People Data and the Web Forms and CGI CGI. Facilitating interactive web applications
|
|
|
- Adrian Newman
- 10 years ago
- Views:
Transcription
1 CGI Facilitating interactive web applications
2 Outline In Informatics 1, worksheet 7 says You will learn more about CGI and forms if you enroll in Informatics 2. Now we make good on that promise. First we look at the Hypertext Transfer Protocol (HTTP). Then we consider the Common Gateway Interface (CGI). In the following lectures we will consider cookies and HTML forms.
3 Hypertext Transfer Protocol (HTTP) One of many protocols for the transfer of data on the Internet. Emerged in the early 1990s, and has gone through a couple revisions. Version 1.1 appears to the be the most popular version in use today. Originally intended for transmission of hypertext documents (text with links). Now used (or abused) for a wide variety of media (video, audio, web apps). Supplanted the gopher protocol, and reduced the significance of others, such as ftp (file transfer) and nntp (news groups).
4 Client-Server Architecture IE / Windows Client 1 Client 2 Safari / OSX HTTP Request HTTP Response HTTP Request HTTP Response Server Apache / Linux
5 telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Demonstration of HTTP using the Unix command telnet. Black text is typed input from the user. Red text is output from the telnet program. Green text is output from the web server. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
6 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Connect to port 80 on the server. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
7 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Request a document from the server, using version 1.0 of HTTP protocol. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
8 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Response from the server, using version 1.1 of the HTTP protocol. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
9 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Status code. 302 means redirect to another URI (slight abuse of the standard). HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
10 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Response headers HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
11 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 MIME type. Tells the client what kind of entity appears in the body of the response. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
12 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 HTTP request and response headers are terminated by a blank line. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
13 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Response body (HTML). HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
14 unix> telnet 80 Trying Connected to theage.com.au. Escape character is '^]'. GET /index.html HTTP/1.0 Connection to server closed. HTTP/ Found Date: Sat, 06 Sep :35:48 GMT Server: Apache Location: Content-Length: 209 Connection: close Content-Type: text/html; charset=iso <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>found</h1> <p>the document has moved <a href=" </body></html> Connection closed by foreign host.
15 HTTP is very simple GET - retrieve an entity (document) from the server. POST - submit data to the server (usually via an HTML form) for processing. PUT - send an entity to be stored on the server. DELETE - request the removal of an entity from the server. OPTIONS - ask the server to reveal its capabilities. HEAD - same as GET but only return HTTP headers and not the document. for more details.
16 The Common Gateway Interface (CGI) A standard method which allows the server to construct a dynamic web page (or other entity) in response to a request from a client. The dynamic content is created by a program running on the server, often called a CGI script. The URI for the requested content identifies the name of the CGI script to use. The server locates the CGI script, executes it (possibly with some additional input sent from the client), and sends the output of the script back to the client. The script can be implemented in any programming language (even compiled languages).
17 Input to CGI scripts CGI scripts are executed on behalf of the web server. The server initialises special environment variables to communicate information to the CGI script. Environment variables are provided by the operating system. Post information is given to the script via the standard input device (stdin). This design reflects the Unix roots of CGI (and the web in general).
18 #!/opt/local/bin/python2.5 # A Python CGI program which prints out its environment variables, # and the contents of stdin. import os import sys print 'Content-Type: text/plain' print for var in os.environ: print '%s = %s' % (var, os.environ[var]) print 'stdin = %s' % sys.stdin.read()
19 #!/opt/local/bin/python2.5 # A Python CGI program which prints out its environment variables, # and the contents of stdin. import os import sys print 'Content-Type: text/plain' print Tells the operating system how to execute this script. System dependent. Not needed on IVLE. for var in os.environ: print '%s = %s' % (var, os.environ[var]) print 'stdin = %s' % sys.stdin.read()
20 #!/opt/local/bin/python2.5 # A Python CGI program which prints out its environment variables, # and the contents of stdin. import os import sys print 'Content-Type: text/plain' print for var in os.environ: print '%s = %s' % (var, os.environ[var]) print 'stdin = %s' % sys.stdin.read() Partial HTTP response header (just the MIME type). Server will fill in the rest for us. Note the blank line to indicate the end of the header.
21 #!/opt/local/bin/python2.5 # A Python CGI program which prints out its environment variables, # and the contents of stdin. import os import sys print 'Content-Type: text/plain' print for var in os.environ: print '%s = %s' % (var, os.environ[var]) print 'stdin = %s' % sys.stdin.read() Generate dynamic (text) output which is sent back to the client as response body. Print the contents of the standard input for the script. Print the value of each environment variable.
22 CGI environment variables on IVLE The previous Python script is served on IVLE at the address: We can examine its output by loading it in a web browser (say Firefox). This will show us the values of all the environment variables available to the script when it is run by the web server on IVLE. You would see similar behaviour on other web servers, but some of the values of the environment variables will be different.
