2.8. Session management
|
|
|
- Howard Cox
- 8 years ago
- Views:
Transcription
1 2.8. Session management Juan M. Gimeno, Josep M. Ribó January, 2008
2 Session management. Contents Motivation Hidden fields URL rewriting Cookies Session management with the Servlet/JSP API Examples Scopes 1
3 Sessions. Motivation Motivation: HTTP: A stateless protocol When a client sends a request, the server sends back a response but does not keep any information about that request and the client state. In most web applications a client has to access various pages before completing a specific task and the client state should be kept along all those pages Example 1: A customer wants to buy some items in an on-line store. She/he should add each one of them to his/her shopping cart and, at the end, pay for them in order to complete the purchase Example 2: A customer wants to make a reservation for a specific performance: he/she should choose the performance, the city, the theater in which it takes place, the schedule, the seat and, finally buy one or more tickets for that specific performance Both examples involve a conversation between the customer and the web application (at the server side). The server must maintain, at every moment, the client s conversational state (i.e., the information that the client has sent to the server along his/her interaction with the web application) How to remember the client s conversational state using a stateless protocol? 2
4 Sessions. Motivation Keeping client information between pages In a web application we may maintain the client state by means of different techniques Hidden fields URL rewriting Cookies Servlet and JSP API 3
5 Sessions. Hidden fields Hidden fields Idea: The client state is passed from the server to the client and back to the server in a hidden field of a form <% int n; if (request.getparameter("counter")==null) n=1; else{ n=integer.parseint(request.getparameter("counter"))+1; } %> <html> <h1>page counter using hidden fields</h1> <form action="index.jsp" method="get" > This is your access number <%=n%> <p> <input type="hidden" name="counter" value=<%=string.valueof(n)%>> <input type="submit" value="new access"> </form> </html> Example location: sessions/examples/ex1 4
6 Sessions. URL rewriting URL rewriting Idea: The client state is passed from the server to the client and back to the server in the query string, accompanying the URL <% int n; if (request.getparameter("counter")==null) n=1; else{ n=integer.parseint(request.getparameter("counter"))+1; } %> <html> <h1>page counter using URL rewriting</h1> This is your access number <%=n%> <p> <a href="index.jsp?counter=<%=string.valueof(n)%>"> New access</a> </html> Example location: sessions/examples/ex2 5
7 Sessions. Cookies Cookies A cookie is a pair (key-string,value-string) which is: Sent by the server to the client as a part of the response to a client request, Stored by the client browser (when it receives the cookie from the server) and Sent back by the client as a part of subsequent requests to the same server Example of cookie: (accessnb,"12") 6
8 Sessions. Cookies Cookies (2) Cookies can be used to store the state reached by the client in the previous request so that it can be restored in the next one Example: The cookie (accessnb, 12 ) may mean that as a consequence of the last request (acces to a page p) the number of accesses to p has been 12 When the client sends another reques to access p the server will increase that number by one and will send the new cookie (accessnb, 13 ) to the client 7
9 Sessions. Cookies Cookies features Cookies are stored in the client browser as pairs (string-key, string-value). Each pair is associated to a URL domain Cookies have an expiration date. client state will be lost After that date, the Cookies are not a universal way to store the client state (e.g., the client may disable cookies) Cookies are usually used in two situations: Remmember client preferences (e.g., client language) Support to session management (see below) 8
10 Sessions. Cookies Cookies. API Java provides support for cookies. In particular: It defines the class Cookie It provides operations to get the cookies from the client request (request.getcookies()) and to add cookies to the server response (response.addcookie(...)) 9
11 Sessions. Cookies Cookies. API. The class Cookie Summary of the Cookie class operations Cookie(java.lang.String name, java.lang.string value) Constructs a cookie with a specified name and value. java.lang.string getname() Returns the name of the cookie. java.lang.string getname() Returns the name of the cookie. java.lang.string getpath() Returns the path on the server to which the browser returns this cookie. java.lang.string getvalue() Returns the value of the cookie. void setmaxage(int expiry) Sets the maximum age of the cookie in seconds. void setpath(java.lang.string uri) Specifies a path for the cookie to which the client should return the cookie. void setvalue(java.lang.string newvalue) Assigns a new value to a cookie after the cookie is created. 10
12 Sessions. Cookies Cookies. API. Cookies support in other classes Interface HttpServletRequest Cookie[] getcookies() Returns an array containing all of the Cookie objects the client sent with this request. Interface HttpServletResponse void addcookie(cookie cookie) Adds the specified cookie to the response. 11
13 Sessions. Cookies Cookies. An access counter Example location: sessions/examples/ex3 File index.jsp <% final int YEARSECS=60*60*24*365; int n; Cookie[] cookies=request.getcookies(); String accessnb=null; if (cookies!=null){ for (int i=0; i<cookies.length;i++){ Cookie c=cookies[i]; if ((c.getname()).equals("accessnb")) accessnb=c.getvalue(); } } if (accessnb==null){ n=1; } else{ n=integer.parseint(accessnb); } Cookie c=new Cookie("accessNb",String.valueOf(n+1)); c.setmaxage(yearsecs); response.addcookie(c); %>... 12
![=null){ for (int i=0; i<cookies.length;i++){ Cookie c=cookies[i]; if ((c.getname()).equals("accessnb")) accessnb=c.](/docs-images/49/17574706/images/page_13.jpg "getvalue(); } } if (accessnb==null){ n=1; } else{ n=integer.parseint(accessnb); } Cookie c=new Cookie(\"accessNb\",String.")
