA and SPA web applications are set. The hypothesis has been tested: There is a framework that is optimized for the development of both MPA and SPA applications. Possibilities, architecture and development techniques of a web application using front end frameworks, as well as the suitability of such frameworks for the development of MPA and SPA web applications have been analysed. Choosing a framework for the hypothesis testing has been performed based on the popularity of available frameworks. The required characteristics have been analyzed on the three most popular frameworks: Angular, Vue.js and React-js. It has been shown that the Vue.js framework is the most optimized framework for the development of both MPA and SPA applications.Moderne web-aplikacije, zbog funkcionalnosti koje omogućuju u korisničkom sučelju, imaju složenu programsku strukturu. Ručno pisanje programskog koda zbog složenosti cijele aplikacije može rezultirati neujednačenom kvalitetom i sadržajem pojedinih aplikacijskih djelova. Održavanje tako razvijanih aplikacija otežano je. Zbog toga se web-aplikacije često razvijaju korištenjem različitih frameworka. Framework omogućuje strukturiranje, jednostavnije i ujednačenije pisanje programskog koda, te time olakšava održavanje web-aplikacije. Postoji puno frameworka koji se mogu koristiti u razvoju web-aplikacija, i to za različite dijelove aplikacije, a oni analizirani u ovom radu koriste se u razvoju front end dijela web-aplikacije. Prema načinu izvođenja webaplikacije mogu biti Multi Page (MPA) ili Single Page (SPA). U radu je objašnjena različitost između MPA i SPA web-aplikacija. Pokazane su prednosti i nedostatci MPA u odnosu na SPA web-aplikacije. Postavljene su zahtijevane karakteristike frameworka koji je optimiziran za izradu MPA i SPA web-aplikacija. Testirana je hipoteza: Postoji framework koji je prilagođen za izradu i MPA i SPA aplikacija. Analizirane su mogućnosti, arhitektura i načini razvoja web-aplikacija pomoću front end frameworka te prilagođenost takvih frameworka za razvoj MPA i SPA web-aplikacija. Izvršen je odabir frameworka za testiranje hipoteze prema popularnosti na tržištu. Zahtijevane karakteristike analizirane su na 3 najpopularnija frameworka: Angular, Vue.js i React-js. Pokazano je da je Vue.js framework najoptimiziraniji framework za izradu i MPA i SPA aplikacija

Mental flexibility impairment in drivers with early Alzheimer’s disease: A simulator-based study

After memory impairment, one of the most common troubles of early Alzheimer’s disease (AD) is the impairment of executive functioning. However, it can have major consequences on daily life, notably on the driving activity. The present study focused on one important executive function involved in driving: mental flexibility; and considered how this impairment can affect driving. Ten patients with early AD were matched with 29 healthy older drivers. All participants were given an evaluation of mental flexibility through neuropsychological tests and an experimental test developed on a static driving simulator. The experiment was divided in two conditions; one without mental flexibility and another condition with a mental flexibility demand. AD patients showed impairments in the neuropsychological tests evaluating mental flexibility. These deficits are linked to the deficits they showed in the driving simulator flexibility tests. This study contributes to the understanding of mental flexibility mechanisms and on their role in driving activity. It also confirms that the driving simulator is a suitable tool to explore cognitive disorders and driving ability