PHP. Introduction to Server-Side Programming. Charles Liu
|
|
|
- Adelia Stanley
- 7 years ago
- Views:
Transcription
1 PHP Introduction to Server-Side Programming Charles Liu
2 Request to a Static Site Server: 1. Homepage lookup 2. Send as HTTP Response HTTP Request: GET You (client) HTTP Response: web content (HTML file) Client-side code: HTML, CSS, JavaScript Web server IP:
3 Request to a Dynamic Site The server must respond dynamically if it needs to provide different client-side code depending on the situation Date and time Specifics of the user s request Database contents forms and authentication You (client) HTTP Request: GET HTTP Response: web content (HTML file) Client-side code: HTML, CSS, JavaScript (dynamically generated by server) Web server Server: 1. Look up things that go on user s profile, such as wall posts and friends caches, database lookups 2. Generate client-side code containing these things 3. Send as HTTP response
4 PHP Introduction and Basic Syntax Charles Liu
5 What is PHP? PHP = PHP: Hypertext Preprocessor Server-side scripting language that may be embedded into HTML Ultimate goal is to get PHP files to generate clientside code must end up with HTML, CSS, JavaScript, other clientside code!
6 Side-by-side PHP File: <html> <head> <title> PHP Introduction </title> </head> <body> This is HTML! <br /> <?php echo 'This is PHP! <br />';?> </body> </html> Output: resulting HTML <html> <head> <title> PHP Introduction </title> </head> <body> This is HTML! <br /> This is PHP! <br /></body> </html>
7 A closer look <html> <head> <title> PHP Introduction </title> </head> <body> This is HTML! <br /> <?php echo 'This is PHP! <br />'; // prints to screen /* Here's a longer comment that spans multiple lines. */?> </body> </html> PHP tags: <?php and?> The echo command Single line comment ( // ) Multiple line comment (/* and */)
8 Viewing PHP files PHP files executed on the web server Therefore we cannot save them anywhere and view them, as with HTML files Must save.php files in subdirectory of web server /var/www/ on many Linux configurations www directory of your user directory on Athena Make call to web server via domain name (google.com), IP address ( ), or localhost if on your own computer
9 PHP Syntax: Variables, Operators, and Strings Charles Liu
10 Variables Store values for future reference, use variable name to refer to the value stored in it $x = 42; // store the value 42 in $x echo $x; // prints 42 echo $x+1; // prints 43, value of $x is still 42 $x = hello! // type of $x can change PHP is a loosely-typed language Do not need to declare the type of a variable Type can change throughout the program
11 Operators Arithmetic operators +, -, *, /, % (modulus remainder after division) Logical AND (&&), OR ( ), NOT (!) Assignment operators Shorthand for assignment operators: $x += $y equivalent to $x = $x + $y Also works with subtraction, multiplication, division, modulus, and string concatenation
12 == versus === Two equality operators == tests for equality in value but not necessarily type === tests for identity in value AND type == ignores the distinction between: Integers, floating point numbers, and strings containing the same numerical value Nonzero numbers and boolean TRUE Zero and boolean FALSE Empty string, the string 0 and boolean FALSE Any other non-empty string and boolean TRUE
13 Strings A sequence of characters Single and double quotes: Suppose $str = 42; echo With single quotes, str is $str ; output: With single quotes, str is $str echo With double quotes, str is $str ; output: With double quotes, str is 42
14 Strings Concatenation of strings the. operator $a = hello ; $b = world ; echo $a.. $b.! ; // prints hello world! String functions Length: strlen() Position of substring: strpos() More on string functions:
15 PHP Syntax: Conditional and Looping Statements Charles Liu
16 Conditional Statements if (condition / boolean expression) { statements else if (another condition) { statements // there may be more than one else if block else { statements $x = 5; if ($x == 5) { echo The variable x has value 5! ;
17 The while loop while (condition) { statements $x = 2; while ($x < 1000) { echo $x. n ; // \n is newline character $x = $x * $x; Value of $x $x < 1000? Result 2 TRUE prints 2 4 TRUE prints 4 16 TRUE prints TRUE prints FALSE exits loop
18 The do-while loop The code within the loop is executed at least once, regardless of whether the condition is true do { statements while (condition); equivalent to: statements while (condition) { statements
19 The for loop for (init; condition; increment) { statements equivalent to: init while (condition) { statements increment Prints the first 10 positive integers and their squares: for ($i = 1; $i <= 10; $i++) { echo $i. :. ($i * $i). \n ;
20 PHP Syntax: Functions and Global Variables Charles Liu
21 Defining your own functions function function_name ($arg1, $arg2) { function code function parameters return $var // optional Example: a simple multiply function function multiply($x, $y) { echo $x * $y; echo \n ; multiply(5, 1.2); prints 6 $a = 5; $b = 1.2; multiply($a, $b); prints 6 $a = array(1,2,3); multiply($a, $b); error $a = string multiply($a, $b); prints 0 (?!)
22 Return values A function can return a value after it is done Use this value in future computation, use like a variable, assign value to a variable A modified multiply function function multiply($x, $y) { return $x * $y; multiply(2,3); prints nothing! returns value, but we don t store anywhere echo multiply(2,3); prints 6 $a = multiply(2,3); assigns the value 6 to the variable $a $b = multiply(multiply(2,3), multiply(3,4)); assigns the value 72 to the variable $b
23 Return values A function can return at most once, and it can only return one value If it does not return anything, assignments will result in NULL A function ends after it returns, even if there is code following the return statement function do_stuff($x) { if ($x % 2 == 0) { // if even return $x/2 // exits function at this point // this is ONLY executed if x is odd $x += 5; if ($x < 10) { $x += 3; return x;
24 Making function calls Code inside of a function is not executed unless the function is called. Code outside of functions is executed whenever the program is executed. <?php // some code function1(); // makes function call to function1(), which // in turn calls function3() function function1() { // some code function3(); function function2() { // some code function function3() { // some code?> // makes function call to function3() // this function is never called!
