Scribd
Upload
12 views30 pages

7.-NT208-Lecture7 - WebServer

The document discusses web servers and how they work. A web server is software that responds to client requests and serves web pages. It communicates with clients using HTTP and typically supports additional functionality beyond just file serving like email and database access. The most popular web server is Apache which runs on Linux, Windows and other operating systems.

Uploaded by

22521511
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
12 views30 pages

7.-NT208-Lecture7 - WebServer

The document discusses web servers and how they work. A web server is software that responds to client requests and serves web pages. It communicates with clients using HTTP and typically supports additional functionality beyond just file serving like email and database access. The most popular web server is Apache which runs on Linux, Windows and other operating systems.

Uploaded by

22521511
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 30

Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh

Bộ môn An toàn thông tin

Web Server
Ths. Trần Tuấn Dũng – [email protected]
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Introduction
A web server is specialised software that responds to client (I.e.
web browser) requests

Every web site requires a web server to process client requests and
‘serve up’ the pages

Web servers used to service Internet, intranets and extranets

Note that web server in this context is software. Server machine is also referred to as the web server.
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

System architecture
A web server is part of a multi-tier application

Functionality is divided into separate tiers or groupings

Tiers can be on same computer or on separate computers

Web applications are often three tiered:

• Information tier (also called data tier)


• Middle tier
• Client tier (user interface tier)
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Common web system architecture


Application User interface. The client interacts
Web with the middle tier to make requests and to
Client tier retrieve data from the information tier
Browser

Controls the interactions between


Application the application clients and application
Middle tier data. Enforces business rules.
tier
implements presentation logic. Web
server typically supports this tier.

Maintains data for the application.


Data typically stores in a relational
Information tier Database database management system
(RDBMS)
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Hyper Text Transfer Protocol


Basic function of web server is to act as HTTP server

Web servers communicate with clients using a


Response-Request protocol: HTTP
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Client-Server model and HTTP


• A request is generated by a client (by browser software)
- Most common requests are “Get” and “Post”
• Request reaches the appropriate web-server
• Request is processed by the web-server

• A response is formulated by the web server and sent back to


the client (e.g. web page contents)
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Client-Server model and HTTP


• HTTP is the standard for transferring World Wide Web
documents

• Usually to port 80 (or 443 for HTTPs)

• HTTP messages (requests and responses) between client and


server are human readable
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Http: Requests from client


• Request
– Get resource
– Type of browser
– Name of host
– etc
• First line is request-line. Contains the nature of the Request
– GET: Get a file from the server

– POST: Post data to the server

– PUT: Update some resource


Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Requests from client: HTML


<body>
<form method= “post” action =“process.php”>
Word to look up: <Input type=“text” name=“word”>
<input types=“submit”>
</form>
</body>

Indicates a post request


Data in form is posted to the server
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Response from web server


• Response
– 200 = Status code
• All’s well
– Type of server
– Other contents etc

HTTP/1.1 200 OK
Date: Thu, 22 July 1998 18:40:55 GMT
Server: Apache 1.3.5 (Unix) PHP/3.0.6
Last-Modified: Mon, 19 July 1997 16:03:22 GMT
Content-Type: text/html
Content-Length: 12987
...
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

HTTP Response Status Codes


• 1XX: Provide information to the client
• 2XX: Correct response has occurred.
• 3XX: Browser must carry out some further action in order
for the request to be successful. For example, the code
301 indicates that the resource that was requested has
been permanently moved to another location.
• 4XX: Something has gone wrong; for example, the most
frequent status code that is returned is 404 which
indicates that the resource that has been requested
cannot be found.
• 5XX: Server has experienced a problem. For example, the
status code 503 indicates that the service requested has
not been able to be carried out.
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Accessing web servers


• Must know host name on which web server resides
Protocol Domain name

• Remote web servers accessed using


• URL:
http://www.example.com/home.php
• OR IP address http://207.60.134.230 Page name

• Local web servers (on same machine) accessed


using machine name or localhost
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Web server functionality


HTTP Server (at a minimum)
But usually includes many other functions such as:
• File Transfer Protocol (FTP) server
• Simple Mail Transfer Protocol (SMTP) server (for
Email)
• Web development and publishing functionality
• Support for specific server side technologies e.g.
JSP, SSIs
• Security features
• And more
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Apache web server


Most popular web server (almost 70% of all web sites use it)

Freeware.

