Cambridge TECHNICALS OCR LEVEL 3 CAMBRIDGE TECHNICAL CERTIFICATE/DIPLOMA IN IT WEB SERVER SCRIPTING A/601/0443 LEVEL 3 UNIT 26 GUIDED LEARNING HOURS: 60 UNIT CREDIT VALUE: 10
WEB SERVER SCRIPTING A/601/0443 LEVEL 3 AIM AND PURPOSE OF THE UNIT The aim of the unit is for learners to understand the principles and be able to identify the different languages that are available for server-side. Learners will be able to identify potential issues, as well as benefits of using in a professional website. The unit will provide learners with the knowledge to implement server-side scripts in a microsite, and create a content management system with security features. It is essential for learners to have prior knowledge of HTML and database design before undertaking the unit. www.ocr.org.uk 2
Web server Level 3 Unit 26 ASSESSMENT AND GRADING CRITERIA Learning Outcome (LO) Pass Merit Distinction The learner will: The assessment criteria are the pass requirements for this unit. The learner can: To achieve a merit the evidence must show that, in addition to the pass criteria, the learner is able to: To achieve a distinction the evidence must show that, in addition to the pass and merit criteria, the learner is able to: 1 Understand the principles of web server 2 Be able to use web server 3 Understand the issues affecting web server P1 explain the principles of web server P2 use web server to identify a user s browser and screen resolution P3 upload files to a web server using web server P4 implement, test and document a simple login system using web server P5 implement, test and document a web content management system to meet a defined user need P6 explain the issues surrounding web server M1 compare differences between web server languages M2 assign access rights to different levels of users using web server M3 implement validation for a database data entry form M4 discuss solutions to issues surrounding web server D1 justify the use of web server in websites D2 create cookies to recognise users D3 use filtering to return the most recent data entries 3
TEACHING CONTENT The unit content describes what has to be taught to ensure that learners are able to access the highest grade. Anything which follows an i.e. details what must be taught as part of that area of content. Anything which follows an e.g. is illustrative, it should be noted that where e.g. is used, learners must know and be able to apply relevant examples to their work though these do not need to be the same ones specified in the unit content. LO1 Understand the principles of web server Principles of web server server side, (e.g. definition, difference from client-side ) languages ASP ASP.Net PHP JSP ColdFusion Ruby Python. features syntax variables operators loops functions forms database links. uses in websites database connectivity form processing and validation content management system dynamically generated pages product catalogues payment processing forums polls searches guest books login systems. advantages plugins not required content management systems simplify editing of sites fast loading times scripts are hidden from users improved accessibility. Client-side uses, (e.g. dynamic and interactive content, form validation, browser detection, execute events, create cookies). LO2 Be able to use web server Web Server Scripting identify user settings browser type screen resolution. uploading files to a web server security features simple login system permissions cookies. content management system view add / database entry form edit delete form validation filtering database, (e.g. MySQL) legal requirements for cookies EU cookie law. Testing creating a test plan/table functionality, (e.g. working scripts/functions) software tools, (e.g. debug). Documentation requirements, (e.g. requirements of the system, requirements of the user) architectural and design documentation, (e.g. user interface, database table design) technical documentation, (e.g. commented code). www.ocr.org.uk 4
Web server Level 3 Unit 26 LO3 Understand the issues affecting web server Issues security malicious scripts SQL injection attacks Xss attacks poor passwords programmer coding errors. requirement for installation of software on the server some scripts require databases to store data. Solutions security security patches firewall file and network permissions service logs security tools strong passwords prevention codes. 5
DELIVERY GUIDANCE Understand the principles of web server The server-side language that can be used is optional; appropriate choice might be PHP, ASP or ASP.Net, although any listed in the criteria can be used. Tutors should discuss the different languages that can be used to aid interactivity on websites, followed by features, uses and advantages of using the chosen language. Tutors should make this decision before delivering the unit. The delivery of the practical work could take the form of tutor led demonstration with learner participation, followed by practice exercises. Learners should be made aware of the practical applications of on ecommerce and other types of websites. Research individually or as groups can be carried out to look at a range of websites, identifying where has been used and sharing and comparing findings. Alternatively, tutors could hold group discussions, drawing on learners own experience of implementing scripts through their practice exercises and real-life examples they may have experienced. functionality, (e.g. working internal/external navigation, content loads/works) usability, (viewable in different browsers, easy to use) accessibility, (e.g. additional features function). This can be practiced on existing websites. Understand the issues affecting web server Learners should be taught about the issues affecting web server and the solutions. Examples can be shown from real-life websites that have suffered from security issues, and working in small groups or individually, learners could carry out further research about each topic in the unit content. Research findings could be presented to the rest of the group, as part of a whole class discussion. Be able to use web server Tutors should ensure that learners have the appropriate knowledge of HTML to prepare