25 Variable scope Variables declared within a function have local scope Can only be accessed from within the function <?php function function1() { // some code $local_var = 5; echo $local_var + 3; // prints 8 // this variable is LOCAL to // function1() // some code function1(); echo $local_var; // does nothing, since $local_var is // out of scope?>
26 Global variable scope Variables declared outside a function have global scope Must use global keyword to gain access within functions <?php function function1() { echo $a; // does nothing, $a is out of scope global $a; // gain access to $a within function echo $a; // prints 4 // some code $a = 4; // $a is a global variable function1();?>
27 PHP Syntax: Arrays Charles Liu
28 Arrays as a list of elements Use arrays to keep track of a list of elements using the same variable name, identifying each element by its index, starting with 0 $colors = array( red, blue, green, black, yellow ); To add an element to the array: $colors[] = purple ; To remove an element from the array: unset($colors[2]); $colors = array_values($colors);
29 Arrays as key-value mappings Use arrays to keep track of a set of unique keys and the values that they map to called an associative array $favorite_colors = array( Joe => blue, Elena => green, Mark => brown, Adrian => black, Charles => red ); To add an element to the array: $favorite_colors[ Bob ] = purple ; To remove an element from the array: unset($favorite_colors[ Charles ]); Keys must be unique: $favorite_colors[ Joe ] = purple overwrites blue
30 Recap: arrays print_r($array_name) function lets you easily view the contents of an array PHP arrays as a list $colors = array( red, blue, green, black, yellow ); $colors[] = purple; // add to the list //remove blue from list unset($colors[1]); $colors = array_values($colors); PHP arrays as a map $favorite_colors = array( Joe => blue, Elena => green, Mark => brown, Adrian => black, Charles => red ); $colors[ random person ] = white ; unset($colors[ Adrian ]);
31 PHP More about arrays and the for-each loop Charles Liu
32 All arrays are associative Take our example of a list: $colors = array( red, blue, green, black, yellow ); print_r($colors) gives: Array( [0] => red [1] => blue [2] => green [3] => black [4] => yellow ) Turns out all arrays in PHP are associative arrays In the example above, keys were simply the index into the list Each element in an array will have a unique key, whether you specify it or not.
33 Specifying the key/index Thus, we can add to a list of elements with any arbitrary index Using an index that already exists will overwrite the value $colors = array( red, blue, green, black, yellow ); $colors[5] = gray ; // the next element is gray $colors[8] = pink ; // not the next index, works anyways $colors[7] = orange // out of order works as well
34 Array functions isset($array_name[$key_value]) tells whether a mapping exists AND is non-null unset($array_name[$key_value]) removes the key-value mapping associated with $key_value in the array The unset() function does not re-index and will leave gaps in the indices of a list of elements since it simply removes the key-value pairing without touching any other elements array_keys($array_name) and array_values($array_name) returns lists of the keys and values of the array
35 Adding elements without specifying the key Recall that we did not specify the key when adding to a list of elements: $colors = array('red', 'blue', 'green', 'black', 'yellow'); $colors[] = 'purple'; PHP automatically takes the largest integer key that has ever been in the array, and adds 1 to get the new key $favorite_colors = array( Joe => blue, Elena => green, Mark => brown, Adrian => black, Charles => red ); $favorite_colors[] = 'new color 1'; // key is 0 $favorite_colors[7] = 'another new color'; $favorite_colors[] = 'yet another color'; // key is 8 unset($favorite_colors[8]); $favorite_colors[] = 'color nine'; // key is 9, the old // maximum is 8 even though it no longer exists!
36 The for-each loop The for-each loops allow for easy iteration over all elements of an array. foreach ($array_name as $value) { code here foreach ($array_name as $key => $value) { code here foreach ($colors as $color) { echo $color; // simply prints each color foreach ($colors as $number => color) { echo $number => $color ; // prints color with index // to change an element: // $colors[$number] = $new_color;
37 PHP HTTP Requests and Forms Charles Liu
38 Superglobals A few special associative arrays that can be accessed from anywhere in a PHP file Always $_ALLCAPS The $_SERVER superglobal gives information about server and client $_SERVER[ SERVER_ADDR ] server IP $_SERVER[ REMOTE_ADDR ] client IP $_SERVER[ HTTP_USER_AGENT ] client OS and browser
39 Passing information to the server Sometimes, we require additional values be passed from client to server Login: username and password Form information to be stored on server GET request: pass information via the URL =firstvalue&secondparam=secondvalue Access values server-side using $_GET superglobal $_GET[ firstparam ] => firstvalue $_GET[ secondparam ] => secondvalue
40 When to use $_GET vs. $_POST GET requests are sent via the URL, and can thus be cached, bookmarked, shared, etc GET requests are limited by the length of the URL POST requests are not exposed in the URL and should be used for sensitive data There is no limit to the amount of information passed via POST
41 Dealing with forms Forms are generally used to collect data, whether the data needs to be stored on the server (registration) or checked against the server (login) 2 components to a form: The HTML generating the form itself The server-side script that the form data is sent to (via GET or POST), taking care of the processing involved Server should respond appropriately, redirecting the user to the appropriate destination or generating the appropriate page
42 Forms: client-side <html> <head> <title> A Form Example </title> </head><body> <form action="welcome.php" method="post"> Name: <br /> <input type="text" name="name" /><br /> Phone Number: <br /> <input type="text" name="phone" /><br /> <input type="submit" value="submit"> </form> </body> </html> form action where to send the form data method how to send the data (GET or POST) Name attributes become the keys used to access the corresponding fields in the $_GET or $_POST arrays
43 Forms: server-side <html> <head><title>this is welcome.php</title></head> <body> The name that was submitted was: <?php echo $_POST['name'];?><br /> The phone number that was submitted was: <?php echo $_POST['phone'];?><br /> </body> </html> A simple PHP file that displays what was entered into the form Can do many other things server-side depending on the situation Note the use of $_POST
44 PHP Cookies and Sessions Charles Liu
45 Cookies and sessions HTTP is stateless it does not keep track of the client between requests But sometimes we need to keep track of this information Shopping cart Remember me on login sites 2 solutions to this issue Cookies small file stored client-side Sessions relevant data stored on the server
46 Cookies Cookies are stored on the user s browser, and are sent to the server on every relevant request The $_COOKIE superglobal makes a cookie a keyvalue pairing Store user information as a value with a known key Never assume a cookie has been set. Always check with isset($_cookie[$cookie_name]) before trying to use the cookie s value