23 SERVER_SOFTWARE = IVLE/0.1 SCRIPT_NAME = /~bjpope/info2/mywork/lectures/cgi/env.py SERVER_SIGNATURE = <address>apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 mod_python/ REQUEST_METHOD = GET HTTP_KEEP_ALIVE = 300 SERVER_PROTOCOL = HTTP/1.1 QUERY_STRING = HOME = /home/bjpope HTTP_ACCEPT_CHARSET = ISO ,utf-8;q=0.7,*;q=0.7 HTTP_USER_AGENT = Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-gb; rv: ) Gecko/ Firefox/3.0.1 HTTP_CONNECTION = keep-alive SERVER_NAME = students.informatics.unimelb.edu.au REMOTE_ADDR = PATH_TRANSLATED = /home/bjpope/info2/cgi-lecture/env.py SERVER_PORT = 80 SERVER_ADDR = SERVER_ADMIN = [email protected] HTTP_HOST = students.informatics.unimelb.edu.au REQUEST_URI = /serve/bjpope/info2/cgi-lecture/env.py HTTP_ACCEPT = text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 GATEWAY_INTERFACE = CGI/1.1 HTTP_X_FORWARDED_FOR = REMOTE_PORT = HTTP_ACCEPT_LANGUAGE = en-gb,en;q=0.5 REMOTE_HOST = HTTP_ACCEPT_ENCODING = gzip,deflate PATH_INFO = stdin =
24 SERVER_SOFTWARE = IVLE/0.1 SCRIPT_NAME = /~bjpope/info2/mywork/lectures/cgi/env.py SERVER_SIGNATURE = <address>apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 mod_python/ REQUEST_METHOD = GET HTTP_KEEP_ALIVE = 300 SERVER_PROTOCOL = HTTP/1.1 QUERY_STRING = HOME = /home/bjpope HTTP_ACCEPT_CHARSET = ISO ,utf-8;q=0.7,*;q=0.7 The QUERY_STRING variable, and the standard input are the two key places where the script receives input from the client (via the server). In this example they are empty. HTTP_USER_AGENT = Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-gb; rv: ) Gecko/ Firefox/3.0.1 HTTP_CONNECTION = keep-alive SERVER_NAME = students.informatics.unimelb.edu.au REMOTE_ADDR = PATH_TRANSLATED = /home/bjpope/info2/cgi-lecture/env.py SERVER_PORT = 80 SERVER_ADDR = SERVER_ADMIN = [email protected] HTTP_HOST = students.informatics.unimelb.edu.au REQUEST_URI = /serve/bjpope/info2/cgi-lecture/env.py HTTP_ACCEPT = text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 GATEWAY_INTERFACE = CGI/1.1 HTTP_X_FORWARDED_FOR = REMOTE_PORT = HTTP_ACCEPT_LANGUAGE = en-gb,en;q=0.5 REMOTE_HOST = HTTP_ACCEPT_ENCODING = gzip,deflate PATH_INFO = stdin =
25 Sending input via the query string A query string is everything in a URL to the right of the question mark character: Look what happens when we open this (long) URL in Firefox: name=james+bond&mission=top+secret
26 SERVER_SOFTWARE = IVLE/0.1 SCRIPT_NAME = /~bjpope/info2/mywork/lectures/cgi/env.py SERVER_SIGNATURE = <address>apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 mod_python/ REQUEST_METHOD = GET HTTP_KEEP_ALIVE = 300 SERVER_PROTOCOL = HTTP/1.1 QUERY_STRING = name=james+bond&mission=top+secret HOME = /home/bjpope HTTP_ACCEPT_CHARSET = ISO ,utf-8;q=0.7,*;q=0.7 HTTP_USER_AGENT = Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-gb; rv: ) Gecko/ Firefox/3.0.1 HTTP_CONNECTION = keep-alive SERVER_NAME = students.informatics.unimelb.edu.au REMOTE_ADDR = PATH_TRANSLATED = /home/bjpope/info2/cgi-lecture/env.py SERVER_PORT = 80 SERVER_ADDR = SERVER_ADMIN = [email protected] HTTP_HOST = students.informatics.unimelb.edu.au REQUEST_URI = /serve/bjpope/info2/cgi-lecture/env.py HTTP_ACCEPT = text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 GATEWAY_INTERFACE = CGI/1.1 HTTP_X_FORWARDED_FOR = REMOTE_PORT = HTTP_ACCEPT_LANGUAGE = en-gb,en;q=0.5 REMOTE_HOST = HTTP_ACCEPT_ENCODING = gzip,deflate PATH_INFO = stdin =
27 Special characters in the query string The query string can contain characters which have special meaning, e.g.? & : + % (and whitespace characters). To include such characters in the query string, they must be encoded. The usual way of encoding special characters is to use a hexadecimal number representing the code of the character (though whitespace is encoded as + ). For instance:? is encoded as %3F. The percent sign tells us that the next two characters are hexadecimal encoding numbers. 3F is hexadecimal for sixty three, which is the ASCII code for?
