View source for BWAPP

{{Draft}}

[http://sourceforge.net/projects/bwapp/ bWAPP] or a buggy web application is a vulnerable web application.

== Install lighttpd, PHP, and MySql ==
{{:Setting Up Lighttpd With FastCGI}}

Install extra packages:
{{Cmd|apk add php-mysql mysql mysql-client php-zlib}}

== Installing and configuring SQLol ==

Create a folder named {{Path|webapps}}

{{Cmd|mkdir -p /usr/share/webapps/}}

Switch to the {{Path|webapps}} folder and download the source files
{{Cmd|cd /usr/share/webapps/
wget http://downloads.sourceforge.net/project/bwapp/bWAPPv1.3/bWAPPv1.3.zip}}

Unpack the archive and delete it 

{{Cmd|unzip bWAPPv1.3.zip
rm bWAPPv1.3.zip}}

Rename the folder

{{Cmd| mv bWAPP bwapp}}

Change the folder permissions

{{Cmd|chown -R lighttpd /usr/share/webapps/}}

Create a symlink to the {{Path|bwapp}} folder

{{Cmd|ln -s /usr/share/webapps/bwapp/ /var/www/localhost/htdocs/bwapp}}

== Configuration and start MySQL ==

{{Cmd|<nowiki>/usr/bin/mysql_install_db --user=mysql
/etc/init.d/mysql start && rc-update add mysql default
/usr/bin/mysqladmin -u root password 'password'</nowiki>}}

== bWAPP configuration ==

Please add the MySQL configuration details to the bWAPP config file.

{{Cmd|nano -w /usr/share/webapps/bwapp/config.inc.php}}

Browse to <nowiki>http://WEBSERVER_IP_ADDRESS/install.php</nowiki> for the installation.

[[Category:SQL]] [[Category:Security]]