47 The setcookie() function To set a cookie in PHP: setcookie(name, value, expire, path, domain); Name and value correspond to $_COOKIE[$name] = $value Expiration cookie will no longer be read after the expiration Useful to use time in seconds relative to the present: time() + time in seconds until expiration Path and domain refer to where on the site the cookie is valid Usually / for path and the top-level domain (yoursitename.com) To delete a cookie, set a new cookie with same arguments but expiration in the past
48 Setting cookies Cookies are set via the HTTP header Must be sent before the body before any HTML, CSS, JS, etc. This code will not work: if(isset($_cookie["6470"])) { $value = $_COOKIE['6470']; echo "Cookie is set to $value"; else { $value = 0; // after echo statement: will not work! setcookie("6470", $value+1, time()+60*60);?>
49 Example of cookie usage First visit: form with a text field for user s name Subsequent visits: Welcome message with the name Store the name field in a cookie: Key: name ; value: the user s name input into the form Remember: when a cookie is set (the setcookie function call is made), the cookie can only be accessed on the next request
50 Contents of the HTTP request/response CLIENT NO COOKIES COOKIES SET HTTP request: GET cookie.php HTTP reponse: HTML form HTTP request: GET name= username HTTP response: set cookie HTTP request: cookie name = username HTTP response: updated cookie SERVER isset($_cookie[ name ])? NO isset($_get[ name ])? NO respond with HTML form isset($_cookie[ name ])? NO isset($_get[ name ])? YES set cookie on client welcome message based on user input isset($_cookie[ name ])? YES isset($_get[ name ])? NO update cookie on client welcome message based on cookie
51 Case 1: cookies already set if(isset($_cookie["name"])) { $cookie_exp = time()+60*60; // one hour $name = $_COOKIE["name"]; setcookie("name", $name, $cookie_exp); if (isset($_cookie["visits"])) { $num_visits = $_COOKIE["visits"]+1; setcookie("visits", $num_visits, $cookie_exp); echo "Welcome $name! "; if (isset($_cookie["visits"])) { echo "You've visited $num_visits times";
52 Cases 2&3: first and second visits // case 2: upon submission of form else if (isset($_get["name"])) { $name = $_GET["name"]; setcookie("name", $name, $cookie_exp); setcookie("visits", 2, $cookie_exp); echo "Welcome $name! This is your second visit."; // case 3: first visit: need to show form else { <form action="<?php $_SERVER["PHP_SELF"]?>" method="get"> Enter your name here: <input type="text" name="name" /> <br /><input type="submit" /> </form>
53 Sessions Two main disadvantages of cookies Limited in size by browser Stored client-side can be tampered with Sessions store user data on the server Limited only by server space Cannot be modified by users A potential downside to sessions is that they expire when the browser is closed Sessions are identified by a session id: often a small cookie! But the rest of the data is still stored on the server
54 Using sessions Call session_start() at top of every page to start session Sets a cookie on the client: must follow same rules as cookies (before any HTML, CSS, JS, echo or print statements) Access data using the $_SESSION superglobal, just like $_COOKIE, $_GET, or $_POST <?php session_start(); if (isset($_session["count"])) { $_SESSION["count"] += 1; echo "You\'ve visited here {$_SESSION['count'] times"; else { $_SESSION["count"] = 1; echo "You\'ve visited once";?>
55 Removing sessions Remove an individual element of the $_SESSION superglobal unset($_session[ key_name ]); The session still exists and can be modified. Destroy the entire session, remove all data Use the function session_destroy() $_SESSION no longer valid Will need to call session_start() to start a new session
56 Recap: a comparison COOKIES SESSIONS Where is data stored? Locally on client Remotely on server Expiration? Variable determined when cookie is set Session is destroyed when the browser is closed Size limit? Depends on browser Depends only on server (practically no size limit) Accessing information? $_COOKIE $_SESSION General use? Remember small things about the user, such as login name. Remember things after re-opening browser Remembering varying amount of data about the user in one browsing session
57 PHP MySQL Charles Liu
58 Databases and MySQL Recall the basic reason for server-side programming We need to store client data or look up data stored on the server Databases give us an easy way to issue commands to insert, select, organize, and remove data MySQL: open-source database, relatively easy to set up, easy to use with PHP Other SQL databases, as well as non-sql options such as MongoDB
59 Connecting to MySQL MySQL database server can contain many databases, each of which can contain many tables Connecting to the server via PHP: $db = mysql_connect(server, username, password); if (!$db) { // terminate and give error message die(mysql_error()); mysql_select_db(database_name, $db); $db is a database resource type. We use this variable to refer to the connection created
60 Making SQL queries PHP function for making queries: mysql_query(query_string, db_resource); Queries that return information, such as SELECT: returns a resource $result = mysql_query(query_string, $db); In this case, this resource is stored in the variable $result Other queries, returns TRUE upon success. All queries return FALSE on failure. Best practice is to handle the error (e.g. die(mysql_error()))
61 Never trust user input
62 SQL injection Attacker guesses the format of a query, then exploits If the attacker is able to form a valid SQL query using one of the input fields, then there may be unintended results Look at this code which simply displays the phone number given a correct username and password
63 SQL injection: example $db = mysql_connect("localhost", "6470user", "6470") or die(mysql_error()); mysql_select_db("6470example", $db) or die(mysql_error()); if (isset($_post["username"]) && isset($_post["password"])) { $user = $_POST["username"]; $pass = $_POST["password"]; $query = "SELECT PHONE FROM userinfo WHERE USER='$user' and PASSWORD='$pass'"; echo $query. "<br />"; $result = mysql_query($query, $db); $row = mysql_fetch_assoc($result); if ($row) { echo "Phone number is: {$row['phone']"; else { echo "Invalid user or password";
64 SQL injection: example The issue here is that we are trusting user input. What if the user inserts the string randompass OR 1=1 as the password? Resulting query: SELECT PHONE FROM userinfo WHERE USER= username and PASSWORD= randompass OR 1=1 1=1 always true. We can get the server to give the phone number regardless of username/password! Fix: must pass ALL user input through the function mysql_real_escape_string()
65 Retrieving information from a query Loop over the returned $result resource, row by row mysql_fetch_assoc() function: turns a row of the result into key-value pairs, where keys are the names of the fields and their values are the corresponding values in the table $result = mysql_query(query, $db); while ($row = mysql_fetch_assoc($result)) { $col1 = $row['column_1_name']; $col2 = $row['column_2_name']; // and so forth...