28 Sending input via stdin The CGI script receives input via stdin (the standard input device) when the client sends a POST request (instead of a GET request). The POST method sends the data in the body of the request. The GET method sends the data in the header of the request, as part of the URL (as the query string). There are pros and cons of both approaches. We will get back to the POST request when we see HTML forms in the next lecture.
29 Accessing the CGI input in a systematic way We could just look inside the QUERY_STRING variable and stdin. Troublesome to have to look in both places all the time. If we are receiving input from a HTML form, then the input data is structured like so: name1=value1&name2=value2&name3=value3 where name1, name2, name3 represent input items in the form. It is tedious to deal with the unstructured representation as an encoded string.
30 #!/opt/local/bin/python2.5 # A Python CGI program which demonstrates the use of FieldStorage import cgi print 'Content-Type: text/plain' print store = cgi.fieldstorage() for var in store: print "%s = %s" % (var, store.getvalue(var))
31 #!/opt/local/bin/python2.5 # A Python CGI program which demonstrates the use of FieldStorage import cgi print 'Content-Type: text/plain' print store = cgi.fieldstorage() for var in store: print "%s = %s" % (var, store.getvalue(var)) This function reads the QUERY_STRING and stdin, decodes them, and parses each ʻname=valueʼ entry. It builds a data structure which behaves like a dictionary, mapping each ʻnameʼ to its corresponding ʻvalueʼ.
32 cgi.fieldstorage in Python The previous Python script is served on IVLE at the address: fieldstore.py Consider what happens when we request that URL with the query string name=james+bond&mission=top+secret We get the output: name = James Bond mission = top secret
600-152 People Data and the Web Forms and CGI. HTML forms. A user interface to CGI applications
HTML forms A user interface to CGI applications Outline A simple example form. GET versus POST. cgi.escape(). Input controls. A very simple form a simple form
How to write a CGI for the Apache Web server in C
How to write a CGI for the Apache Web server in C The Com/PC Embedded Gateway Linux (EGL/2) operating system comes with a pre-installed Apache Web server. Please see also mht-cpc1l-07.pdf: How to use the
at () in C:\wamp\www\icaatom-1.2.0\icaatom- 1.2.0\plugins\sfLucenePlugin\lib\vendor\Zend\Search\Lucene\Document.php line 104...
500 Internal Server Error Zend_Search_Lucene_Exception Field name "do_thumbnail_fullpath" not found in document. stack trace at () in C:\wamp\www\icaatom-1.2.0\icaatom- 1.2.0\plugins\sfLucenePlugin\lib\vendor\Zend\Search\Lucene\Document.php
CGI An Example. CGI Model (Pieces)
CGI An Example go to http://127.0.0.1/cgi-bin/hello.pl This causes the execution of the perl script hello.pl Note: Although our examples use Perl, CGI scripts can be written in any language Perl, C, C++,
10. Java Servelet. Introduction
Chapter 10 Java Servlets 227 10. Java Servelet Introduction Java TM Servlet provides Web developers with a simple, consistent mechanism for extending the functionality of a Web server and for accessing
Chapter 27 Hypertext Transfer Protocol
Chapter 27 Hypertext Transfer Protocol Columbus, OH 43210 [email protected] http://www.cis.ohio-state.edu/~jain/ 27-1 Overview Hypertext language and protocol HTTP messages Browser architecture CGI
Web Services April 21st, 2009 with Hunter Pitelka
15 213 The course that gives CMU its Zip! Web Services April 21st, 2009 with Hunter Pitelka Topics HTTP Serving static content Serving dynamic content Web History 1989: 1990: Tim Berners Lee (CERN) writes
GET /FB/index.html HTTP/1.1 Host: lmi32.cnam.fr
GET /FB/index.html HTTP/1.1 Host: lmi32.cnam.fr HTTP/1.1 200 OK Date: Thu, 20 Oct 2005 14:42:54 GMT Server: Apache/2.0.50 (Linux/SUSE) Last-Modified: Thu, 20 Oct 2005 14:41:56 GMT ETag: "2d7b4-14b-8efd9500"
CTIS 256 Web Technologies II. Week # 1 Serkan GENÇ
CTIS 256 Web Technologies II Week # 1 Serkan GENÇ Introduction Aim: to be able to develop web-based applications using PHP (programming language) and mysql(dbms). Internet is a huge network structure connecting
Outline Definition of Webserver HTTP Static is no fun Software SSL. Webserver. in a nutshell. Sebastian Hollizeck. June, the 4 th 2013
Definition of in a nutshell June, the 4 th 2013 Definition of Definition of Just another definition So what is it now? Example CGI php comparison log-file Definition of a formal definition Aisaprogramthat,usingthe
Internet Technologies. World Wide Web (WWW) Proxy Server Network Address Translator (NAT)
Internet Technologies World Wide Web (WWW) Proxy Server Network Address Translator (NAT) What is WWW? System of interlinked Hypertext documents Text, Images, Videos, and other multimedia documents navigate
1. When will an IP process drop a datagram? 2. When will an IP process fragment a datagram? 3. When will a TCP process drop a segment?