to create a micro-site, for example creating, setting out the layout and content of pages as well as being able to link web pages together. Tutors should then show examples of web server. This should be followed by teaching through tutor demonstration and learner participation, step by step tutorials or online video tutorials, how to create specific web server examples. Learners will require a reasonable amount of time to practice experimenting with scripts. This should cover identifying user settings, which will require some client-side, uploading files to a web server, how to create a content management system, which would include a data entry form, manipulating data (by validation and filtering) and how to add security (e.g. logins, user accounts and cookies) to a website. It would be appropriate at this stage to discuss the legal requirements for cookies. Learners should be shown good examples of planning documentation; documented code, architectural and design documentation and technical documentation, which can be supported by tutor led discussion and hand out examples. Learners should look at specialist debugging tools and examples of completed test plans/tables. Tutors can discuss good practice when testing ensuring test plans are detailed and action taken where necessary; practice exercises could be used considering aspects such as: www.ocr.org.uk 6
Web server Level 3 Unit 26 SUGGESTED ASSESSMENT SCENARIOS AND TASK PLUS GUIDANCE ON ASSESSING THE SUGGESTED TASKS Assessment Criteria P1, M1, D1 Assessment criteria P1, M1 and D1 can be evidenced by the use of a report or presentation with notes that could be supported by a tutor observation sheet, or recorded video evidence. For P1, learners should explain the principles of web server, looking at a range (at least three) of languages, the features associated with each of the languages. This must be supported by appropriate examples and annotations. For merit criterion M1, learners should compare the differences between web server languages. All of the languages in the teaching content must be covered, discussing their uses and potential advantages and disadvantages of each. For distinction criterion D1, learners should justify the use of web server in websites. Explanation must be detailed with appropriate supporting examples provided. Assessment Criteria P2, P3, P4, P5, M2, M3, D2, D3 Assessment criteria P2, P3, P4, P5, M2, M3, D2 and D3 could be evidenced through the creation of a micro-site or using an existing site. This should be supported by relevant documentation as per the teaching content and should also include a test plan/table for testing functionality of the site. It would be appropriate to also include screenshots of features with annotations of where the language has been used. Learners can use any of the listed server-side languages to produce their evidence. Learners should be aware they will need to link the web pages to a database for the content management system. P2 involves learners creating or using a web server script that specifies the browser and screen resolution that is required by a user. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence. P3 involves learners creating a script to upload files to a server. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence. For P4, learners will implement a simple login system using web server. The evidence will include the components as identified in the teaching content. Evidence will include the specification, plans, commented script, test plan and results and screenshots or video evidence of the system working. The merit criterion M2 is an extension of P4; learners should assign access rights to pages depending on the user login e.g. administrator, operator, and/or visitor. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence. The distinction criterion D2 follows on from P4 and M2, requiring learners to create cookies to recognise users when they log in to the website. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence. For P5, learners will implement a web content management system as per the teaching content. It should then be tested after completion using a test plan or debugging tool with an explanation of the results. Evidence will include the documentation specification to include page plans, a script that includes comments explaining the code used, test plan and results and screenshots or video evidence of the system working. The merit criterion M3 follows on from P5 and requires learners to implement validation for a database data entry form. Learners should provide a script that includes comments explaining the code used and a copy of the form. The distinction criterion D3 follows on from P5 and M3, learners will add some sample content to their web page using the data entry form of the content management system. They can then use to filter information by the most recent entries. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence. Assessment Criteria P6, M4 P6 can be evidenced by the use of a report or presentation with notes supported by a tutor observation sheet, or recorded video evidence. Learners will explain issues that web server can encounter. This must cover the range of topics listed in the teaching content and can be supported by screenshots or links to any real life examples. The merit criterion M4 follows on from P6; learners should discuss in detail the solutions to the issues identified as part of P6. 7
SUGGESTED SCENARIOS For an interview for an emerging website firm, you have been asked to show your abilities. Your employer would like to improve their website by adding more server-side functionality. RESOURCES Dedicated web creation software (e.g. Dreamweaver) Other (Internet, Web Server, Database software e.g. MySQL). www.ocr.org.uk 8
Web server Level 3 Unit 26 MAPPING WITHIN THE QUALIFICATION TO THE OTHER UNITS Unit 12: Website production. Unit 24: Client side customisation of web pages. 9
CONTACT US Staff at the OCR Customer Contact Centre are available to take your call between 8am and 5.30pm, Monday to Friday. We re always delighted to answer questions and give advice. Telephone 02476 851509 Email cambridgetechnicals@ocr.org.uk www.ocr.org.uk