66 A registration-login example Login page Check username and password If already logged in (use sessions!), welcome the user by name Link to register page Register page Form for registration If registration is successful, confirm the username Link back to login page Complete code can be downloaded from the video lectures website
67 A shared database resource Both login and register pages use the same database connection Put database connection, select database code into the same file Reference the connection resource ($db) in other files <?php $db = mysql_connect("localhost", "6470user", "6470") or die(mysql_error()); mysql_query("create DATABASE IF NOT EXISTS 6470example") or die(mysql_error()); mysql_select_db("6470example", $db) or die(mysql_error()); mysql_query("create TABLE IF NOT EXISTS users (USERNAME VARCHAR(2000), PASSWORD VARCHAR(2000))") or die(mysql_error());?>
68 The login page handle login request if (isset($_post["username"]) && isset($_post["password"])) { require("db.php"); // establish DB connection $user = $_POST["username"]; $pass = $_POST["password"]; $query = "SELECT PASSWORD from users WHERE USERNAME='". mysql_real_escape_string($user). "'"; $result = mysql_query($query, $db) or die(mysql_error()); $row = mysql_fetch_assoc($result); if ($pass == $row["password"]) { $_SESSION["username"] = $user; else { echo "Invalid username or password <br />";
69 The register page if (isset($_post["username"]) && isset($_post["password"])) { require("db.php"); $user = mysql_real_escape_string($_post["username"]); $pass = mysql_real_escape_string($_post["password"]); $query = "INSERT INTO users VALUES ('$user', '$pass')"; mysql_query($query, $db) or die(mysql_error()); echo "Registration for $user was successful <br /><br />"; // HTML login <a href> tag else { // HTML form
70 MySQL recap Connecting to database $db= mysql_connect(location, username, password) mysql_select_db(db_name, $db) Making a query $result = mysql_query(query_string, $db) Getting results of query while($row = mysql_fetch_assoc($result)) Sanitizing user input $username = mysql_real_escape_string($_post[ username ])
71 PHP Conclusion Charles Liu
72 What we ve talked about Purpose of server-side programming Basic PHP syntax, arrays, functions Specifics to websites: cookies, sessions, HTTP requests and forms, MySQL Other server-side solutions: ASP.NET Python PHP s extensive documentation:
73 GOOD LUCK!
Introduction to Server-Side Programming. Charles Liu
Introduction to Server-Side Programming Charles Liu Overview 1. Basics of HTTP 2. PHP syntax 3. Server-side programming 4. Connecting to MySQL Request to a Static Site Server: 1. Homepage lookup 2. Send
PHP Tutorial From beginner to master
PHP Tutorial From beginner to master PHP is a powerful tool for making dynamic and interactive Web pages. PHP is the widely-used, free, and efficient alternative to competitors such as Microsoft's ASP.
PHP Authentication Schemes
7 PHP Authentication Schemes IN THIS CHAPTER Overview Generating Passwords Authenticating User Against Text Files Authenticating Users by IP Address Authenticating Users Using HTTP Authentication Authenticating
PHP COOKIES, SESSIONS,
PHP COOKIES, SESSIONS, AND SESSION VARIABLES Fall 2009 CSCI 2910 Server Side Web Programming Objectives Understand and use Cookies in PHP scripts. Understand and use Sessions and Session variables in PHP
Short notes on webpage programming languages
Short notes on webpage programming languages What is HTML? HTML is a language for describing web pages. HTML stands for Hyper Text Markup Language HTML is a markup language A markup language is a set of
Multimedia im Netz Online Multimedia Winter semester 2015/16. Tutorial 03 Major Subject
Multimedia im Netz Online Multimedia Winter semester 2015/16 Tutorial 03 Major Subject Ludwig- Maximilians- Universität München Online Multimedia WS 2015/16 - Tutorial 03-1 Today s Agenda Quick test Server
Real SQL Programming 1
Real 1 We have seen only how SQL is used at the generic query interface an environment where we sit at a terminal and ask queries of a database. Reality is almost always different: conventional programs
Advanced Tornado TWENTYONE. 21.1 Advanced Tornado. 21.2 Accessing MySQL from Python LAB
21.1 Advanced Tornado Advanced Tornado One of the main reasons we might want to use a web framework like Tornado is that they hide a lot of the boilerplate stuff that we don t really care about, like escaping
JAVASCRIPT AND COOKIES
JAVASCRIPT AND COOKIES http://www.tutorialspoint.com/javascript/javascript_cookies.htm Copyright tutorialspoint.com What are Cookies? Web Browsers and Servers use HTTP protocol to communicate and HTTP
Web Programming with PHP 5. The right tool for the right job.