Questions 1. When will an IP process drop a datagram? 2. When will an IP process fragment a datagram? 3. When will a TCP process drop a segment? 4. When will a TCP process resend a segment? CP476 Internet
7 Why Use Perl for CGI?
7 Why Use Perl for CGI? Perl is the de facto standard for CGI programming for a number of reasons, but perhaps the most important are: Socket Support: Perl makes it easy to create programs that interface
Chapter 8. Forms and Form Processing
Chapter 8 Forms and Form Processing When users surf the Web, information flows from servers to browsers. But, the Web is not a one-way street. Information can also be collected from end-users by browsers
Hypertext for Hyper Techs
Hypertext for Hyper Techs An Introduction to HTTP for SecPros Bio Josh Little, GSEC ~14 years in IT. Support, Server/Storage Admin, Webmaster, Web App Dev, Networking, VoIP, Projects, Security. Currently
Web Programming. Robert M. Dondero, Ph.D. Princeton University
Web Programming Robert M. Dondero, Ph.D. Princeton University 1 Objectives You will learn: The fundamentals of web programming... The hypertext markup language (HTML) Uniform resource locators (URLs) The
HTTP Fingerprinting and Advanced Assessment Techniques
HTTP Fingerprinting and Advanced Assessment Techniques Saumil Shah Director, Net-Square Author: Web Hacking - Attacks and Defense BlackHat 2003, Washington DC The Web Hacker s playground Web Client Web
URLs and HTTP. ICW Lecture 10 Tom Chothia
URLs and HTTP ICW Lecture 10 Tom Chothia This Lecture The two basic building blocks of the web: URLs: Uniform Resource Locators HTTP: HyperText Transfer Protocol Uniform Resource Locators Many Internet
8/9/16. Server-Side Web Programming Intro. The Hamburger Model. To make a Web server based program
Server-Side Web Programming Intro To make a Web server based program You have to get data in (from user-agent to server) Then process the data, perform some task, etc. You have get data out (from server
Application layer Web 2.0
Information Network I Application layer Web 2.0 Youki Kadobayashi NAIST They re revolving around the web, after all Name any Internet-related buzz: Cloud computing Smartphone Social media... You ll end
How to Run an Apache HTTP Server With a Protocol
HTTP Servers Jacco van Ossenbruggen CWI/VU Amsterdam 1 Learning goals Understand: Basis HTTP server functionality Serving static content from HTML and other files Serving dynamic content from software
The Hyper-Text Transfer Protocol (HTTP)
The Hyper-Text Transfer Protocol (HTTP) Antonio Carzaniga Faculty of Informatics University of Lugano October 4, 2011 2005 2007 Antonio Carzaniga 1 HTTP message formats Outline HTTP methods Status codes
WWW. World Wide Web Aka The Internet. dr. C. P. J. Koymans. Informatics Institute Universiteit van Amsterdam. November 30, 2007
WWW World Wide Web Aka The Internet dr. C. P. J. Koymans Informatics Institute Universiteit van Amsterdam November 30, 2007 dr. C. P. J. Koymans (UvA) WWW November 30, 2007 1 / 36 WWW history (1) 1968
Protocolo HTTP. Web and HTTP. HTTP overview. HTTP overview
Web and HTTP Protocolo HTTP Web page consists of objects Object can be HTML file, JPEG image, Java applet, audio file, Web page consists of base HTML-file which includes several referenced objects Each
INT322. By the end of this week you will: (1)understand the interaction between a browser, web server, web script, interpreter, and database server.
Objective INT322 Monday, January 19, 2004 By the end of this week you will: (1)understand the interaction between a browser, web server, web script, interpreter, and database server. (2) know what Perl
CS615 - Aspects of System Administration
CS615 - Aspects of System Administration Slide 1 CS615 - Aspects of System Administration SMTP, HTTP Department of Computer Science Stevens Institute of Technology Jan Schaumann [email protected]
The Application Layer. CS158a Chris Pollett May 9, 2007.
