I have a Attack and Defence security project for school and I dont know how to protect it since all classic ways are forbidden by rules ,so
Assume the following project :
A web application with the following functionality:
Database connection where all information is stored.
Presentation of this information according to input from user.
The web app will be pentested on LAN level
No firewalls allowed.
No fail2ban like applications.
No xss library can be used.
Any help is appreciated.