Web Programming with PHP 5 The right tool for the right job. PHP as an Acronym PHP PHP: Hypertext Preprocessor This is called a Recursive Acronym GNU? GNU s Not Unix! CYGNUS? CYGNUS is Your GNU Support
Certified PHP/MySQL Web Developer Course
Course Duration : 3 Months (120 Hours) Day 1 Introduction to PHP 1.PHP web architecture 2.PHP wamp server installation 3.First PHP program 4.HTML with php 5.Comments and PHP manual usage Day 2 Variables,
«W3Schools Home Next Chapter» JavaScript is THE scripting language of the Web.
JS Basic JS HOME JS Introduction JS How To JS Where To JS Statements JS Comments JS Variables JS Operators JS Comparisons JS If...Else JS Switch JS Popup Boxes JS Functions JS For Loop JS While Loop JS
Working with forms in PHP
2002-6-29 Synopsis In this tutorial, you will learn how to use forms with PHP. Page 1 Forms and PHP One of the most popular ways to make a web site interactive is the use of forms. With forms you can have
Chapter 2: Interactive Web Applications
Chapter 2: Interactive Web Applications 2.1 Interactivity and Multimedia in the WWW architecture 2.2 Interactive Client-Side Scripting for Multimedia (Example HTML5/JavaScript) 2.3 Interactive Server-Side
Advanced Web Technology 10) XSS, CSRF and SQL Injection 2
Berner Fachhochschule, Technik und Informatik Advanced Web Technology 10) XSS, CSRF and SQL Injection Dr. E. Benoist Fall Semester 2010/2011 Table of Contents Cross Site Request Forgery - CSRF Presentation
CSCI110 Exercise 4: Database - MySQL
CSCI110 Exercise 4: Database - MySQL The exercise This exercise is to be completed in the laboratory and your completed work is to be shown to the laboratory tutor. The work should be done in week-8 but
INFORMATION BROCHURE Certificate Course in Web Design Using PHP/MySQL
INFORMATION BROCHURE OF Certificate Course in Web Design Using PHP/MySQL National Institute of Electronics & Information Technology (An Autonomous Scientific Society of Department of Information Technology,
Government Girls Polytechnic, Bilaspur
Government Girls Polytechnic, Bilaspur Name of the Lab: Internet & Web Technology Lab Title of the Practical : Dynamic Web Page Design Lab Class: CSE 6 th Semester Teachers Assessment:20 End Semester Examination:50
Internet Technologies. World Wide Web (WWW) Proxy Server Network Address Translator (NAT)
Internet Technologies World Wide Web (WWW) Proxy Server Network Address Translator (NAT) What is WWW? System of interlinked Hypertext documents Text, Images, Videos, and other multimedia documents navigate
HTML Basics(w3schools.com, 2013)
HTML Basics(w3schools.com, 2013) What is HTML? HTML is a language for describing web pages. HTML stands for Hyper Text Markup Language. HTML is a markup language A markup language is a set of markup tags.
Designing for Dynamic Content
Designing for Dynamic Content Course Code (WEB1005M) James Todd Web Design BA (Hons) Summary This report will give a step-by-step account of the relevant processes that have been adopted during the construction
Multimedia im Netz Online Multimedia Winter semester 2015/16. Tutorial 02 Minor Subject
Multimedia im Netz Online Multimedia Winter semester 2015/16 Tutorial 02 Minor Subject Ludwig- Maximilians- Universität München Online Multimedia WS 2015/16 - Tutorial 02 for minor subject students 1 Today
A table is a collection of related data entries and it consists of columns and rows.
CST 250 MySQL Notes (Source: www.w3schools.com) MySQL is the most popular open-source database system. What is MySQL? MySQL is a database. The data in MySQL is stored in database objects called tables.
Script Handbook for Interactive Scientific Website Building
Script Handbook for Interactive Scientific Website Building Version: 173205 Released: March 25, 2014 Chung-Lin Shan Contents 1 Basic Structures 1 11 Preparation 2 12 form 4 13 switch for the further step
Portals and Hosted Files
12 Portals and Hosted Files This chapter introduces Progress Rollbase Portals, portal pages, portal visitors setup and management, portal access control and login/authentication and recommended guidelines
ISI ACADEMY Web applications Programming Diploma using PHP& MySQL
ISI ACADEMY for PHP& MySQL web applications Programming ISI ACADEMY Web applications Programming Diploma using PHP& MySQL HTML - CSS - JavaScript PHP - MYSQL What You'll Learn Be able to write, deploy,
Fachgebiet Technische Informatik, Joachim Zumbrägel
Computer Network Lab 2015 Fachgebiet Technische Informatik, Joachim Zumbrägel Overview Internet Internet Protocols Fundamentals about HTTP Communication HTTP-Server, mode of operation Static/Dynamic Webpages
PHP MySQL vs. Unity. Introduction. The PHP side. The Unity side
PHP MySQL vs. Unity Introduction When using the Unity game engine, there are methods to connect your game to a MySQL database over the internet. The easiest way is to use JavaScript and PHP, especially
SQL Injection Attack Lab Using Collabtive
Laboratory for Computer Security Education 1 SQL Injection Attack Lab Using Collabtive (Web Application: Collabtive) Copyright c 2006-2011 Wenliang Du, Syracuse University. The development of this document
Advanced Web Security, Lab
Advanced Web Security, Lab Web Server Security: Attacking and Defending November 13, 2013 Read this earlier than one day before the lab! Note that you will not have any internet access during the lab,
USING MYWEBSQL FIGURE 1: FIRST AUTHENTICATION LAYER (ENTER YOUR REGULAR SIMMONS USERNAME AND PASSWORD)
USING MYWEBSQL MyWebSQL is a database web administration tool that will be used during LIS 458 & CS 333. This document will provide the basic steps for you to become familiar with the application. 1. To
InternetVista Web scenario documentation
InternetVista Web scenario documentation Version 1.2 1 Contents 1. Change History... 3 2. Introduction to Web Scenario... 4 3. XML scenario description... 5 3.1. General scenario structure... 5 3.2. Steps
Novell Identity Manager
AUTHORIZED DOCUMENTATION Manual Task Service Driver Implementation Guide Novell Identity Manager 4.0.1 April 15, 2011 www.novell.com Legal Notices Novell, Inc. makes no representations or warranties with
A SQL Injection : Internal Investigation of Injection, Detection and Prevention of SQL Injection Attacks
A SQL Injection : Internal Investigation of Injection, Detection and Prevention of SQL Injection Attacks Abhay K. Kolhe Faculty, Dept. Of Computer Engineering MPSTME, NMIMS Mumbai, India Pratik Adhikari
Forms, CGI Objectives. HTML forms. Form example. Form example...