Frequent updates. Maintained by the Apache Software


Foundation - Website www.apache.org
Welcome! - The Apache Software Foundation.htm

Runs on Unix, Linux and Windows operating systems

Supports a range of server-side technologies, but can require


additional software installation

We learn how to use Apache with Xampp in previous lesson


Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Apache HTTP Server


❑ The Apache HTTP server is a software (or program) that runs in
the background under an appropriate operating system, which
supports multi-tasking, and provides services to the client web
browsers.
❑ It is an open-source software with cross-platform functionality.
● What is daemon?
In multitasking computer operating systems, a daemon is a computer program that
runs as a background process, rather than being under the direct control of an
interactive user.
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Apache HTTP Server


● Apache can be installed on a variety of operating systems. Regardless of the
platform used, a hosted website will typically have four main directories:

htdocs config logs cgi-bin


• Static • Plain • Server • Cgi script
page text log • Cgi
• Dynami • Error program
c log
content
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Virtual host
● An Apache web server can host multiple websites on the SAME server. You
do not need separate server machine and apache software for each website.
This can achieved using the concept of Virtual Host or VHost.
● Any domain that you want to host on your web server will have a separate
entry in apache configuration file.

Types of Virtual Host :


✔ Name based Virtual Host
✔ IP based Virtual Host
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Configuring .htaccess
Control what user can do, where user can go on your website

Must very careful and have deep understanding

Misconfiguration can lead to security issue

Path Traversal!!
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Configuring .htaccess – Example


How website redirect routes: Assuming we rename a file from foo.html ->
bar.html. But users are familiar with foo so we need to make sure user access
with foo.html still be able to access same content

We write */foo.html -> */bar.html

RewriteEngine on
RewriteRule "^/foo\.html$" "/bar.html"
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

API Server
Sometimes we need a server is able to provide data and handle requests for
multiple website with various technology

Web server like Apache will not be suitable since it require complex
configuration

Flexible Server => Only need to transfer enough data for end user site
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Json API
Json Format

{data: “hello world”}


Web Page Server Database
GET /hello
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Restful API
API Request/Response Standard

REST (REpresentational State Transfer) defines a set of constraints for how


the architecture of a distributed, Internet-scale hypermedia system, such as
the Web, should behave

Control how we use methods: GET, POST, PUT, DELETE,…

Control how we use status codes: 200, 400,…


Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Restful API
API Request/Response Standard

• GET: Retrieve data from server


• POST: Send data to server
• PUT: Update, store data on server
• DELETE: Remove data from server
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Restful API
API Request/Response Standard

• 200 OK: Success Request, no error


• 201 Created: POST request and data was stored successfully
• 404 Not found: No resource found
• 400 Bad request: Wrong data posted, malform request,…
• 401 Unauthorized, 403 Forbidden: No permission
• …
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Restful API
API Request/Response Standard

Plural form users


• GET /users: Get all users
• GET /users/:id: Get user with id
• POST /users: Create users
• PUT /users/:id: Update all fields all specific user
• PATCH /users/:id: Update few fields
• DELETE /users/:id: Remove user
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

MVC Architecture
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Laravel MVC – Models


<?php namespace App;

use Illuminate\Database\Eloquent\Model;

class Car extends Model {


//
}
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Laravel MVC – Controllers


<?php

namespace App\Http\Controllers;

use Illuminate\Http\Request;
use App\Http\Requests;
use App\Http\Controllers\Controller;
class CarController extends Controller {
/** * Display a listing of the resource. * *
@return Response */
public function index() { // }
/** * Show the form for creating a new resource. * *
@return Response */
public function create() { // }
…
Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Laravel MVC – Routes


Route::resource('cars', 'CarController');

Automatically map with functions in controllers


Trường Đại học Công nghệ Thông tin – Đại học Quốc gia Hồ Chí Minh
Bộ môn An toàn thông tin

Laravel MVC – Views


public function show($id) {
$car = Car::find($id);
return view('cars.show', array('car' => $car));
}
Modify the controller to return view
<!DOCTYPE html>
<html>
<head>
<title>Car {{ $car->id }}</title>
</head>
<body>
<h1>Car {{ $car->id }}</h1>
<ul>
<li>Make: {{ $car->make }}</li>
<li>Model: {{ $car->model }}</li>
<li>Produced on: {{ $car->produced_on }}</li> </ul>
</body>
</html>
View are just HTML

You might also like