The Application Layer CS158a Chris Pollett May 9, 2007. Outline DNS E-mail More on HTTP The Domain Name System (DNS) To refer to a process on the internet we need to give an IP address and a port. These
CGI Programming on the World Wide Web
CGI Programming on the World Wide Web By Shishir Gundavaram; ISBN: 1-56592-168-2, 433 pages. First Edition, March 1996. Table of Contents Preface Chapter 1: The Common Gateway Interface (CGI) Chapter 2:
Network Technologies
Network Technologies Glenn Strong Department of Computer Science School of Computer Science and Statistics Trinity College, Dublin January 28, 2014 What Happens When Browser Contacts Server I Top view:
HTTP Protocol. Bartosz Walter <[email protected]>
HTTP Protocol Bartosz Walter Agenda Basics Methods Headers Response Codes Cookies Authentication Advanced Features of HTTP 1.1 Internationalization HTTP Basics defined in
reference: HTTP: The Definitive Guide by David Gourley and Brian Totty (O Reilly, 2002)
1 cse879-03 2010-03-29 17:23 Kyung-Goo Doh Chapter 3. Web Application Technologies reference: HTTP: The Definitive Guide by David Gourley and Brian Totty (O Reilly, 2002) 1. The HTTP Protocol. HTTP = HyperText
Cyber Security Workshop Ethical Web Hacking
Cyber Security Workshop Ethical Web Hacking May 2015 Setting up WebGoat and Burp Suite Hacking Challenges in WebGoat Concepts in Web Technologies and Ethical Hacking 1 P a g e Downloading WebGoat and Burp
INTRUSION DETECTION AND PREVENTION SYSTEM: CGI ATTACKS. A Thesis. Presented to. The Faculty of the Department of Computer Science
INTRUSION DETECTION AND PREVENTION SYSTEM: CGI ATTACKS A Thesis Presented to The Faculty of the Department of Computer Science San José State University In Partial Fulfillment of the Requirements for the
HTTP. Internet Engineering. Fall 2015. Bahador Bakhshi CE & IT Department, Amirkabir University of Technology
HTTP Internet Engineering Fall 2015 Bahador Bakhshi CE & IT Department, Amirkabir University of Technology Questions Q1) How do web server and client browser talk to each other? Q1.1) What is the common
World Wide Web. Before WWW
World Wide Web [email protected] Before WWW Major search tools: Gopher and Archie Archie Search FTP archives indexes Filename based queries Gopher Friendly interface Menu driven queries João Neves 2
Web. Services. Web Technologies. Today. Web. Technologies. Internet WWW. Protocols TCP/IP HTTP. Apache. Next Time. Lecture #3 2008 3 Apache.
JSP, and JSP, and JSP, and 1 2 Lecture #3 2008 3 JSP, and JSP, and Markup & presentation (HTML, XHTML, CSS etc) Data storage & access (JDBC, XML etc) Network & application protocols (, etc) Programming
CONTENT of this CHAPTER
CONTENT of this CHAPTER v DNS v HTTP and WWW v EMAIL v SNMP 3.2.1 WWW and HTTP: Basic Concepts With a browser you can request for remote resource (e.g. an HTML file) Web server replies to queries (e.g.
Introduction Les failles les plus courantes Les injections SQL. Failles Web. Maxime Arthaud. net7. Jeudi 03 avril 2014.
Maxime Arthaud net7 Jeudi 03 avril 2014 Syllabus Introduction Exemple de Requête Transmission de données 1 Introduction Exemple de Requête Transmission de données 2 3 Exemple de Requête Transmission de
Playing with Web Application Firewalls
Playing with Web Application Firewalls DEFCON 16, August 8-10, 2008, Las Vegas, NV, USA Who is Wendel Guglielmetti Henrique? Penetration Test analyst at SecurityLabs - Intruders Tiger Team Security division
Internet Technologies Internet Protocols and Services
QAFQAZ UNIVERSITY Computer Engineering Department Internet Technologies Internet Protocols and Services Dr. Abzetdin ADAMOV Chair of Computer Engineering Department [email protected] http://ce.qu.edu.az/~aadamov
Anatomy of a Pass-Back-Attack: Intercepting Authentication Credentials Stored in Multifunction Printers
Anatomy of a Pass-Back-Attack: Intercepting Authentication Credentials Stored in Multifunction Printers By Deral (PercX) Heiland and Michael (omi) Belton Over the past year, one focus of the Foofus.NET
Lecture 2. Internet: who talks with whom?
