Final Project Information System Design in D3 Telecommunication Engineering with Laravel-Based Data Security Implementation

Final project management in D3 Telecommunication Engineering requires an integrated and secure system to ensure the smoothrunning of the final project management process and the protection of academic data. This study aims to design a web-based final project information system using the Laravel framework, as well as to identify and mitigate potential security vulnerabilities against brute force and SQL Injection attacks using the OWASP ZAP Fuzzer. The research method used is Research and Development (R&D). The results of blackbox testing on 23 test scenarios, all of which were declared successful, indicating that each system feature has run according to its expected function. The scan results show 31 potential vulnerabilities, consisting of 1 high risk, 4 medium, 6 low, and 20 informational alerts. Brute Force testing was carried out for 51 login attempts, while SQL Injection for 17 payload attempts. The test results show that all requests result in HTTP 302 (Found) which indicates incorrect credentials, the system cannot be penetrated, and does not trigger database errors or changes in data display. The response header size of 1220 bytes and the response body size of 386 bytes indicate that the server consistently returns the same failed page without any additional error messages, and the entire payload is deemed harmless by the server. Thus, the system is proven secure against both attacks and capable of supporting the integrated final project management process.