14 Sessions. Cookies Cookies. An access counter (2)...continuation <html> <h2> Access counter </h2> <p> This is a version without session support. A cookie is used to store (in the client side) the value of the last access number <p> <p> This is your access number <%=n%> <p> Click <a href="index.jsp"> here </a> </html> 13
15 Sessions. Servlet and JSP API Servlet and JSP API. Session management Idea of sessions: 1. The client sends a request to the server 2. The server creates a session which will encompass all the interactions with that client in the next few minutes. This session is identified with a session identifier 3. The server manages the client request and elaborates a response to its request. 4. This management may remember some objects which will be retrieved by later requests of the same session. These remembered objects: are called attributes are associated to the session can be retrieved using a key (string) 14
16 Sessions. Servlet and JSP API Servlet and JSP API. Session management 5. When the server has finished managing the request, the server sends to the client: its response (html/xml code) a cookie with the session identifier (sid) 6. When the client sends another request to the same server, it includes the cookie (with the identifier sid) that received from it. In this way the server can identify the session. 7. The server manages the new request. In particular, it may retrieve the session attributes which were set in the last session access. 15
17 Sessions. Servlet and JSP API CLIENT SERVER http request: "counter.jsp" counter_jsp.class is executed: *Create a session identifier (sid) *Create a cookie JSESSIONID=sid *Add the cookie to the server response *Manage the request and set session attributes: session.setattribute("counter",new Integer(1)); http response: Cookie:JSESSIONID=sid; html page http request: Cookie:JSESSIONID=sid; "counter.jsp" counter_jsp.class is executed: *Get the session identifier obtained from the request (sid): session=request.getsession(); *Manage the session: Get/Set session attributes: session.getattribute("counter"); 16
18 Sessions. Servlet and JSP API Session management. API The following classes and interfaces are provided by the Servlet and JSP API in order to manage sessions: HttpSession HttpServletRequest HttpServletResponse Cookie In order to trace objects that are incorporated and/or removed from a session or activation/remove of the own session, the API offers the following classes and interfaces (however, these classes are not presented in these slides): HttpSessionActivationListener, HttpSessionAttributeListener, HttpSessionListener, HttpSessionBindingListener, HttpSessionBindingEvent, HttpSessionEvent 17
19 Sessions. Servlet and JSP API Session management. Use of the API A servlet/jsp page which manages a request which needs session support must do the following: 1. Session creation/identification Identify an already created session which can be associated to that request (or create a session for that request if none existed) 2. Attribute management Manage session attributes (get/set attributes associated to that session) 3. Session tracking Ensure that the client knows the session identifier so that later requests from the same client may be associated (by the server) to the same session 4. Session destruction 18
20 Sessions. Servlet and JSP API Session creation/identification A client wants to interact with a server (e.g., the client wants to make a reservation in an theatre reservation web application). The client requires session management When the client calls the first servlet/jsp page of the application, the server must create the session. When the client calls a posterior servlet/jsp page (after the session creation), the server must retrieve the session that was created previously. This session is attached to the client request by means of a cookie (or a parameter in the query string) that contains the session identifier How is this done? In the following slides we will see it both for servlets and JSP pages 19
21 Sessions. Servlet and JSP API Session creation/identification. Servlets The method service(request, response)/doget(request, response)/dopost(request, response) should incorporate the following sentence: HttpSession session=request.getsession(); Creates a session (with a new identifier) if request does not contain any session identifier. Otherwise, it retrieves the session identifier attached to request (by means of a cookie or a parameter in a query string) and uses it to build an object of class HttpSession HttpSession session=request.getsession(create); If create=true, the same as before If create=false, retrieves an already existing session but it does not create a new one if request does not have any session identifier attached to 20
22 Sessions. Servlet and JSP API Session creation/identification. JSP pages JSP pages that need session management should use the page directive page session="true" %> If this directive is used, then A JSP page can refer to the session which is associated to it by means of the implicit variable session In the following slides we explain how this is possible... 21
23 Sessions. Servlet and JSP API Session creation/identification. JSP pages (2) (Some aspects of the JSP to servlet translation) JSP pages are automatically translated into a servlet. This translation consists of the following issues: Creation of a context for the JSP page This context includes session management Request management and response creation This management includes the get/set of session attributes The next slides focus on the creation of a context for a JSP page 22
24 Sessions. Servlet and JSP API Session creation/identification. JSP pages (3) (Some aspects of the JSP to servlet translation) This is a fragment of the automatic translation of a JSP page into a servlet that ilustrates how the context of a JSP page is created: public void _jspservice(httpservletrequest request, HttpServletResponse response) throws java.io.ioexception, ServletException { //Variable declaration... try { jspxfactory = JspFactory.getDefaultFactory(); pagecontext = jspxfactory.getpagecontext(this, request,response, null, true, 8192, true); application = pagecontext.getservletcontext(); config = pagecontext.getservletconfig(); session = pagecontext.getsession(); out = pagecontext.getout(); //... Request management and response creation... } catch (Throwable t) { //... } finally { if (jspxfactory!= null) jspxfactory.releasepagecontext(pagecontext); } } 23
