INTRODUCTION TO SOFTWARE ENGINEERING

Why Software Engineering Matters in Web Applications: The Risks of Vibe Coding
Introduction
Web applications support many everyday activities, including online shopping, banking, education and communication. Because they often process personal and financial information, they must do more than look attractive or perform basic tasks: they must also be secure, reliable, efficient and maintainable.
Software engineering is the disciplined application of methods and tools to the design, development, testing, deployment and maintenance of software. It helps developers build systems that meet users’ needs and remain dependable over time. This is especially important as artificial intelligence (AI) tools make it easier to generate application code. When developers accept AI-generated code without understanding, reviewing or testing it, they risk creating insecure and unreliable applications.
Why Software Engineering Is Important in Web Applications

1. Requirements and planning Before development begins, developers need to understand what users need and define what the application must do. For example, an online banking system requires features such as secure login, account management and transaction processing. Clear requirements and planning reduce misunderstandings, rework and avoidable costs.
2. Security and data protection Web applications may store passwords, personal details and financial records. Software engineering encourages developers to build security into the application through measures such as secure authentication, access control, input validation and appropriate encryption. These measures help reduce risks such as SQL injection, cross-site scripting (XSS) and unauthorized access.
3. Testing and quality assurance Testing helps identify defects before an application is released. Developers use methods such as unit, integration, system and security testing to check that individual components and the complete application behave as expected. For example, an online shopping system should be tested to ensure that one customer cannot view another customer’s account or order details.
4. Maintainability and scalability Well-structured code, suitable architecture and clear documentation make an application easier to repair and update. Good design also helps a system grow as the number of users or the amount of data increases.
5. Reliability and user trust Users expect web applications to work consistently and protect their information. Careful design, testing and maintenance reduce failures and help organizations maintain users’ confidence. What Is Vibe Coding? Vibe coding is an informal approach to programming in which a person describes a desired result in natural language and relies heavily on an AI tool to generate or modify the code. It can be useful for learning, experimentation and building prototypes quickly. However, it becomes risky when the developer treats generated code as correct without understanding how it works or checking whether it is safe. The concern is not the use of AI itself. AI can support software engineers, but the developer remains responsible for reviewing, testing and securing the application. The Risks of Vibe Coding and Poor Software Engineering
6. Security weaknesses AI-generated or hurriedly written code may contain weak authentication, unsafe database queries or incorrect access controls. If these weaknesses are not found before deployment, attackers may exploit them to access systems or data.
7. Code that the developer does not understand When developers rely on generated code without understanding it, they may struggle to find the cause of errors or make safe changes. This makes debugging and future development more difficult.
8. Poor code quality and maintainability Code produced without a clear design or review may contain duplicated logic, unnecessary components and inconsistent structures. As an application grows, these problems can make it harder and more expensive to maintain.
9. Privacy and data exposure Weak security controls can expose personal or confidential information. A data breach can harm users, interrupt services and damage an organization’s reputation.
10. Inadequate testing and false confidence An application that opens and performs a basic task is not necessarily safe or reliable. Without proper functional and security testing, defects may remain hidden until real users depend on the system.
11. System failures and financial consequences Poor design, insufficient testing and weak maintenance can cause downtime, data loss and expensive repairs. Organizations may also face legal or regulatory consequences if they fail to protect information as required. Example: A School Results Portal Imagine a school creates a web application that allows students to view examination results. If the system does not check each user’s permissions, a student might be able to view or change another student’s results. This is an access-control failure. Requirements analysis, secure design, code review and security testing could help identify and prevent this problem before the portal is released. How Developers Can Reduce These Risks 1.Follow the Software Development Life Cycle (SDLC). Plan, analyze requirements, design, implement, test, deploy and maintain the application. 2.Review AI-generated code. Read and understand code before using it, especially code that handles authentication, payments or personal data. 3.Test throughout development. Use functional, integration and security tests, and fix defects before release. 4.Apply secure coding practices. Validate input, enforce access controls, protect credentials and use appropriate encryption. 5.Document the system. Record requirements, design decisions and important implementation details to support maintenance. 6.Maintain dependencies. Update frameworks and libraries and check for known vulnerabilities. 7.Assess security regularly. Review the application and its configuration to identify weaknesses before attackers do. Conclusion Software engineering is essential to building web applications that are secure, reliable, efficient and maintainable. Vibe coding and other AI-assisted techniques can speed up development, but they do not remove the need for planning, code review, testing and security. Developers should use AI as a support tool rather than blindly trusting its output. The quality of a web application should be judged not only by whether it works, but also by whether it protects users, handles errors, performs reliably and can be maintained. The goal is not simply to produce code faster; it is to build software that people can trust. References and Further Reading 8.OWASP Foundation. OWASP Top 10:2025. https://owasp.org/Top10/ 9.National Institute of Standards and Technology (NIST). Secure Software Development Framework (SSDF). https://csrc.nist.gov/Projects/ssdf 10.OWASP Foundation. Secure Coding Practices Quick Reference Guide. https://owasp.org/www-project-secure-coding-practices-quick-reference-guide/