Lecture 2. Internet: who talks with whom? An application layer view, with particular attention to the World Wide Web Basic scenario Internet Client (local PC) Server (remote host) Client wants to retrieve
HTTP Response Splitting
The Attack HTTP Response Splitting is a protocol manipulation attack, similar to Parameter Tampering The attack is valid only for applications that use HTTP to exchange data Works just as well with HTTPS
Computer Networks. Lecture 7: Application layer: FTP and HTTP. Marcin Bieńkowski. Institute of Computer Science University of Wrocław
Computer Networks Lecture 7: Application layer: FTP and Marcin Bieńkowski Institute of Computer Science University of Wrocław Computer networks (II UWr) Lecture 7 1 / 23 Reminder: Internet reference model
Web applications. Web security: web basics. HTTP requests. URLs. GET request. Myrto Arapinis School of Informatics University of Edinburgh
Web applications Web security: web basics Myrto Arapinis School of Informatics University of Edinburgh HTTP March 19, 2015 Client Server Database (HTML, JavaScript) (PHP) (SQL) 1 / 24 2 / 24 URLs HTTP
Research of Web Real-Time Communication Based on Web Socket
Int. J. Communications, Network and System Sciences, 2012, 5, 797-801 http://dx.doi.org/10.4236/ijcns.2012.512083 Published Online December 2012 (http://www.scirp.org/journal/ijcns) Research of Web Real-Time
HTTP Caching & Cache-Busting for Content Publishers
HTTP Caching & Cache-Busting for Content Publishers Michael J. Radwin http://public.yahoo.com/~radwin/ OSCON 2005 Thursday, August 4th, 2005 1 1 Agenda HTTP in 3 minutes Caching concepts Hit, Miss, Revalidation
CS640: Introduction to Computer Networks. Applications FTP: The File Transfer Protocol
CS640: Introduction to Computer Networks Aditya Akella Lecture 4 - Application Protocols, Performance Applications FTP: The File Transfer Protocol user at host FTP FTP user client interface local file
Forms, CGI Objectives. HTML forms. Form example. Form example...
The basics of HTML forms How form content is submitted GET, POST Elements that you can have in forms Responding to forms Common Gateway Interface (CGI) Later: Servlets Generation of dynamic Web content
The Web: some jargon. User agent for Web is called a browser: Web page: Most Web pages consist of: Server for Web is called Web server:
The Web: some jargon Web page: consists of objects addressed by a URL Most Web pages consist of: base HTML page, and several referenced objects. URL has two components: host name and path name: User agent
Security-Assessment.com White Paper Leveraging XSRF with Apache Web Server Compatibility with older browser feature and Java Applet
Security-Assessment.com White Paper Leveraging XSRF with Apache Web Server Compatibility with older browser feature and Java Applet Prepared by: Roberto Suggi Liverani Senior Security Consultant Security-Assessment.com
APACHE WEB SERVER. Andri Mirzal, PhD N28-439-03
APACHE WEB SERVER Andri Mirzal, PhD N28-439-03 Introduction The Apache is an open source web server software program notable for playing a key role in the initial growth of the World Wide Web Typically
1. The Web: HTTP; file transfer: FTP; remote login: Telnet; Network News: NNTP; e-mail: SMTP.
Chapter 2 Review Questions 1. The Web: HTTP; file transfer: FTP; remote login: Telnet; Network News: NNTP; e-mail: SMTP. 2. Network architecture refers to the organization of the communication process
By Bardia, Patit, and Rozheh
HTTP By Bardia, Patit, and Rozheh HTTP - Introduction - Hyper Text Transfer Protocol -uses the TCP/IP technology -has had the most impact on the World Wide Web (WWW) - specs in RFC 2616 (RFC2616) HTTP
Security Issues in Web Programming. Robert M. Dondero, Ph.D. Princeton University
Security Issues in Web Programming Robert M. Dondero, Ph.D. Princeton University 1 Objectives You will learn about: Authentication and authorization Secure storage of usernames and passwords Secure data
Data Communication I
Data Communication I Urban Bilstrup (E327) 090901 [email protected] www2.hh.se/staff/urban Internet - Sweden, Northern Europe SUNET NORDUnet 2 Internet - Internet Addresses Everyone should be able
Dynamic Content. Dynamic Web Content: HTML Forms CGI Web Servers and HTTP
