ashu3208 / messautomationsystem Goto Github PK

Users while setting their password can neither see their own passwords, nor there is a provision to check if they have entered the password they thought of by re-entering the same password.

Also, if one forgets the password, or registers by a password he/she did not thought of, there is no provision to reset the password.

Firstly, the mess manager was logged in. Then, I logged out and signed up as a student. Instead of the default page for students upon signing up, the page for mess manager opened up, as shown in the below video.
https://user-images.githubusercontent.com/105962042/230759056-2b12261e-e917-4534-aaaf-8dd38b7bdcdc.mp4

Suppose this was my dues first (0 Rs)

if I generate a bill of 100 Rs for 2 days (11 to 13)

then the BDMR gets added this way

if the same process is repeated again with same dates and value then the BDMR gets added to the previous value

this should not happen and the BDMR should be overwritten, also the manager should also get to know whether he has uploaded the BDMR before. He should not be confused.

It is possible that two extras are served at different places or at different times. But in orders for multiple dishes, there is only one card and all of the orders must be marked as served in one step. It is impractical to keep track of what has/has not been served manually.

Suppose a student enters a rebate request of 14-15 April.
and then a rebate request of 15-17 April.

And then the manager accepts both the rebate requests.

And then enters the Daily cost of 14-17th april.

Instead of 3 days, only rebate of last 2 days has been considered.

When user gives long complaint, the front end gets destroyed.

Suppose these are the initial extras.

the mess manager removes the last item in the list.

But the item is still visible to the student because the page was not reloaded.

On booking this item, this error page loads.

There was no check provided on user passwords.
One could just enter a space and set such trivial passwords.
This is a serious security issue.

Consider a situation in which the manager enters an amount greater than the total dues in the dues paid field for a particular student and submits it.
Then, the mess dues are cleared but extra dues are not cleared on the student's side.

The images support the case.

If the menu initially was

and the manager changes removes all of the items

and the student clicks on "Order" on this page

the site crashes.

Scenario: for the following Rebate request

Admin approves the request

And after approval, this is the home for students with 10 rebate days

Now admin generates bill

But the amount in the home is unchanged even when the rebate days are removed and even the Daily cost was not added

Suppose a student applies for a rebate request.

The manager views the rebate request.

Before the manager takes any step, the student withdraws the request.

The manager accepts the request without reloading the page.

The website crashes.

There is no character limit in the extras menu. The fields on the right appear outside the frame.

When 2 users try to register with same email id, instead of showing some error on the same screen, an error message pops on a black screen, which is misleading.

Any amount of data can be inputted into the field of name.

At some places where user gives a wrong input, the page just gets refreshed. No error messages are shown to the user, and hence it gets difficult to interpret what actually has happened.

Such inputs include

• from date greater than to date
• wrong email id
• wrong roll number
• negative values in quantity and prices
• and more like that....................

If there exists a rebate request for a date

Still the user is able to make the same request again

which the admin is also able to accept

A student is able to create multiple rebate requests during the same time period, and they are added as separate rebate requests.

In the calculations of no of working days, the formula used should be "TO_DATE - FROM_DATE + 1". But instead the formula used is
number of days = "TO_DATE - FROM_DATE"

This is a universal thing and must be corrected.

Or it could be said that there is no sync between the extras mentioned separately and the weekly extras mentioned in the mess menu.

These extras cannot be booked.

at one place, it gives 22 and at other place it gives 23 working days for same From and To dates.

The frontend of the software should not allow users to input negative values. (Can be done by placing a min value in HTML file).

The buttons of days like "Monday", "Tuesday" are not evidently button. It was not at clear that these are clickable buttons.

Also the text "Regular:" and "Extras:" should be given different colors because it the text is not much readable due to same text colors of heading and elements.

when 2 different users register with same roll number, instead of some error message on the screen, the website gets redirected to some unknown error message popped on a black screen. This may be highly inconvinient for the users.

Let's say the admin enters this Dues

Now if we click submit, this shows up

A student is able to book any unreal number of extra items from the portal.

In Monday Breakfast one is able to add two items with same names.

While registering as a student on the portal, one can enter any random email address and so one can enter the email address of other students and register. This is serious security and privacy issue.

Scenario: Let's say the student had Rs.150 for dues, then the admin can add Rs.500 paid by the student from the account access option, and even then the updates Dues on the Student Side is Rs.0

Students can request rebates from x1 date to x2, where x1>x2.

The home page of mess manager is kept absolutely empty, and no data is provided.

Manager can add extra items with same name. Instead only the price should have been updated.

if the request is for the same date,

the server crashes.

No option has been provided to the mess manager to view students bill. Hence it is misleading when we ask mess manager to clear dues of a particular student.

User can register complain with any amount of characters. This can potentially lead to spam.

On registering with a gmail account, the page got refreshed, without showing any error message. It was very misleading, and one cannot identify, if the registration was successful or not.

All the pages are rendered with the heading "Document", which is definitely not right.

Different bill amounts are shown on home page and mess bill section of same student.

The home screen should show the total number of days for which rebate has been accepted. But it only shows the number of rebate days of the last accepted rebate request.

Every time one updates the menu they are sent to this blank screen

This also happens when one opens this section. It would be better if one menu opens as default here, and that the menu which was updated opens after reloading instead of blank page

In the last row
Name: hi Price: Rs. 9.9/- Quantity: 9
Total: Rs. 89.10...01/-
Set the precision correctly of the float (or double) variable you have used to store the value of Total.

If you are allowing the Total(described in the above issue) to be decimal, you must allow the input in the red box to be decimal. Or use integer variables at both places.