25 Sessions. Servlet and JSP API Session creation/identification. JSP pages (4) (Some aspects of the JSP to servlet translation) JspFactory jspf = JspFactory.getDefaultFactory(); PageContext pagecontext = jspf.getpagecontext(this, request, response, null, true, 8192, true); pagecontext is an object that encapsulates the page context, which includes the following aspects associated to the JSP page: The request that has launched this JSP page That is, the first parameter of retrieved by: jspservice. It can be request=pagecontext.getrequest(); The pending response which will be generated as a result of the execution of this JSP page and, afterwards, sent to the client response=pagecontext.getresponse(); 24
26 Sessions. Servlet and JSP API The output stream that has been associated to this JSP page out=pagecontext.getout(); The session that is associated to this request getpagecontext(...) calls request.getsession() The session can be retrieved by: session = pagecontext.getsession(); The application to which this JSP page is associated (useful to define application objects. See below) application = pagecontext.getservletcontext(); 25
27 Sessions. Servlet and JSP API Session creation/identification. JSP pages (5) (Some aspects of the JSP to servlet translation) As a consequence of this translation, in the JSP page the following implicit variables are available (no need to declare or initialize them): request response out pagecontext session application config page exception Therefore the JSP page can refer to the session which has been associated to it by means of the implicit variable session. 26
28 Sessions. Servlet and JSP API Attribute management Servlets and JSP pages may remember several objects across different requests within the same session Remembering an object This is done by associating the object which is to be remembered to an attribute name (a key string) In turn, this attribute name will be associated to the session ObjectClass object=new Object(...); session.setattribute("attrname", object);} Retrieving the object Another request associated to the same session may retrieve the object associated to the attribute called attrname in the following way: ObjectClass oc= (ObjectClass) session.getattribute("attrname"); 27
29 Sessions. Servlet and JSP API Attribute management (2) Some considerations: Only objects can be stored as attributes Primitive types (e.g., int, float...) must be wrapped using the wrapper classes (e.g., Integer, Float...) Different servlets/jsp pages share the same session attributes. Beware of name clash. 28
30 Sessions. Servlet and JSP API Session tracking In order to identify and manage the session associated to a request: The server should send the session identifier to the client in its response The client should send the session identifier (obtained from the server) in subsequent requests This can be done in two different ways: 1. By means of a cookie 2. By adding the session identifier in the query string of the request 29
31 Sessions. Servlet and JSP API Session tracking. Cookies When a servlet creates a session by means of getsession() or getsession(true) it adds a cookie to the response to be sent to the client In particular, it adds a header to the response with the following code: Set-Cookie: JSESSIONID= poiuyt When the client sends subsequent requests to the server, it adds to the request the previous cookie: Cookie: JSESSIONID= poiuyt When the servlet executes the operation request.getsession() for a request that contains a cookie JSESSIONID=sessionId, it returns a session with the identifier sessionid 30
32 Sessions. Servlet and JSP API Session tracking. Query string The client may not accept cookies. However, session management should be equally possible, even in this case Idea: If the client does not accept cookies, include the session identifier as a parameter of any subsequent request sent by the client The parameter will be codified as a query string accompanying the URL of the request Example: <a href="counter.jsp;jsessionid= xcds8"> link </a> How can we do this?... 31
33 Sessions. Servlet and JSP API Session tracking. Query string How can we do this? The HttpServletResponse interface provides the method: java.lang.string encodeurl(java.lang.string url) This method encodes the url by including the session identifier only in the case that this is necessary (client browser does not accept cookies and the servlet requires session management). It returns the encoded url or the url unchanged (if encoding is not necessary) 32
34 Sessions. Servlet and JSP API Session tracking. Query string Example in a JSP page: <a href="<%=response.encodeurl("counter.jsp") %>"> link </a> The client will receive: If it does not accept cookies and session management is enabled for that JSP page: <a href=" jsessionid= xcds8"> link </a> If it accepts cookies and session management is enabled for that JSP page: <a href=" link </a> 33
35 Sessions. Servlet and JSP API Session destruction Sessions are automatically cancelled (and their resources deallocated) when they reach a certain timeout This timeout is specified in the configuration file web.xml of the server container. In the case of Tomcat: <web-app>... <session-config> <session-timeout> 30 </session-timeout> </session-config>... </web-app> In this case, the session timeout is established in 30 minutes It is possible to change the timeout for a specific session using the method setmaxinactiveinterval(n) of the interface HttpSession: session.setmaxinactiveinterval(300); This states the timeout for this session to 300 seconds (5 minutes). 34
36 Sessions. Servlet and JSP API Session destruction Sessions can be explicitly cancelled by using the method invalidate(): session.invalidate(); 35
37 Sessions. Servlet and JSP API. Example 1 Example 1: A JSP page to count page accesses Example location: sessions/examples/ex4 <%@ page session="true" %> <html> <h2> Access counter with session support</h2> <p> This version relies on cookies. If cookies are disabled in the client, this does not work <% if (session.getattribute("counter")==null) session.setattribute("counter", new Integer(1)); int c=((integer) session.getattribute("counter")).intvalue(); %> This is your access number <%=c%> <% session.setattribute("counter",new Integer(c+1)); %> <p> Click <a href="index.jsp"> here </a> </html> Warning: This example only works if the cookies are enabled in the client 36
38 Sessions. Servlet and JSP API. Example 1 Ex. 1: A JSP page to count page accesses Example location: sessions/examples/ex5 <%@ page session="true" %> <html> <h2> Access counter with session support</h2> <b>this version does not need cookies to work</b> <% if (session.getattribute("counter")==null) session.setattribute("counter", new Integer(1)); int c=((integer) session.getattribute("counter")).intvalue(); %> This is your access number <%=c%> <% session.setattribute("counter",new Integer(c+1)); %> <p> Click <a href="<%=response.encodeurl("index.jsp") %>"> here </a> </html> This version works both if the client has the cookies enabled or disabled Notice the use of: <%=response.encodeurl("index.jsp") %> 37