Dynamic Web Content: HTML Forms CGI Web Servers and HTTP Duncan Temple Lang Dept. of Statistics UC Davis Dynamic Content We are all used to fetching pages from a Web server. Most are prepared by a human
Polyglot: Automatic Extraction of Protocol Message Format using Dynamic Binary Analysis
Polyglot: Automatic Extraction of Protocol Message Format using Dynamic Binary Analysis Juan Caballero, Heng Yin, Zhenkai Liang Carnegie Mellon University Dawn Song Carnegie Mellon University & UC Berkeley
Web Archiving for ediscovery
RELIABLE AND DEFENSIBLE WEB ARCHIVING Web Archiving for ediscovery Web and social media archiving services for ediscovery Right now, regulatory agencies are refining their views on how they define web
TCP/IP Networking An Example
TCP/IP Networking An Example Introductory material. This module illustrates the interactions of the protocols of the TCP/IP protocol suite with the help of an example. The example intents to motivate the
Modern Web Development From Angle Brackets to Web Sockets
Modern Web Development From Angle Brackets to Web Sockets Pete Snyder Outline (or, what am i going to be going on about ) 1.What is the Web? 2.Why the web matters 3.What s unique about
Implementation of Embedded Web server using TEA algorithm
Implementation of Embedded Web server using TEA algorithm Arunkumar G 1, Dr. T.C. Manjunath 2, Harish H.M 3, Jayaprakasha.H 4 1 Department of E&C, S.T.J.I.T, Ranebennur 2 Principal, HKBKCE, Bangalore 3,4
Fachgebiet Technische Informatik, Joachim Zumbrägel
Computer Network Lab 2015 Fachgebiet Technische Informatik, Joachim Zumbrägel Overview Internet Internet Protocols Fundamentals about HTTP Communication HTTP-Server, mode of operation Static/Dynamic Webpages
International Journal of Engineering & Technology IJET-IJENS Vol:14 No:06 44
International Journal of Engineering & Technology IJET-IJENS Vol:14 No:06 44 Data Traffic and Security over Internet via Monitoring and Analyzing the HTTP Protocol Ezmolda Barolli, Loren Nebiaj, Gloria
APACHE HTTP SERVER 2.2.8
LEVEL 3 APACHEHTTP APACHE HTTP SERVER 2.2.8 HTTP://HTTPD.APACHE.ORG SUMMARY Apache HTTP Server is an open source web server application regarded as one of the most efficient, scalable, and feature-rich
Chapter 2: Interactive Web Applications
Chapter 2: Interactive Web Applications 2.1 Interactivity and Multimedia in the WWW architecture 2.2 Interactive Client-Side Scripting for Multimedia (Example HTML5/JavaScript) 2.3 Interactive Server-Side
WHAT IS A WEB SERVER?
4663ch01.qxd_lb 12/2/99 12:54 PM Page 1 CHAPTER 1 WHAT IS A WEB SERVER? Never trust a computer you can t throw out a window. Steve Wozniak CHAPTER OBJECTIVES In this chapter you will learn about: Client/Server
Domain Name System (DNS)
Application Layer Domain Name System Domain Name System (DNS) Problem Want to go to www.google.com, but don t know the IP address Solution DNS queries Name Servers to get correct IP address Essentially
COMP 112 Assignment 1: HTTP Servers
COMP 112 Assignment 1: HTTP Servers Lead TA: Jim Mao Based on an assignment from Alva Couch Tufts University Due 11:59 PM September 24, 2015 Introduction In this assignment, you will write a web server
What is Distributed Annotation System?
Contents ISiLS Lecture 12 short introduction to data integration F.J. Verbeek Genome browsers Solutions for integration CORBA SOAP DAS Ontology mapping 2 nd lecture BioASP roadshow 1 2 Human Genome Browsers
1 Introduction: Network Applications
1 Introduction: Network Applications Some Network Apps E-mail Web Instant messaging Remote login P2P file sharing Multi-user network games Streaming stored video clips Internet telephone Real-time video
LabVIEW Internet Toolkit User Guide
LabVIEW Internet Toolkit User Guide Version 6.0 Contents The LabVIEW Internet Toolkit provides you with the ability to incorporate Internet capabilities into VIs. You can use LabVIEW to work with XML documents,
Web Browsing Examples. How Web Browsing and HTTP Works
How Web Browsing and HTTP Works 1 1 2 Lets consider an example that shows how web browsing and HTTP work. The example will cover a simple, but very common case. There are many more details of HTTP that
Internet Technologies_1. Doc. Ing. František Huňka, CSc.
