SQL injection is a code injection technique, used to attack data driven applications like stSoftware.

stSoftware systems support a number of web accessible protocols including:-

• ReST
• SOAP
• Web Forms
• GWT RPC 

All protocols access the underlying data through the DAL ( data access layer). There is NO direct access to the underlying data store no matter which protocol is used. Each protocol accepts the request to read or write data and then perform the protocols validations and then passes the request on to the DAL to execute the request which in turn validates the request, checks the user's access and perform any validations before returning the result.

SQL & XSS attacks are automatically tested for each of the supported protocols. Listed below are the standard SQL injection strings attempted.

Events and Resources are managed through multiple Modules.

They are briefly outlined here;

Events

• Details, site, time and date, duration

• Invite attendees – select attendees then click send invitation button to send template email to all attendees & record status and attendance

Scheduler

• scheduling events - resources according to availability, skill set, location

Admin

• manage staff resources – availability rules, specialisations and rates

Timeline

• Easy graphical interface for tasks, events, jobs (projects

Click on the Export button and then choose the file format of your choice: CSV, PDF or Spreadsheet (EXCEL)

Marking the records by clicking on the left hand checkbox, will export only the selected records.

A new template "Munter" has been added to our Content Management System (CMS). Munter is a very handsome Bootstrap 3 theme. Comes with beautiful features like a fixed arrows navigation, a nice portfolio showcase and a smooth scroll.

• Sections:-
  • Home
  • About
  • Articles
  • Mission
  • People
  • Contact
• All site details can be updated via the site wizard

Home page - mobile

We recommend at least quarterly maintenance release are installed to your test environment, tested then promoted to your production system as part of the normal software maintenance cycle.

Regular and timely updates reduce the risks of running a live system that is out of sync with stSoftware's current version and enables your users to benefit from our R&D program, which is our investment and commitment to continually improve our systems for our customers (in recent years we have typically invested over

Overview

Single sign using Microsoft LAN Manager (NTLM) allows users within a intranet enviroment to use the system without the need to re-enter their password once they have logged into the Windows network.

Note the NTLM protocol can only be used within a internet environment.  

A new template "grayscale" has been added to our Content Management System (CMS). This template is a fully functional, premium quality Bootstrap theme. It includes the following features:

• Easing scroll function for smooth navigation
• Fully Functional, home + 3 pages Website
  • Home
  • About
  • Mission
  • Contact
• Google Map of your office location
• All site details can be updated via the site wizard

The Content Management System (CMS) contains a new template "Business Casual"

• Fully Functional, 4 Page Website:
  • Home
  • About
  • Blog
  • Contact
• Integrated article modules
• Bootstrap Carousel Built-In for the lastest published articles.
• Google Map of your office location
• All site details can be updated via the site wizard

Our site wizard is a simple way to get a professional website

Simply click on the wizard, enter your company details into the form provided and your information will automatically populate the pre-designed website template of your choice, giving you a quality website in minutes. You can choose to use this website, change the template, or tweak it to your hearts content, our system is accommodating and easy to use. 

There are a number of pre-designed site templates included in the base system.

• • Open Mind
  • Munter
  • Business Casual

The new Calendar is a full-sized, drag & drop calendar. It uses AJAX to fetch events on-the-fly for each month/week/day.

Select from the filters to change the date range and items displayed according to type, category, status and assign to. Items are tasks, events, sales opportunities or jobs which have been entered and scheduled to a day and time. You'll see items in the calendar. Click on the item to see the details of the item. You can switch between the calendar and timeline view any time.

We've listed some handy Calendar Tips at the

Overview

The download of large images to the client browser which will be later resized to be a smaller image is very wasteful and slow.

Let the server dynamically resize and cache your images with NO overhead to subsequent calls. To use in your HTML just add the desired behaviour to the URL e.g "?max-width=100"

Overview

All Linux servers are locked down to the highest security standards possible. All services are off by default and all ports shut. Only the required services started. 

To lock down a server:-

• • Install and run only the services you require.
  • Block all ports by default and open only those that are required
  • Run servers as low permission user
  • Disable direct login to ROOT completely.
  • Block SSH login attempts from unknown locations and machines.
  • Set up tripwire to detect intrusions
  • Increase file handles

Timeline is more than a graphical representation of your JobTrack data, it is interactive allowing you to link back to the item with a click to see the full details, edit and add details.

Select from the filters to change the date range and items displayed according to type, category and status. Items are tasks, events or sales opportunities which have been entered and scheduled to a day and time. You'll see items in timeline bands with a colour line representing their scheduled time and duration. The items you can view on

Create a new event.

Invite your contacts by selecting the tab 'Invite Others'

Send the invitation via email 

Press the button "Send Invitation" to create an email populated with your contacts.

The email opens up with a pre defined template that can be changed.

The "keywords" meta tags is no longer used by any of the major search engines. Under some circumstances they can actually be scored negatively against the page rank, when a high count of irrelevant or duplicated key words are added. 

The system will automatically de-duplicate keywords if entered. For example if "SEO, meta, Seo,tags,,," is entered as the list of keywords, the list will be converted to "SEO, meta, tags"

Later releases will deprecate the entry of key words completely. Currently Google completely

After you have registered a new domain name with a domain name (DNS) provider such goDaddy, or you have an exisiting domain name, you need to change the associated IP address so that your domain name points to stSoftware's servers.

Or contact us to add "Assigning your domain name" service to your website or websystem package and we'll manage it for you.

Assign your domain (host) name to the IP addresses of our servers

Have your DNS pointed to either of the two groupings of IP addresses below;

101

When a HTML component is changed validations for the validity and for accessibility will be performed. 

• HTML code in the rich text editor to be checked

• click the Check Accessibility button to check

• Check results in another browser window

Server Cluster

A cluster of servers (two or more ) can be setup and the DNS entry for your site can be defined with the IP addresses for each of the servers, this is known as Round-robin DNS