HW 4: WEB TESTING (30 POINTS)

This assignment aims to test the Partner Portal website along with the Trip Planner website. The test is mainly about acceptance, performance and penetration testing. Please record all your answers and all comments in each of the questions below.

Email questions to Doug Rosenberg at [email protected], with copies to Abdulkareem Alzahrani at [email protected], and Hasan Al Yousuf at [email protected].

General Information

a) What are your desktop Internet browsers (used to test Partner Portal and Trip Planner websites)? Please select at least three different browsers for testing. Mobile browsers (e.g. iPad) are OK.

 Google Chrome

 Internet Explorer

 Safari

 Other: ______

Please record platform, browser, and browser version #.

Publish coupons and create a Trip Plan (30 points)

You will be testing the functionality of the coupon publishing and trip planning parts of the system, with a focus on cross-browser compatibility issues.

You will be publishing coupons for venues near Disneyland, in Orange County CA. Coupons can only be published for locations on our travel maps. You can access an Orange County map here: http://www.vresorts.com/FTBeta/tripPlanner/tripPlanner.html?map::Anaheim You can choose to publish coupons for any locations on the Orange County map except for the five locations in the screenshot above, with the restriction of a single coupon per venue.

Publish coupons using Partner Portal website

a) Go to the Partner Portal website: http://www.vresorts.com/FTBeta/partnerPortal/partner.html.

b) Login to the Partner Portal with Username USC-CS577 and Password USC-CS577

c) You will see a list of options, select “Offers”.

d) In “Offers” screen, you will see all the offers for the logged in partner. Everyone doing this assignment will share the same account, please check if an offer is already published for a venue before publishing a new one.

e) Click on “Add” button to add a new offer.

f) All offer Information are required. (Note: The Store Name field should match the Store/Location Name that is available on the Trip Planner maps – copy & paste the name from the map into the Offers page).

g) As part of the offer information, test different geofence radii (e.g. 100 m and 200 m) and see the effect on the result before creating the offer. (The area of the circle around the location should be different according to the geofence radius)

h) Upload offer/coupon image (640 pixels tall x 480 pixels wide) and enter the coupon redemption password (4-digit PIN code).

i) Create the offer

j) Continue adding offers and you should be able to see them on the Offers page. Publish at least 2 coupons for each web browser that you test with (minimum 6). You can use the same coupon image for all of them. Build a Trip Plan using Trip Planner website

The Trip Planner website is where you create a trip plan and select the locations/stores from the map that you would like to receive offer coupons for. You may follow the steps below (step a to step e) to create a trip plan for any location you want.

Go to the Trip Planner website:

http://www.vresorts.com/FTBeta/tripPlanner/tripPlanner.html?map::Anaheim

a) Create your own account on the Trip Planner website and then login to the website using this account credential.

b) After you have logged in successfully, click on the “New Trip Plan” button. You will be prompted to enter the name of the new trip plan. You may enter any name for your testing (e.g. AnaheimTestCourse). The following screenshot should clarify the process of creating a new trip plan.

c) Once you create the Trip Plan successfully, you will notice that the upper right corner drop- down menu is changed to your newly created trip plan name. d) Now, you need to add the locations where you have published coupons to your trip plan. This is done simply by clicking on any of these locations on the Anaheim map. Once you click on a location, you will be prompted by that location information besides a link to add the location to your trip plan. Click on the “Add to Trip” link and then you will be redirected to a successful message page. Click “OK” and then you will be back to your Trip Plan. Repeat these steps to add other places to your trip plan. The following snapshots should clarify the process of adding locations to your trip plan.

e) If the Offer match the location name that is in the map, you will be able to see a switch notification button that you can set it to “ON” or “OFF” for the locations/places that you would like to redeem coupons for if you pass by their geofence area.

Add all of the places for which you have published coupons to your trip plan. Provide a screenshot.

Questions (20 points)

Q1) (10 points) Try to use at least three different browsers and record any issues that you may find in both Websites from functionality aspect, performance aspect, and responsive design aspect. Please record your comments, concerns, issues and your results below.

______

Q2) (7 points) What improvements do you recommend in both websites to improve the user experience? (Write at least 7 improvements)

______

Q3) (3 points) What are the three things that you liked the most in each of the websites and what are the three things that you believe it is very important to change in both websites?

______Q4: Additional Testing: (10 points)

Create 5 additional test cases, briefly explain the test description and provide detailed results. These additional test cases could be testing corner cases, exception cases, worst-case scenarios, non- functional cases, or performance testing cases.

Test description Test results

Extra Credit (10 points) This system will bill stores per-coupon redeemed. There is a “Partner Portal” where stores can publish coupons and pay their bills. We want to make sure our back-end system is hacker-proof. You are invited to try to hack into our billing system for extra credit.

Q5: Security and Ethical Hacking Practice

Q4) Can you view the offers of other accounts? Try to hack to the system and view other offers information. Write the security breaches that you have exploited and show snapshots.

Q5) Can you view the transactions of other accounts? Try to hack to the system and view all transactions if possible. Write the security breaches that you have exploited and show snapshots.

Q6) Now, try to modify some transactions information and shows how did you do that (with snapshots).