The basics of HTML forms How form content is submitted GET, POST Elements that you can have in forms Responding to forms Common Gateway Interface (CGI) Later: Servlets Generation of dynamic Web content
Facebook Twitter YouTube Google Plus Website Email
PHP MySQL COURSE WITH OOP COURSE COVERS: PHP MySQL OBJECT ORIENTED PROGRAMMING WITH PHP SYLLABUS PHP 1. Writing PHP scripts- Writing PHP scripts, learn about PHP code structure, how to write and execute
Exploits: XSS, SQLI, Buffer Overflow
Exploits: XSS, SQLI, Buffer Overflow These vulnerabilities continue to result in many active exploits. XSS Cross Site Scripting, comparable to XSRF, Cross Site Request Forgery. These vulnerabilities are
Load testing with. WAPT Cloud. Quick Start Guide
Load testing with WAPT Cloud Quick Start Guide This document describes step by step how to create a simple typical test for a web application, execute it and interpret the results. 2007-2015 SoftLogica
Oracle Forms Services Secure Web.Show_Document() calls to Oracle Reports
Oracle Forms Services Secure Web.Show_Document() calls to Oracle Reports $Q2UDFOH7HFKQLFDO:KLWHSDSHU )HEUXDU\ Secure Web.Show_Document() calls to Oracle Reports Introduction...3 Using Web.Show_Document
CSCI110: Examination information.
CSCI110: Examination information. The exam for CSCI110 will consist of short answer questions. Most of them will require a couple of sentences of explanation of a concept covered in lectures or practical
Project 2: Web Security Pitfalls
EECS 388 September 19, 2014 Intro to Computer Security Project 2: Web Security Pitfalls Project 2: Web Security Pitfalls This project is due on Thursday, October 9 at 6 p.m. and counts for 8% of your course
Application Security Testing. Generic Test Strategy
Application Security Testing Generic Test Strategy Page 2 of 8 Contents 1 Introduction 3 1.1 Purpose: 3 1.2 Application Security Testing: 3 2 Audience 3 3 Test Strategy guidelines 3 3.1 Authentication
Internet Technologies
QAFQAZ UNIVERSITY Computer Engineering Department Internet Technologies HTML Forms Dr. Abzetdin ADAMOV Chair of Computer Engineering Department aadamov@qu.edu.az http://ce.qu.edu.az/~aadamov What are forms?
Lesson 7 - Website Administration
Lesson 7 - Website Administration If you are hired as a web designer, your client will most likely expect you do more than just create their website. They will expect you to also know how to get their
Criteria for web application security check. Version 2015.1
Criteria for web application security check Version 2015.1 i Content Introduction... iii ISC- P- 001 ISC- P- 001.1 ISC- P- 001.2 ISC- P- 001.3 ISC- P- 001.4 ISC- P- 001.5 ISC- P- 001.6 ISC- P- 001.7 ISC-
HTML Tables. IT 3203 Introduction to Web Development
IT 3203 Introduction to Web Development Tables and Forms September 3 HTML Tables Tables are your friend: Data in rows and columns Positioning of information (But you should use style sheets for this) Slicing
CS412 Interactive Lab Creating a Simple Web Form
CS412 Interactive Lab Creating a Simple Web Form Introduction In this laboratory, we will create a simple web form using HTML. You have seen several examples of HTML pages and forms as you have worked
Web Application Security Considerations
Web Application Security Considerations Eric Peele, Kevin Gainey International Field Directors & Technology Conference 2006 May 21 24, 2006 RTI International is a trade name of Research Triangle Institute
MASTERTAG DEVELOPER GUIDE
MASTERTAG DEVELOPER GUIDE TABLE OF CONTENTS 1 Introduction... 4 1.1 What is the zanox MasterTag?... 4 1.2 What is the zanox page type?... 4 2 Create a MasterTag application in the zanox Application Store...
Finding XSS in Real World
Finding XSS in Real World by Alexander Korznikov nopernik@gmail.com 1 April 2015 Hi there, in this tutorial, I will try to explain how to find XSS in real world, using some interesting techniques. All
SQL Injection for newbie
SQL Injection for newbie SQL injection is a security vulnerability that occurs in a database layer of an application. It is technique to inject SQL query/command as an input via web pages. Sometimes we
CTIS 256 Web Technologies II. Week # 1 Serkan GENÇ
CTIS 256 Web Technologies II Week # 1 Serkan GENÇ Introduction Aim: to be able to develop web-based applications using PHP (programming language) and mysql(dbms). Internet is a huge network structure connecting
EVALUATING COMMERCIAL WEB APPLICATION SECURITY. By Aaron Parke
EVALUATING COMMERCIAL WEB APPLICATION SECURITY By Aaron Parke Outline Project background What and why? Targeted sites Testing process Burp s findings Technical talk My findings and thoughts Questions Project
JavaScript and Dreamweaver Examples
JavaScript and Dreamweaver Examples CSC 103 October 15, 2007 Overview The World is Flat discussion JavaScript Examples Using Dreamweaver HTML in Dreamweaver JavaScript Homework 3 (due Friday) 1 JavaScript
SECURING APACHE : THE BASICS - III
SECURING APACHE : THE BASICS - III Securing your applications learn how break-ins occur Shown in Figure 2 is a typical client-server Web architecture, which also indicates various attack vectors, or ways
Designing and Implementing an Online Bookstore Website
KEMI-TORNIO UNIVERSITY OF APPLIED SCIENCES TECHNOLOGY Cha Li Designing and Implementing an Online Bookstore Website The Bachelor s Thesis Information Technology programme Kemi 2011 Cha Li BACHELOR S THESIS
Advanced Web Development SCOPE OF WEB DEVELOPMENT INDUSTRY
Advanced Web Development Duration: 6 Months SCOPE OF WEB DEVELOPMENT INDUSTRY Web development jobs have taken thе hot seat when it comes to career opportunities and positions as a Web developer, as every
LAMP [Linux. Apache. MySQL. PHP] Industrial Implementations Module Description
![LAMP [Linux. Apache. MySQL. PHP] Industrial Implementations Module Description](/thumbs/26/9110665.jpg "LAMP [Linux. Apache. MySQL. PHP] Industrial Implementations Module Description")
LAMP [Linux. Apache. MySQL. PHP] Industrial Implementations Module Description Mastering LINUX Vikas Debnath Linux Administrator, Red Hat Professional Instructor : Vikas Debnath Contact
How to Create a Dynamic Webpage
Intro to Dynamic Web Development ACM Webmonkeys @ UIUC, 2010 Static vs Dynamic "Static" is an adjective meaning "does not change". In the context of web programming, it can be used several different ways,
The full setup includes the server itself, the server control panel, Firebird Database Server, and three sample applications with source code.
