This paper discusses the WEB-based security tactics of the management system of the university students' school records, the mode that combines C/S with B/S in the system is designed. Measures, such as the identification of users, fuzzy user register and the isolation of the information written into the database from the users' retrieving of information, have been taken to guarantee the security and reliability of the system, and the integrality and consistency of the database data are achieved.