39 Sessions. Servlet and JSP API. Example 2 Example 2: A servlet to count page accesses Example location: sessions/examples/ex6 import javax.servlet.*; import java.io.*; import javax.servlet.http.*; import java.util.*; public class Counter extends HttpServlet { public void doget(httpservletrequest request, HttpServletResponse response) throws IOException, ServletException { dopost( request, response ) ; } continues... 38
40 Sessions. Servlet and JSP API. Example 2...continues public void dopost (HttpServletRequest request, HttpServletResponse response) { try { response.setcontenttype ("text/html;charset=iso "); PrintWriter out = response.getwriter(); HttpSession session=request.getsession(); //getsession is responsible for including the cookie //JSESSIONID to the response if (session.getattribute("counter")==null) session.setattribute("counter", new Integer(1)); continues... int c= ((Integer) session.getattribute("counter")).intvalue(); 39
41 Sessions. Servlet and JSP API. Example 2 Example 2: A servlet to count page accesses...continues out.write("\n\n"); out.write("<html>\n\n"); out.write("<h2> Access counter"); out.write("</h2>\n\n"); out.write(" \n\nthis is your access number "); out.print(c); out.write("\n\n"); session.setattribute("counter",new Integer(c+1)); out.write("\n"); out.write("<p>\nclick \n\n\n"); out.write( "<a href=\"" + "counter\">"+ "here "); out.write("</a>\n\n"); out.write("</html>\n"); if (c>=5) session.invalidate(); } } } catch (Exception ex) { ex.printstacktrace(); } 40
42 Sessions. Servlet and JSP API. Example 3 Example 3: A shopping cart This example shows a primitive bookstore on-line It uses java beans, session management and JDBC. It is presented in java beans module (ex. ***) 41
43 Sessions. Scopes within a web application Scopes within a web application In JSP pages and servlets it is possible to define 4 different scopes for objects (attributes): Page scope Request scope Session scope Application scope 42
44 Sessions. Scopes within a web application Page scope An object (attribute) associated to a page scope is visible only within the JSP page to which that scope refers The page scope corresponds to the execution of the method jspservice of the servlet to which that JSP page is translated Object declaration within the page scope pagecontext.setattribute ("attrid",object,pagecontext.page_scope); pagecontext.setattribute("attrid",object); Recall that pagecontext is an implicit object that can be used in a JSP page 43
45 Sessions. Scopes within a web application Request scope An object (attribute) associated to a request scope is visible: Within the JSP page to which that http request refers and Within the pages invoked by means of <jsp:include..> or <jsp:forward...> from that page Object declaration within the request scope pagecontext.setattribute ("attrid",object,pagecontext.request_scope); request.setattribute("attrid",object); Recall that both pagecontext and request are implicit objects that can be used in a JSP page 44
46 Sessions. Scopes within a web application Session scope An object (attribute) associated to a session scope is visible within all the requests associated with an HttpSession object with a specific session ID Object declaration within the request scope pagecontext.setattribute ("attrid",object,pagecontext.session_scope); session.setattribute("attrid",object); Recall that both pagecontext and session are implicit objects that can be used in a JSP page The session scope is used normally when the following situation occurs: The application maintains a dialogue with the user through different http requests and Subsequent requests within the dialogue should remember the state of some application objects stated by previous requests 45
47 Sessions. Scopes within a web application Application scope An object (attribute) associated to an application scope is visible within all the servlets and JSP pages of an application Object declaration within the request scope pagecontext.setattribute ("attrid",object,pagecontext.application_scope); application.setattribute("attrid",object); Recall that both pagecontext and application are implicit objects that can be used in a JSP page 46
48 Sessions. Scopes within a web application Initialization parameters of the application scope It is possible to declare and initialize some constant parameters which should be visible throughout the application This initialization is done in the web.xml deployment descriptor: <context-param> <param-name>jdbc.driver</param-name> <param-value>jdbc.postgresql</param-value> </context-param> <context-param> <param-name>...</param-name> <param-value>...</param-value> </context-param>... This parameters can be retrieved within a JSP page/servlet: String driver= application.getinitparameter("jdbc.driver"); 47
Pure server-side Web Applications with Java, JSP. Application Servers: the Essential Tool of Server-Side Programming. Install and Check Tomcat
Pure server-side Web Applications with Java, JSP Discussion of networklevel http requests and responses Using the Java programming language (Java servlets and JSPs) Key lesson: The role of application
Servlets. Based on Notes by Dave Hollinger & Ethan Cerami Also, the Online Java Tutorial by Sun
Servlets Based on Notes by Dave Hollinger & Ethan Cerami Also, the Online Java Tutorial by Sun 1 What is a Servlet? A Servlet is a Java program that extends the capabilities of servers. Inherently multi-threaded.
Class Focus: Web Applications that provide Dynamic Content
Class Focus: Web Applications that provide Dynamic Content We will learn how to build server-side applications that interact with their users and provide dynamic content Using the Java programming language
2. Follow the installation directions and install the server on ccc
Installing a Web Server 1. Install a sample web server, which supports Servlets/JSPs. A light weight web server is Apache Tomcat server. You can get the server from http://tomcat.apache.org/ 2. Follow
Java EE Introduction, Content. Component Architecture: Why and How Java EE: Enterprise Java
Java EE Introduction, Content Component Architecture: Why and How Java EE: Enterprise Java The Three-Tier Model The three -tier architecture allows to maintain state information, to improve performance,
SSC - Web applications and development Introduction and Java Servlet (II)
SSC - Web applications and development Introduction and Java Servlet (II) Shan He School for Computational Science University of Birmingham Module 06-19321: SSC Outline Outline of Topics Servlet Configuration
