Abstract
Modern web applications play a key role in data management and service delivery, making data security critical. The main problem is vulnerabilities in authentication mechanisms, password recovery and request processing, which can lead to data leakage and unauthorized access. To study and solve these problems, a comprehensive approach was taken, including analysis of application architecture, testing of security mechanisms and evaluation of applied techniques. The study identified key shortcomings, such as information leakage during query processing, weak data recovery mechanisms, and the use of insecure data transfer methods. The findings highlight the need to implement multi-factor authentication, improve data processing procedures, and develop security standards. Particular attention is paid to practical recommendations for minimizing the risks associated with cyber-attacks and increasing the level of data confidentiality. The implementation of the proposed measures will not only eliminate existing vulnerabilities, but also create a more stable architecture for long-term protection of web applications.