Content Introduction... 2 Data Access Server Control Panel... 2 Running the Sample Client Applications... 4 Sample Applications Code... 7 Server Side Objects... 8 Sample Usage of Server Side Objects...
LAB MANUAL CS-322364(22): Web Technology
RUNGTA COLLEGE OF ENGINEERING & TECHNOLOGY (Approved by AICTE, New Delhi & Affiliated to CSVTU, Bhilai) Kohka Kurud Road Bhilai [C.G.] LAB MANUAL CS-322364(22): Web Technology Department of COMPUTER SCIENCE
How To Test Your Web Site On Wapt On A Pc Or Mac Or Mac (Or Mac) On A Mac Or Ipad Or Ipa (Or Ipa) On Pc Or Ipam (Or Pc Or Pc) On An Ip
Load testing with WAPT: Quick Start Guide This document describes step by step how to create a simple typical test for a web application, execute it and interpret the results. A brief insight is provided
Certified PHP Developer VS-1054
Certified PHP Developer VS-1054 Certification Code VS-1054 Certified PHP Developer Vskills certification for PHP Developers assesses the candidate for developing PHP based applications. The certification
An Introduction to Developing ez Publish Extensions
An Introduction to Developing ez Publish Extensions Felix Woldt Monday 21 January 2008 12:05:00 am Most Content Management System requirements can be fulfilled by ez Publish without any custom PHP coding.
How to test and debug an ASP.NET application
Chapter 4 How to test and debug an ASP.NET application 113 4 How to test and debug an ASP.NET application If you ve done much programming, you know that testing and debugging are often the most difficult
Web Security CS25010. 20th November 2012. 2012, Jonathan Francis Roscoe, jjr6@aber.ac.uk Department of Computer Science, Aberystwyth University
Web Security CS25010 20th November 2012 Session Errors Some people are having errors creating sessions: Warning: session_start() [function.session-start]: open(/var/php_sessions/sess_d7hag76hgsfh2bjuhmdamb974,
Technical University of Sofia Faculty of Computer Systems and Control. Web Programming. Lecture 4 JavaScript
Technical University of Sofia Faculty of Computer Systems and Control Web Programming Lecture 4 JavaScript JavaScript basics JavaScript is scripting language for Web. JavaScript is used in billions of
Guide to Analyzing Feedback from Web Trends
Guide to Analyzing Feedback from Web Trends Where to find the figures to include in the report How many times was the site visited? (General Statistics) What dates and times had peak amounts of traffic?
HTML Form Widgets. Review: HTML Forms. Review: CGI Programs
HTML Form Widgets Review: HTML Forms HTML forms are used to create web pages that accept user input Forms allow the user to communicate information back to the web server Forms allow web servers to generate
CGI Programming. What is CGI?
CGI Programming What is CGI? Common Gateway Interface A means of running an executable program via the Web. CGI is not a Perl-specific concept. Almost any language can produce CGI programs even C++ (gasp!!)
Webapps Vulnerability Report
Tuesday, May 1, 2012 Webapps Vulnerability Report Introduction This report provides detailed information of every vulnerability that was found and successfully exploited by CORE Impact Professional during
Sample HP OO Web Application
HP OO 10 OnBoarding Kit Community Assitstance Team Sample HP OO Web Application HP OO 10.x Central s rich API enables easy integration of the different parts of HP OO Central into custom web applications.
Lecture 11 Web Application Security (part 1)
Lecture 11 Web Application Security (part 1) Computer and Network Security 4th of January 2016 Computer Science and Engineering Department CSE Dep, ACS, UPB Lecture 11, Web Application Security (part 1)
JavaScript: Introduction to Scripting. 2008 Pearson Education, Inc. All rights reserved.