Web Container Components Servlet JSP Tag Libraries
Web Application Development, Best Practices by Jeff Zhuk, JavaSchool.com ITS, Inc. dean@javaschool.com Web Container Components Servlet JSP Tag Libraries Servlet Standard Java class to handle an HTTP request
15-415 Database Applications Recitation 10. Project 3: CMUQFlix CMUQ s Movies Recommendation System
15-415 Database Applications Recitation 10 Project 3: CMUQFlix CMUQ s Movies Recommendation System Project Objective 1. Set up a front-end website with PostgreSQL back-end 2. Allow users to login, like
Managing Data on the World Wide-Web
Managing Data on the World Wide-Web Sessions, Listeners, Filters, Shopping Cart Elad Kravi 1 Web Applications In the Java EE platform, web components provide the dynamic extension capabilities for a web
Web Programming: Announcements. Sara Sprenkle August 3, 2006. August 3, 2006. Assignment 6 due today Project 2 due next Wednesday Review XML
Web Programming: Java Servlets and JSPs Sara Sprenkle Announcements Assignment 6 due today Project 2 due next Wednesday Review XML Sara Sprenkle - CISC370 2 1 Web Programming Client Network Server Web
chapter 3Chapter 3 Advanced Servlet Techniques Servlets and Web Sessions Store Information in a Session In This Chapter
chapter 3Chapter 3 Advanced Servlet Techniques In This Chapter Using sessions and storing state Using cookies for long-term storage Filtering HTTP requests Understanding WebLogic Server deployment issues
Usability. Usability
Objectives Review Usability Web Application Characteristics Review Servlets Deployment Sessions, Cookies Usability Trunk Test Harder than you probably thought Your answers didn t always agree Important
Development of Web Applications
Development of Web Applications Principles and Practice Vincent Simonet, 2013-2014 Université Pierre et Marie Curie, Master Informatique, Spécialité STL 3 Server Technologies Vincent Simonet, 2013-2014
Application Security
2009 Marty Hall Declarative Web Application Security Originals of Slides and Source Code for Examples: http://courses.coreservlets.com/course-materials/msajsp.html Customized Java EE Training: http://courses.coreservlets.com/
Outline. Lecture 9: Java Servlet and JSP. Servlet API. HTTP Servlet Basics
Lecture 9: Java Servlet and JSP Wendy Liu CSC309F Fall 2007 Outline HTTP Servlet Basics Servlet Lifecycle Request and Response Session Management JavaServer Pages (JSP) 1 2 HTTP Servlet Basics Current
Session Tracking Customized Java EE Training: http://courses.coreservlets.com/
2012 Marty Hall Session Tracking Originals of Slides and Source Code for Examples: http://courses.coreservlets.com/course-materials/csajsp2.html 2 Customized Java EE Training: http://courses.coreservlets.com/
Principles and Techniques of DBMS 5 Servlet
Principles and Techniques of DBMS 5 Servlet Haopeng Chen REliable, INtelligentand Scalable Systems Group (REINS) Shanghai Jiao Tong University Shanghai, China http://reins.se.sjtu.edu.cn/~chenhp e- mail:
CSc31800: Internet Programming, CS-CCNY, Spring 2004 Jinzhong Niu May 9, 2004. Java Servlets
CSc31800: Internet Programming, CS-CCNY, Spring 2004 Jinzhong Niu May 9, 2004 Java Servlets I have presented a Java servlet example before to give you a sense of what a servlet looks like. From the example,
ACM Crossroads Student Magazine The ACM's First Electronic Publication
Page 1 of 8 ACM Crossroads Student Magazine The ACM's First Electronic Publication Crossroads Home Join the ACM! Search Crossroads crossroads@acm.org ACM / Crossroads / Columns / Connector / An Introduction
Hello World RESTful web service tutorial
Hello World RESTful web service tutorial Balázs Simon (sbalazs@iit.bme.hu), BME IIT, 2015 1 Introduction This document describes how to create a Hello World RESTful web service in Eclipse using JAX-RS
INTRODUCTION TO WEB TECHNOLOGY
UNIT-I Introduction to Web Technologies: Introduction to web servers like Apache1.1, IIS, XAMPP (Bundle Server), WAMP Server(Bundle Server), handling HTTP Request and Response, installation of above servers
Announcements. Comments on project proposals will go out by email in next couple of days...
Announcements Comments on project proposals will go out by email in next couple of days... 3-Tier Using TP Monitor client application TP monitor interface (API, presentation, authentication) transaction
11.1 Web Server Operation
11.1 Web Server Operation - Client-server systems - When two computers are connected, either could be the client - The client initiates the communication, which the server accepts - Generally, clients
Creating Java EE Applications and Servlets with IntelliJ IDEA
Creating Java EE Applications and Servlets with IntelliJ IDEA In this tutorial you will: 1. Create IntelliJ IDEA project for Java EE application 2. Create Servlet 3. Deploy the application to JBoss server
An introduction to web programming with Java
Chapter 1 An introduction to web programming with Java Objectives Knowledge Objectives (continued) The first page of a shopping cart application The second page of a shopping cart application Components
BAPI. Business Application Programming Interface. Compiled by Y R Nagesh 1
BAPI Business Application Programming Interface Compiled by Y R Nagesh 1 What is BAPI A Business Application Programming Interface is a precisely defined interface providing access process and data in
If you wanted multiple screens, there was no way for data to be accumulated or stored
Handling State in Web Applications Jeff Offutt http://www.cs.gmu.edu/~offutt/ SWE 642 Software Engineering for the World Wide Web sources: Professional Java Server Programming, Patzer, Wrox Web Technologies:
Agenda. Summary of Previous Session. Application Servers G22.3033-011. Session 3 - Main Theme Page-Based Application Servers (Part II)
Application Servers G22.3033-011 Session 3 - Main Theme Page-Based Application Servers (Part II) Dr. Jean-Claude Franchitti New York University Computer Science Department Courant Institute of Mathematical
Java 2 Web Developer Certification Study Guide Natalie Levi
SYBEX Sample Chapter Java 2 Web Developer Certification Study Guide Natalie Levi Chapter 8: Thread-Safe Servlets Copyright 2002 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights
Outline. CS 112 Introduction to Programming. Recap: HTML/CSS/Javascript. Admin. Outline
Outline CS 112 Introduction to Programming Web Programming: Backend (server side) Programming with Servlet, JSP q Admin and recap q Server-side web programming overview q Servlet programming q Java servlet
Implementing the Shop with EJB
Exercise 2 Implementing the Shop with EJB 2.1 Overview This exercise is a hands-on exercise in Enterprise JavaBeans (EJB). The exercise is as similar as possible to the other exercises (in other technologies).
