TAILIEUCHUNG - ICT 5 Web Development - Chapter 10: Web Techniques and Security

ICT 5 Web Development - Chapter 10: Web Techniques and Security products about Environment variables, Setting Response Header, Encoding and escaping, Cross site scripting, Global arrays, Server Information. | Vietnam and Japan Joint ICT HRD Program Content 1. Environment variables 2. Setting Response Header 3. Encoding and escaping 4. Cross site scripting ICT 5 Web Development Chapter 10. Web Techniques and Security Nguyen Thi Thu Trang trangntt@ 2 1. Environment variables . Global arrays If the register_globals option in is enabled (it is disabled by default), PHP default) creates a separate global variable for every form parameter, every piece of request information, and every server configuration value. This functionality is convenient but dangerous, as it lets the browser provide initial values for any of the variables in your program Server configuration and request information i f ti – form parameters – Cookies can be accessible in three different ways from your PHP scripts scripts. Referred to as EGPCS (Environment, GET, POST, Cookies, and Server). 3 4 1 . Global arrays (2) . Global arrays (2) $_FILES $_COOKIE – Contains any cookie values passed as part of the request, where the keys of the array are the names of the cookies – Contains information about any uploaded files $_SERVER $_GET – Contains any parameters that are part of a GET request, where the keys of the array are the names of the form parameters – Contains useful information about the web server, as described in the next section $_ENV – Contains the values of any environment variables, where the keys of the array are the $_POST $ POST – Contains any parameters that are part of a POST request, where the keys of the array are the names of the form parameters names of the environment variables. 5 . Global arrays (2) 6 . Server Information PHP also creates automatically The $_SERVER array contains a lot of useful information from the web server – $ REQUEST $_REQUEST – SERVER_SOFTWARE contains the elements of the $_GET, $_POST, and $_COOKIE arrays all in one array variable. A string that identifies the server (., "Apache/ (Unix)

• Quản trị Web
• ICT 5 Web Development
• Web Techniques
• Web Security
• Environment variables
• Setting Response Header
• Global arrays
• Introduction to Web Programming
• The Internet
• Uniform Resource Identifier
• World Wide Web
• Web site or Website
• Maintaining state through multiple forms
• Multiple Form Web Sessions
• The state through multiform
• PHP Script
• Receiving Hidden Fields in Web Sessions
• OOP in PHP
• Creating an Object
• Accessing attributes
• Building a classing
• Syntax to declare a Class
• Introduction to HTML
• Structured Document
• Document Object Model
• Common HTML Elements
• Nested Elements
• Introduction to PHP
• Publish PHP scripts
• PHP proper syntax
• PHP comments
• Alternative Comment Syntax
• PHP Variables
• HTML Input Forms PHP Variables
• Working with PHP String Variables
• HTML Input Forms
• Conditional Statements
• Using Conditional Test Statements
• Using Loops to Repeat Statements
• Conditional Test Statements
• Using the elseif Clause
• Functions Basic PHP Functions
• Write your own functions
• Using External Script Files
• The abs Functionabs
• The sqrt Function
• Working with Arrays Benefits of arrays
• Sequential arrays
• Multidimensional lists
• Creating Associative Arrays
• Using MySQL with PHP
• MySQL Overview
• Basic SQL commands
• Creating a table
• Updating data for a table
• PHP Advanced
• CardSystems Attack
• Normal Query
• Getting private info
• Different database engines
• PHP Frameworks
• Overview of Design Patterns
• MVC architecture
• Structure of a design pattern
• XHTML Overview
• XML Components
• XML Schema
• XML Validation
• XML Applications
• Using CSS
• Introduction to CSS
• Applying style rules Style class
• CSS box mode
• Useful properties
• Regular Expressions
• String functions
• Regular Expressio
• A Full Script
• Using grouping characters
• JavaScript Overview Window Controls
• Event Handlers
• AJAX Overview
• AJAX Implementation
• JS syntax basic