1 6 JavaScript: Introduction to Scripting 2 Comment is free, but facts are sacred. C. P. Scott The creditor hath a better memory than the debtor. James Howell When faced with a decision, I always ask,
Contents. 2 Alfresco API Version 1.0
The Alfresco API Contents The Alfresco API... 3 How does an application do work on behalf of a user?... 4 Registering your application... 4 Authorization... 4 Refreshing an access token...7 Alfresco CMIS
Website Login Integration
SSO Widget Website Login Integration October 2015 Table of Contents Introduction... 3 Getting Started... 5 Creating your Login Form... 5 Full code for the example (including CSS and JavaScript):... 7 2
JavaScript Introduction
JavaScript Introduction JavaScript is the world's most popular programming language. It is the language for HTML, for the web, for servers, PCs, laptops, tablets, phones, and more. JavaScript is a Scripting
Check list for web developers
Check list for web developers Requirement Yes No Remarks 1. Input Validation 1.1) Have you done input validation for all the user inputs using white listing and/or sanitization? 1.2) Does the input validation
SQL Injection Attack Lab
Laboratory for Computer Security Education 1 SQL Injection Attack Lab Copyright c 2006-2010 Wenliang Du, Syracuse University. The development of this document is funded by the National Science Foundation
Introduction to Computer Security
Introduction to Computer Security Web Application Security Pavel Laskov Wilhelm Schickard Institute for Computer Science Modern threat landscape The majority of modern vulnerabilities are found in web
Web development... the server side (of the force)
Web development... the server side (of the force) Fabien POULARD Document under license Creative Commons Attribution Share Alike 2.5 http://www.creativecommons.org/learnmore Web development... the server
Magento Security and Vulnerabilities. Roman Stepanov
Magento Security and Vulnerabilities Roman Stepanov http://ice.eltrino.com/ Table of contents Introduction Open Web Application Security Project OWASP TOP 10 List Common issues in Magento A1 Injection
Introduction. Buffer Overflow. SQL Injection. Cross-Site Scripting. Software Security I. Overview. Source: SearchsoftwareQuality.techtarget.
Overview Introduction Buffer Overflow SQL Injection Cross-Site Scripting Source: SearchsoftwareQuality.techtarget.com Introduction Some of the most common and widely exploited software vulnerabilities
Instructor: Betty O Neil
Introduction to Web Application Development, for CS437/637 Instructor: Betty O Neil 1 Introduction: Internet vs. World Wide Web Internet is an interconnected network of thousands of networks and millions
1. Introduction. 2. Web Application. 3. Components. 4. Common Vulnerabilities. 5. Improving security in Web applications
1. Introduction 2. Web Application 3. Components 4. Common Vulnerabilities 5. Improving security in Web applications 2 What does World Wide Web security mean? Webmasters=> confidence that their site won
NGASI AppServer Manager SaaS/ASP Hosting Automation for Cloud Computing Administrator and User Guide
NGASI AppServer Manager SaaS/ASP Hosting Automation for Cloud Computing Administrator and User Guide NGASI SaaS Hosting Automation is a JAVA SaaS Enablement infrastructure that enables web hosting services
MYSQL DATABASE ACCESS WITH PHP
MYSQL DATABASE ACCESS WITH PHP Fall 2009 CSCI 2910 Server Side Web Programming Typical web application interaction Database Server 3 tiered architecture Security in this interaction is critical Web Server
Intell-a-Keeper Reporting System Technical Programming Guide. Tracking your Bookings without going Nuts! http://www.acorn-is.
Intell-a-Keeper Reporting System Technical Programming Guide Tracking your Bookings without going Nuts! http://www.acorn-is.com 877-ACORN-99 Step 1: Contact Marian Talbert at Acorn Internet Services at
Perl/CGI. CS 299 Web Programming and Design
Perl/CGI CGI Common: Gateway: Programming in Perl Interface: interacts with many different OSs CGI: server programsprovides uses a well-defined users with a method way to to gain interact access with to
Online Multimedia Winter semester 2015/16
Multimedia im Netz Online Multimedia Winter semester 2015/16 Tutorial 04 Major Subject Ludwig-Maximilians-Universität München Online Multimedia WS 2015/16 - Tutorial 04-1 Today s Agenda Repetition: Sessions:
A Brief Introduction to MySQL
A Brief Introduction to MySQL by Derek Schuurman Introduction to Databases A database is a structured collection of logically related data. One common type of database is the relational database, a term
Security Test s i t ng Eileen Donlon CMSC 737 Spring 2008
Security Testing Eileen Donlon CMSC 737 Spring 2008 Testing for Security Functional tests Testing that role based security functions correctly Vulnerability scanning and penetration tests Testing whether
CTF Web Security Training. Engin Kirda ek@ccs.neu.edu
CTF Web Security Training Engin Kirda ek@ccs.neu.edu Web Security Why It is Important Easiest way to compromise hosts, networks and users Widely deployed ( payload No Logs! (POST Request Difficult to defend
Intro to Web Programming. using PHP, HTTP, CSS, and Javascript Layton Smith CSE 4000
Intro to Web Programming using PHP, HTTP, CSS, and Javascript Layton Smith CSE 4000 Intro Types in PHP Advanced String Manipulation The foreach construct $_REQUEST environmental variable Correction on
Web Development using PHP (WD_PHP) Duration 1.5 months
Duration 1.5 months Our program is a practical knowledge oriented program aimed at learning the techniques of web development using PHP, HTML, CSS & JavaScript. It has some unique features which are as
PDG Software. Site Design Guide
PDG Software Site Design Guide PDG Software, Inc. 1751 Montreal Circle, Suite B Tucker, Georgia 30084-6802 Copyright 1998-2007 PDG Software, Inc.; All rights reserved. PDG Software, Inc. ("PDG Software")
Web Application Security
Web Application Security John Zaharopoulos ITS - Security 10/9/2012 1 Web App Security Trends Web 2.0 Dynamic Webpages Growth of Ajax / Client side Javascript Hardening of OSes Secure by default Auto-patching
DIPLOMA IN WEBDEVELOPMENT
DIPLOMA IN WEBDEVELOPMENT Prerequisite skills Basic programming knowledge on C Language or Core Java is must. # Module 1 Basics and introduction to HTML Basic HTML training. Different HTML elements, tags
CSE 135 Server Side Web Languages Lecture # 7. State and Session Management
State and Session Management Addressing HTTP Statelessness HTTP being stateless, in other words having no memory from page view to page view, can make Web programming a hassle. A variety of techniques
http://alice.teaparty.wonderland.com:23054/dormouse/bio.htm
Client/Server paradigm As we know, the World Wide Web is accessed thru the use of a Web Browser, more technically known as a Web Client. 1 A Web Client makes requests of a Web Server 2, which is software