VirtualElections

Forever free, adless and open-source voting platform to conduct elections remotely.

This website is written in PHP. HTML is used for templating, using CSS for styling. JavaScript is used for client-side validations, toggling between light and dark mode and showing results. An SQL database is used in this application. Connection to the database is handled using PHP Data Objects.

For the rewrite in Python (Django framework), see https://github.com/BurraAbhishek/VirtualElections_v2

Development Environment

Please check the wiki of this repository to get started.

Vulnerability Tests

• SQL Injection
  • Status: Secured
  • Testing tool used: sqlmap, OWASP ZAP
• XSS
  • Status: Secured
  • Testing tool used: OWASP ZAP
• Path Traversal
  • Status: Secured
  • Testing tool used: OWASP ZAP

In addition to this, it is recommended to use an identity verification method while conducting elections. There are several constraints to implementing an identity verification and authentication method by means of writing code:

• Not everyone has an email address.
• Not everyone has a registered mobile number.
• This site is designed be compatible and functional worldwide. Therefore, using only one kind of ID proof which is compatible in only one country is not feasible. However, a limit can be imposed on the kind of ID proof and website accessibility depending on the nature of the elections.
• People can submit fake/forged documents.
• Machine Learning algorithms are required to identify genuine documents with several methods of proving one's identity, take photographs of users during registration and verify with the photograph contained in the identity document.

NOTE: It is recommended to use HTTPS and encrypt all traffic while deploying this application for security reasons.

LICENSE

This repository is dual-licensed under the Apache License, Version 2.0 and the GNU Affero General Public License 3 or any later version at your choice.

External Resources

Files	Author(s)	License
Font Awesome v4.7 in public/fa	The Font Awesome Team	CC-BY 4.0, SIL OFL 1.1, MIT
Noto Sans in public/fonts	Google	Apache License, Version 2.0
Roboto in public/fonts	Christian Robertson	Apache License, Version 2.0