Ch-03 Web Applications
Ch-03 Web Applications 1. What is ServletContext? a. ServletContext is an interface that defines a set of methods that helps us to communicate with the servlet container. There is one context per "web
Web Programming II JSP (Java Server Pages) ASP request processing. The Problem. The Problem. Enterprise Application Development using J2EE
Enterprise Application Development using J2EE Shmulik London Lecture #6 Web Programming II JSP (Java Server Pages) How we approached it in the old days (ASP) Multiplication Table Multiplication
Java Server Pages and Java Beans
Java Server Pages and Java Beans Java server pages (JSP) and Java beans work together to create a web application. Java server pages are html pages that also contain regular Java code, which is included
Java Servlet and JSP Programming. Structure and Deployment China Jiliang University
Java Web Programming in Java Java Servlet and JSP Programming Structure and Deployment China Jiliang University Servlet/JSP Exercise - Rules On the following pages you will find the rules and conventions
Exam Prep. Sun Certified Web Component Developer (SCWCD) for J2EE Platform
Exam Prep Sun Certified Web Component Developer (SCWCD) for J2EE Platform Core Servlets & JSP book: www.coreservlets.com More Servlets & JSP book: www.moreservlets.com Servlet and JSP Training Courses:
How to use JavaMail to send email
Chapter 15 How to use JavaMail to send email Objectives Applied Knowledge How email works Sending client Mail client software Receiving client Mail client software SMTP Sending server Mail server software
www.virtualians.pk CS506 Web Design and Development Solved Online Quiz No. 01 www.virtualians.pk
CS506 Web Design and Development Solved Online Quiz No. 01 Which of the following is a general purpose container? JFrame Dialog JPanel JApplet Which of the following package needs to be import while handling
Manual. Programmer's Guide for Java API
2013-02-01 1 (15) Programmer's Guide for Java API Description This document describes how to develop Content Gateway services with Java API. TS1209243890 1.0 Company information TeliaSonera Finland Oyj
JSP Java Server Pages
JSP - Java Server Pages JSP Java Server Pages JSP - Java Server Pages Characteristics: A way to create dynamic web pages, Server side processing, Based on Java Technology, Large library base Platform independence
Introduction to J2EE Web Technologies
Introduction to J2EE Web Technologies Kyle Brown Senior Technical Staff Member IBM WebSphere Services RTP, NC brownkyl@us.ibm.com Overview What is J2EE? What are Servlets? What are JSP's? How do you use
Intellicus Single Sign-on
Intellicus Single Sign-on Intellicus Enterprise Reporting and BI Platform Intellicus Technologies info@intellicus.com www.intellicus.com Copyright 2010 Intellicus Technologies This document and its content
Web Applications. For live Java training, please see training courses at
2009 Marty Hall Using and Deploying Web Applications Originals of Slides and Source Code for Examples: http://courses.coreservlets.com/course-materials/msajsp.html Customized Java EE Training: http://courses.coreservlets.com/
JAVASCRIPT AND COOKIES
JAVASCRIPT AND COOKIES http://www.tutorialspoint.com/javascript/javascript_cookies.htm Copyright tutorialspoint.com What are Cookies? Web Browsers and Servers use HTTP protocol to communicate and HTTP
Controlling Web Application Behavior
2006 Marty Hall Controlling Web Application Behavior The Deployment Descriptor: web.xml JSP, Servlet, Struts, JSF, AJAX, & Java 5 Training: http://courses.coreservlets.com J2EE Books from Sun Press: http://www.coreservlets.com
Java 2 Web Developer Certification Study Guide Natalie Levi
SYBEX Index Java 2 Web Developer Certification Study Guide Natalie Levi Index Copyright 2002 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved. No part of this publication
Java Servlet Tutorial. Java Servlet Tutorial
Java Servlet Tutorial i Java Servlet Tutorial Java Servlet Tutorial ii Contents 1 Introduction 1 1.1 Servlet Process.................................................... 1 1.2 Merits.........................................................
Web. Services. Web Technologies. Today. Web. Technologies. Internet WWW. Protocols TCP/IP HTTP. Apache. Next Time. Lecture #3 2008 3 Apache.
JSP, and JSP, and JSP, and 1 2 Lecture #3 2008 3 JSP, and JSP, and Markup & presentation (HTML, XHTML, CSS etc) Data storage & access (JDBC, XML etc) Network & application protocols (, etc) Programming
Penetration from application down to OS
April 8, 2009 Penetration from application down to OS Getting OS access using IBM Websphere Application Server vulnerabilities Digitаl Security Research Group (DSecRG) Stanislav Svistunovich research@dsecrg.com
Presentation Layer: Three different approaches. Database Access Layer: same as above.
Overview of web application development Overview of ASP HTTP request/response processing State management of the script logic Microsoft Scripting Runtime library Remote Scripting Ch 5 - ASP 1 Presentation
7 Web Databases. Access to Web Databases: Servlets, Applets. Java Server Pages PHP, PEAR. Languages: Java, PHP, Python,...
