Master this deck with 77 terms through effective study methods.
Imported from Quizlet
Serves as client-side, Integrates: HTML, CSS, Client-side Programs
used for creating web pages, Elements consists of tags enclosed in angle brackets,
Specifies how document written in mark up language should be presented/styled.
Static web pages
To be more useful and interactive for users.
Content that can change based on user actions, input, or new data.
Software framework created by Microsoft to create dynamic content
Predominately used by Internet Explorer
Had security issues and lack of cross-platform support
Not supported by iOS and Android
Most popular choices of programming languages for web pages to create dynamic content
-Interaction with the user -Control the browser -Communicate Asynchronously with the server
To deliver content to clients (browsers).
Web pages, images, style sheets, and scripts.
Content was static.
Hosting static web pages and sending them to browsers.
Core & Extensions
The core part handles requests from the clients.
If a request asks for static content, the core will process it and send it back.
If a request is for dynamic content, the core will invoke the corresponding extension.
Processes dynamic content request.
After the dynamic content is generated, an HTML page will be sent to core and core will forward it to the client.
The core is typically called as HTTP Server.
Extension is the web application.
HTTP server software.
Apache, (IIS), and Nginx.
It can host multiple websites on a single server.
Using a configuration file.
The Common Gateway Interface
Can be written in any programming language including C, Perl, Java, Visual Basic etc.
A variation of the CGI, faster
Requesting data from a specified resource
Retrieve data
They use GET to perform actions that should be done with POST
Submitting data
Put data in the URL, making it visible when shared.
Browsers record URLs visited by the user, including data from GET requests.
Data are not recorded in the browser history.
It's important not to use GET method when sending passwords or other sensitive data.
Data as a part of URL are recorded in the browser history for GET requests.
Web servers are designed to be stateless.
Each HTTP request will be considered as a separate request even if the requests are related.
A user may send multiple requests, each request will be sent as a separate TCP connection.
Each request will be handled by different processes/threads.
Web server software will not maintain the state of the requests.
Web applications developed to be used by users are meant to be stateful.
Because the web is stateless.
Technically no, because IP addresses change.
HTTP Cookies.
To save information on the client side.
The browser.
Attach cookies in every request.
A cookie that stores session ID.
Identifies a session.
Typically maintained on the server.
Given to the browser to identify a user.
Typically created after user login.
Having the session ID equals having access.
Session ID is security sensitive.
A random number.
Asynchronous JavaScript and XML
To create interactive web applications.
It allows JavaScript to send HTTP requests to a web server in the background without reloading the entire page.
The browser uses a callback function to update the data on the page.
A function that is executed after the server response is received, updating the web page with the new data.
A default security policy applied on Ajax.
If a page initiating the Ajax comes from a web server A, only response from the same web server can be given to the call back function.
The Ajax request will successfully get the response if the page holding the JavaScript code comes from the same web server.
To compromise privacy.
Same-origin policy.
Access to the user's Facebook data.
Access to the user's Google data.
A security measure that restricts how documents or scripts from one origin can interact with resources from another origin.
Cross-Origin Resource Sharing, a standard that allows cross-origin Ajax requests.
It allows web applications to make requests to domains other than the one that served the web page.
By providing a whitelist of allowed origins.
www.bank99.com