1 Internet Technologies_1 Doc. Ing. František Huňka, CSc. Outline of the Course 2 Internet and www history. Markup languages. Software tools. HTTP protocol. Basic architecture of the web systems. XHTML
Lektion 2: Web als Graph / Web als System
Lektion 2: Web als Graph / Web als System Helmar Burkhart Informatik Universität Basel Helmar.Burkhart@... WT-2-1 Lernziele und Inhalt Web als Graph erkennen Grundelemente von sozialen Netzwerken sehen
Evolution of the WWW. Communication in the WWW. WWW, HTML, URL and HTTP. HTTP Abstract Message Format. The Client/Server model is used:
Evolution of the WWW Communication in the WWW World Wide Web (WWW) Access to linked documents, which are distributed over several computers in the History of the WWW Origin 1989 in the nuclear research
ivoyeur: permission to parse
D A V I D J O S E P H S E N ivoyeur: permission to parse David Josephsen is the author of Building a Monitoring Infrastructure with Nagios (Prentice Hall PTR, 2007) and Senior Systems Engineer at DBG,
Web Development. Owen Sacco. ICS2205/ICS2230 Web Intelligence
Web Development Owen Sacco ICS2205/ICS2230 Web Intelligence Brief Course Overview An introduction to Web development Server-side Scripting Web Servers PHP Client-side Scripting HTML & CSS JavaScript &
CS 5480/6480: Computer Networks Spring 2012 Homework 1 Solutions Due by 9:00 AM MT on January 31 st 2012
CS 5480/6480: Computer Networks Spring 2012 Homework 1 Solutions Due by 9:00 AM MT on January 31 st 2012 Important: No cheating will be tolerated. No extension. CS 5480 total points = 32 CS 6480 total
10.1 The Common Gateway Interface
10.1 The Common Gateway Interface - Markup languages cannot be used to specify computations, interactions with users, or to provide access to databases - CGI is a common way to provide for these needs,
Slides from INF3331 lectures - web programming in Python
Slides from INF3331 lectures - web programming in Python Joakim Sundnes & Hans Petter Langtangen Dept. of Informatics, Univ. of Oslo & Simula Research Laboratory October 2013 Programming web applications
CIT 380: Securing Computer Systems
CIT 380: Securing Computer Systems Scanning CIT 380: Securing Computer Systems Slide #1 Topics 1. Port Scanning 2. Stealth Scanning 3. Version Identification 4. OS Fingerprinting 5. Vulnerability Scanning
Alteon Browser-Smart Load Balancing
T e c h n i c a l T i p TT-0411405a -- Information -- 24-Nov-2004 Contents: Introduction:...1 Associated Products:...1 Overview...1 Sample Configuration...3 Setup...3 Configuring PC1...4 Configuring PC2...4
Web Design and Development ACS-1809
Web Design and Development ACS-1809 Chapter 1 9/9/2015 1 Pre-class Housekeeping Course Outline Text book : HTML A beginner s guide, Wendy Willard, 5 th edition Work on HTML files On Windows PCs Tons of
Internet Technologies 4-http. F. Ricci 2010/2011
Internet Technologies 4-http F. Ricci 2010/2011 Content Hypertext Transfer Protocol Structure of a message Methods Headers Parameters and character encoding Proxy Caching HTTP 1.1: chunked transfer and
HTTP Authentifizierung
HTTP Authentifizierung Valentin Lein Matr. Nr. 0526536 15.12.2010 Computer Technology /21 Inhalt HTTP Basic Authentication Alternative Authentifizierungsmöglichkeiten HTTP Hypertext Transfer Protocol Computer
http://alice.teaparty.wonderland.com:23054/dormouse/bio.htm
Client/Server paradigm As we know, the World Wide Web is accessed thru the use of a Web Browser, more technically known as a Web Client. 1 A Web Client makes requests of a Web Server 2, which is software
The Web History (I) The Web History (II)
Goals of Today s Lecture EE 122: The World Wide Web Ion Stoica TAs: Junda Liu, DK Moon, David Zats http://inst.eecs.berkeley.edu/~ee122/ (Materials with thanks to Vern Paxson, Jennifer Rexford, and colleagues
HTTP - METHODS. Same as GET, but transfers the status line and header section only.
http://www.tutorialspoint.com/http/http_methods.htm HTTP - METHODS Copyright tutorialspoint.com The set of common methods for HTTP/1.1 is defined below and this set can be expanded based on requirements.
No. Time Source Destination Protocol Info 1190 131.859385 128.238.245.34 128.119.245.12 HTTP GET /ethereal-labs/http-ethereal-file1.html HTTP/1.
Ethereal Lab: HTTP 1. The Basic HTTP GET/response interaction 1190 131.859385 128.238.245.34 128.119.245.12 HTTP GET /ethereal-labs/http-ethereal-file1.html HTTP/1.1 GET /ethereal-labs/http-ethereal-file1.html
The World-Wide Web Gateway to Hyper-G: Using a Connectionless Protocol to Access Session-Oriented Services
Diplomarbeit in Telematik, TU Graz Institut für Informationsverarbeitung und Computergestützte neue Medien The World-Wide Web Gateway to Hyper-G: Using a Connectionless Protocol to Access Session-Oriented
Arnaud Becart ip- label 11/9/11
Arnaud Becart ip- label 11/9/11 RUM Synthe2c Tests You should measure HTML and RIA (Flash ) Page Rendering Onload + Full Page Load InteracBons in your page Third Party content How Synthe2c / Real browsers
THE PROXY SERVER 1 1 PURPOSE 3 2 USAGE EXAMPLES 4 3 STARTING THE PROXY SERVER 5 4 READING THE LOG 6
The Proxy Server THE PROXY SERVER 1 1 PURPOSE 3 2 USAGE EXAMPLES 4 3 STARTING THE PROXY SERVER 5 4 READING THE LOG 6 2 1 Purpose The proxy server acts as an intermediate server that relays requests between
Perl/CGI. CS 299 Web Programming and Design
Perl/CGI CGI Common: Gateway: Programming in Perl Interface: interacts with many different OSs CGI: server programsprovides uses a well-defined users with a method way to to gain interact access with to