7 Web Databases Access to Web Databases: Servlets, Applets Java Server Pages PHP, PEAR Languages: Java, PHP, Python,... Prof. Dr. Dietmar Seipel 837 7.1 Access to Web Databases by Servlets Java Servlets
COMP9321 Web Applications Engineering: Java Servlets
COMP9321 Web Applications Engineering: Java s Service Oriented Computing Group, CSE, UNSW Week 2 H. Paik (CSE, UNSW) COMP9321, 13s2 Week 2 1 / 1 Different Layers in an Application Different solutions for
Recommended readings. Lecture 11 - Securing Web. Applications. Security. Declarative Security
Recommended readings Lecture 11 Securing Web http://www.theserverside.com/tt/articles/content/tomcats ecurity/tomcatsecurity.pdf http://localhost:8080/tomcat-docs/security-managerhowto.html http://courses.coreservlets.com/course-
Building Web Applications, Servlets, JSP and JDBC
Building Web Applications, Servlets, JSP and JDBC Overview Java 2 Enterprise Edition (JEE) is a powerful platform for building web applications. The JEE platform offers all the advantages of developing
PA165 - Lab session - Web Presentation Layer
PA165 - Lab session - Web Presentation Layer Author: Martin Kuba Goal Experiment with basic building blocks of Java server side web technology servlets, filters, context listeners,
Web Application Programmer's Guide
Web Application Programmer's Guide JOnAS Team ( Florent BENOIT) - March 2009 - Copyright OW2 consortium 2008-2009 This work is licensed under the Creative Commons Attribution-ShareAlike License. To view
JAHIA CMS AND PORTAL SERVER
Computer Practie JAHIA CMS AND PORTAL SERVER Web Application Developer Guide DRAFT VERSION Serge Huber Jahia Ltd 1.0 english Jahia Ltd 45, rue de la Gare 1260 Nyon Switzerland i Disclaimers, Terms and
How To Understand The Architecture Of Java 2Ee, J2Ee, And J2E (Java) In A Wordpress Blog Post
Understanding Architecture and Framework of J2EE using Web Application Devadrita Dey Sarkar,Anavi jaiswal, Ankur Saxena Amity University,UTTAR PRADESH Sector-125, Noida, UP-201303, India Abstract: This
Contents. 2 Alfresco API Version 1.0
The Alfresco API Contents The Alfresco API... 3 How does an application do work on behalf of a user?... 4 Registering your application... 4 Authorization... 4 Refreshing an access token...7 Alfresco CMIS
Java 2 Web Developer Certification Study Guide Natalie Levi; Philip Heller
SYBEX Index Java 2 Web Developer Certification Study Guide Natalie Levi; Philip Heller Index Copyright 2002 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved. No part of
Getting Started with Web Applications
3 Getting Started with Web Applications A web application is a dynamic extension of a web or application server. There are two types of web applications: Presentation-oriented: A presentation-oriented
Novell Identity Manager
AUTHORIZED DOCUMENTATION Manual Task Service Driver Implementation Guide Novell Identity Manager 4.0.1 April 15, 2011 www.novell.com Legal Notices Novell, Inc. makes no representations or warranties with
CONTROLLING WEB APPLICATION BEHAVIOR WITH
CONTROLLING WEB APPLICATION BEHAVIOR WITH WEB.XML Chapter Topics in This Chapter Customizing URLs Turning off default URLs Initializing servlets and JSP pages Preloading servlets and JSP pages Declaring
Java Server Pages (JSP)
Java Server Pages (JSP) What is JSP JSP simply puts Java inside HTML pages. You can take any existing HTML page and change its extension to ".jsp" instead of ".html". Scripting elements are used to provide
Web Programming with Java Servlets
Web Programming with Java Servlets Leonidas Fegaras University of Texas at Arlington Web Data Management and XML L3: Web Programming with Servlets 1 Database Connectivity with JDBC The JDBC API makes it
Java 2 Platform, Enterprise Edition (J2EE) Bruno Souza Java Technologist, Sun Microsystems, Inc.
Java 2 Platform, Enterprise Edition (J2EE) Bruno Souza Java Technologist, Sun Microsystems, Inc. J1-680, Hapner/Shannon 1 Contents The Java 2 Platform, Enterprise Edition (J2EE) J2EE Environment APM and
CHAPTER 9: SERVLET AND JSP FILTERS
Taken from More Servlets and JavaServer Pages by Marty Hall. Published by Prentice Hall PTR. For personal use only; do not redistribute. For a complete online version of the book, please see http://pdf.moreservlets.com/.
Sample HP OO Web Application
HP OO 10 OnBoarding Kit Community Assitstance Team Sample HP OO Web Application HP OO 10.x Central s rich API enables easy integration of the different parts of HP OO Central into custom web applications.
Security Code Review- Identifying Web Vulnerabilities
Security Code Review- Identifying Web Vulnerabilities Kiran Maraju, CISSP, CEH, ITIL, SCJP Email: Kiran_maraju@yahoo.com 1 1.1.1 Abstract Security Code Review- Identifying Web Vulnerabilities This paper
InternetVista Web scenario documentation
InternetVista Web scenario documentation Version 1.2 1 Contents 1. Change History... 3 2. Introduction to Web Scenario... 4 3. XML scenario description... 5 3.1. General scenario structure... 5 3.2. Steps
WIRIS quizzes web services Getting started with PHP and Java
WIRIS quizzes web services Getting started with PHP and Java Document Release: 1.3 2011 march, Maths for More www.wiris.com Summary This document provides client examples for PHP and Java. Contents WIRIS
JSP. Common patterns
JSP Common patterns Common JSP patterns Page-centric (client-server) CLIENT JSP or Servlet CLIENT Enterprise JavaBeans SERVER DB Common JSP patterns Page-centric 1 (client-server) Page View request response
Services. Custom Tag Libraries. Today. Web Development. Role-Based. Development. Code Reuse. Tag Libraries Custom Tags. Tag Lifecycle.
JSP, and JSP, and 1 JSP, and Custom Lecture #6 2008 2 JSP, and JSP, and interfaces viewed as user interfaces methodologies derived from software development done in roles and teams role assignments based
No no-argument constructor. No default constructor found
Every software developer deals with bugs. The really tough bugs aren t detected by the compiler. Nasty bugs manifest themselves only when executed at runtime. Here is a list of the top ten difficult and
Online signature API. Terms used in this document. The API in brief. Version 0.20, 2015-04-08
Online signature API Version 0.20, 2015-04-08 Terms used in this document Onnistuu.fi, the website https://www.onnistuu.fi/ Client, online page or other system using the API provided by Onnistuu.fi. End
Developing an EJB3 Application. on WebSphere 6.1. using RAD 7.5
Developing an EJB3 Application on WebSphere 6.1 using RAD 7.5 Introduction This tutorial introduces how to create a simple EJB 3 application using Rational Application Developver 7.5( RAD7.5 for short
Complete Java Web Development
Complete Java Web Development JAVA-WD Rev 11.14 4 days Description Complete Java Web Development is a crash course in developing cutting edge Web applications using the latest Java EE 6 technologies from
Web Applications and Struts 2
Web Applications and Struts 2 Problem area Problem area Separation of application logic and markup Easier to change and maintain Easier to re use Less error prone Access to functionality to solve routine
Real SQL Programming 1
Real 1 We have seen only how SQL is used at the generic query interface an environment where we sit at a terminal and ask queries of a database. Reality is almost always different: conventional programs
CSI 2132 Lab 8. Outline. Web Programming JSP 23/03/2012
CSI 2132 Lab 8 Web Programming JSP 1 Outline Web Applications Model View Controller Architectures for Web Applications Creation of a JSP application using JEE as JDK, Apache Tomcat as Server and Netbeans
Web Application Development on a Linux System With a DB2 Database By Alan Andrea
Web Application Development on a Linux System With a DB2 Database By Alan Andrea Linux, for a long time now, has been a robust and solid platform for deploying and developing complex applications. Furthermore,
Website as Tool for Compare Credit Card Offers
Website as Tool for Compare Credit Card Offers MIRELA-CATRINEL VOICU, IZABELA ROTARU Faculty of Economics and Business Administration West University of Timisoara ROMANIA mirela.voicu@feaa.uvt.ro, izabela.rotaru@yahoo.com,
DTS Web Developers Guide
Apelon, Inc. Suite 202, 100 Danbury Road Ridgefield, CT 06877 Phone: (203) 431-2530 Fax: (203) 431-2523 www.apelon.com Apelon Distributed Terminology System (DTS) DTS Web Developers Guide Table of Contents
AN OVERVIEW OF SERVLET AND JSP TECHNOLOGY
AN OVERVIEW OF SERVLET AND JSP TECHNOLOGY Topics in This Chapter Understanding the role of servlets Building Web pages dynamically Looking at servlet code Evaluating servlets vs. other technologies Understanding
NGASI AppServer Manager SaaS/ASP Hosting Automation for Cloud Computing Administrator and User Guide
NGASI AppServer Manager SaaS/ASP Hosting Automation for Cloud Computing Administrator and User Guide NGASI SaaS Hosting Automation is a JAVA SaaS Enablement infrastructure that enables web hosting services
In this chapter the concept of Servlets, not the entire Servlet specification, is
falkner.ch2.qxd 8/21/03 4:57 PM Page 31 Chapter 2 Java Servlets In this chapter the concept of Servlets, not the entire Servlet specification, is explained; consider this an introduction to the Servlet
Please send your comments to: KZrobok@Setfocus.com
Sun Certified Web Component Developer Study Guide - v2 Sun Certified Web Component Developer Study Guide...1 Authors Note...2 Servlets...3 The Servlet Model...3 The Structure and Deployment of Modern Servlet
1 Introduction. 3 Open Mobile IS components 3.1 Embedded Database 3.2 Web server and Servlet API 3.3 Service API and template engine
1 S u m m a r y 1 Introduction 2 Open Mobile IS Framework 2.1 Presentation 2.2 Main concepts 2.2.1 Accessibility 2.2.2 Availability 2.2.3 Evolution capabilities 2.3 Open Mobile IS constrains Answer 2.3.1
White Paper March 1, 2005. Integrating AR System with Single Sign-On (SSO) authentication systems
White Paper March 1, 2005 Integrating AR System with Single Sign-On (SSO) authentication systems Copyright 2005 BMC Software, Inc. All rights reserved. BMC, the BMC logo, all other BMC product or service
Forms, CGI Objectives. HTML forms. Form example. Form example...
The basics of HTML forms How form content is submitted GET, POST Elements that you can have in forms Responding to forms Common Gateway Interface (CGI) Later: Servlets Generation of dynamic Web content
Arjun V. Bala Page 20
12) Explain Servlet life cycle & importance of context object. (May-13,Jan-13,Jun-12,Nov-11) Servlet Life Cycle: Servlets follow a three-phase life cycle, namely initialization, service, and destruction.
Creating Custom Web Pages for cagrid Services
Creating Custom Web Pages for cagrid Services Creating Custom Web Pages for cagrid Services Contents Overview Changing the Default Behavior Subclassing the AXIS Servlet Installing and Configuring the Custom
Java Server Pages combined with servlets in action. Generals. Java Servlets
Java Server Pages combined with servlets in action We want to create a small web application (library), that illustrates the usage of JavaServer Pages combined with Java Servlets. We use the JavaServer
Working With Virtual Hosts on Pramati Server
Working With Virtual Hosts on Pramati Server 13 Overview Virtual hosting allows a single machine to be addressed by different names. There are two ways for configuring Virtual Hosts. They are: Domain Name
<Insert Picture Here>
פורום BI 21.5.2013 מה בתוכנית? בוריס דהב Embedded BI Column Level,ROW LEVEL SECURITY,VPD Application Role,security טובית לייבה הפסקה OBIEE באקסליבריס נפתלי ליברמן - לימור פלדל Actionable
Virtual Credit Card Processing System
The ITB Journal Volume 3 Issue 2 Article 2 2002 Virtual Credit Card Processing System Geraldine Gray Karen Church Tony Ayres Follow this and additional works at: http://arrow.dit.ie/itbj Part of the E-Commerce
Configure a SOAScheduler for a composite in SOA Suite 11g. By Robert Baumgartner, Senior Solution Architect ORACLE
Configure a SOAScheduler for a composite in SOA Suite 11g By Robert Baumgartner, Senior Solution Architect ORACLE November 2010 Scheduler for the Oracle SOA Suite 11g: SOAScheduler Page 1 Prerequisite
NetIQ Access Manager. Developer Kit 3.2. May 2012
NetIQ Access Manager Developer Kit 3.2 May 2012 Legal Notice THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON DISCLOSURE
JWIG Yet Another Framework for Maintainable and Secure Web Applications
JWIG Yet Another Framework for Maintainable and Secure Web Applications Anders Møller Mathias Schwarz Aarhus University Brief history - Precursers 1999: Powerful template system Form field validation,
Liferay Enterprise ecommerce. Adding ecommerce functionality to Liferay Reading Time: 10 minutes
Liferay Enterprise ecommerce Adding ecommerce functionality to Liferay Reading Time: 10 minutes Broadleaf + Liferay ecommerce + Portal Options Integration Details REST APIs Integrated IFrame Separate Conclusion