Database-driven Web Application Research Articles

DOOML: A New Database & Object-Oriented Modeling Language for Database-Driven Web Application Design and Development

A database driven web application is a very common software solution to rising business problems. Modeling the database and the software architecture can be challenging, hence there not being one combined modeling language for database and software architecture, specifically suited for web application development. In this paper we present Database object-oriented Modeling Language (DooML) and its primary Archetype Diagram: a notation for specifying the design of a database schema and corresponding object-oriented software architecture. It combines the syntax for drawing Entity Relationship Diagrams, the Relational Model and Universal Modeling Language Class Diagrams as well to create a mixed diagram, stating database design as well as software design specifications. By default, DooML ensures that the approach of advanced web application development is model-driven and both database-oriented as well as object-oriented.

A survey of Life Cycle Inventory database implementations and architectures, and recommendations for new database initiatives

Barriers to interoperability pose a serious challenge in the domain of LCI database development and prevent effective data sharing between LCA practitioners. Through analysis of existing LCI database resources and technology, a set of recommendations was developed to promote interoperability, and thus utility, in developing new LCI data resources, including the forthcoming Canadian Agri-food Life Cycle Data Centre. A review of published literature, user documentation, gray-literature technical reports, and conference proceedings, as well as interviews with LCI database experts, was used to determine current common/best practices in the LCI database field. On this basis, core interoperability criteria and barriers were identified, and potential solutions were explored. A set of minimum, generalizable recommendations for LCI database development was then identified, aimed at ensuring that these core interoperability criteria are met. These recommendations were further informed by current popular practice in computer science and database-driven web application fields. Data exchange format and nomenclature were identified as core interoperability criteria. Both the ILCD and EcoSpold formats and nomenclatures were found to be in widespread use, and are recommended for support to ensure interoperability with the most widely used LCI databases. It was also found that technical implementations of LCI databases largely followed practice in the database-driven web application field, and likely has little effect on interoperability between databases. In addition, third-party data providers and networks such as OpenLCA Nexus, ecoinvent, and the UNEP GLAD network were identified as potential solutions to interoperability challenges, allowing for greater distribution and interoperability of data, with minimal expense for early adoption. A variety of potential solutions were found for interoperability concerns in LCI database development. A final set of five recommendations for format, nomenclature, third-party providers, third-party initiatives, and technical implementation was developed, which can help to ensure a minimum level of interoperability in the development of new LCI database resources. These recommendations will be implemented in the development of the Canadian Agri-Food Life Cycle Data Centre.

Online Database Intrusion Detection System Based on Query Signatures

SQL injection (SQLI) is a major type of attack that threatens the integrity, confidentiality and authenticity or functionality of any database driven web application. It allows the attacker to gain unauthorized access to the back-end database by exploiting the vulnerabilities within the system in order to commit an attack and access resources. Database Intrusion Detection System (DIDS) is the defense against SQLI that is used as a detection and prevention technique to protect any database driven web application. In this paper a proposed system is presented to protect the web application from SQLI. This proposed system uses a new technique of signature- based detection. It depends on secure hash algorithm (SHA-1), which is used to check the signature for the submitted queries and to decide whether these queries are valid, or not. The proposed system can distinguish and prevent hacking attempts by detecting the attacker, blocking his/her request, and preventing him/her from accessing the web application again. The proposed system was tested using Sqlmapproject attacking tool. Sqlmapproject was used to attack the web application (built using PHP and MySQL server) before and after protection. The results show that the proposed system works correctly and it can protect the web application system with good performance and high efficiency.

Trapper: an open source web‐based application to manage camera trapping projects

Summary Camera trapping is increasingly becoming an important tool in ecological research. However, the organization of large collections of multimedia files and especially efficient searching for subsets of data is a challenging task. While the development of project‐specific software solutions is dominating in the camera trapping community, little attention has been paid to more flexible and open‐source solutions supporting diverse camera trapping research projects. We used state of the art and well‐recognized open source software components and programming language python to design and implement trapper, a flexible data base driven web application to manage, classify, integrate, share and re‐use data in camera trapping projects. The main features of trapper are: (i) it is fully open‐source, (ii) it facilitates analysis of videos as well as images, (iii) it provides spatial filtering and web‐mapping, (iv) it allows flexible implementation of specific data collection protocols, (v) it is a multi‐user and role based system which facilitates collaborative work on camera trapping projects, (vi) it supports data re‐use and (re)discovery. trapper can therefore be widely used by ecologists working with a variety of camera trap studies, alone or in collaboration with each other.

A Survey on Authentication Mechanism against SQL Injection in XML

Injection Attacks (SQLIAs) are very serious intrusion attacks on database driven web application because such attacks can lacks the confidentiality and integrity (security) of data (information) in databases. In reality, unauthorized person intrudes to the web database and then after accordingly, enter in the data. To prevent this type of attack various approaches are proposed by analysts but they are not sufficient because most of implementing techniques will not stop all types of attacks. This paper presents the different kinds of SQL Injection attacks on the web based XML data and on the various present SQLIAs prevention techniques . This paper shows the existing SQLIAs prevention techniques which will demand the client side data, one by one and then validate Which will make typical the developer's job to write various different validation codes for each data page which is receiving in the server side. This paper reviewed the various security threats and XML database and analyze the available security mechanism to protect against the above attacks. This paper also presents the various research scopes in XML SQLIAs.

SimEx: Simulation Exercises on Humanitarian Crisis

A Software Engineering Capstone Service Learning project team at Fairfield University developed SimEx (Simulation Exercises on Humanitarian Crisis), a database driven web application for the JUHAN (Jesuits University Humanitarian Action Network) community to educate students on humanitarian actions and to enhance their knowledge on how to react at the time of a crisis. SimEx is accessible to anyone in the JUHAN community around the world and helps facilitate interaction among instructors, researchers, and student including sharing simulation exercise scenarios and providing students simulation exercises on humanitarian actions without any boundaries. SimEx also provides a discussion board to the JUHAN community to facilitate communication and idea sharing. SimEx was implemented in PHP with a MySQL database and several additional PHP plug-ins. In this paper, we describe the issues, process, and outcome of the collaborative service learning project between academia and community and discuss the future direction of SimEx.

GERMAN HOSPITAL DATABASE—ALLOCATION OF PATIENTS TO APPROPRIATE HOSPITALS

Effective response to radiological emergencies requires information about available qualified hospitals and defined methods to timely allocate patients to appropriate hospitals. In Germany, updated information about hospitals concerning their qualification and willingness to treat radiological emergency patients is not summarized. The objectives were to identify qualified hospitals, assess hospital capacities and treatment capabilities, to examine willingness to respond to various radiological emergencies and to develop a concept for matching patients to hospitals. A Germany-wide combined postal/Web survey of 99 selected hospitals conducted in 2007 covered relevant organizational characteristics, hospital resources, treatment expertise, and the willingness to accept radiological emergency patients by a self-reported written questionnaire with 57 items. Survey results were documented in a Microsoft Access database. A database-driven Web application was developed to allocate patients to hospitals. Of 99 hospitals, 69 responded and 54 indicated their willingness to accept radiological emergency patients. 17,512 total hospital beds, 2,084 intensive care, and 170 reverse isolation beds were reported. Availability of laboratory and in-patient departments ranged from 14 radiobiology to 47 laboratory medicine departments and from 13 burn care to 52 trauma surgery departments. 48 and 40 hospitals stated treatment competence for local and whole body external exposure, respectively. 34 and 29 hospitals reported treatment expertise for contamination and incorporation, respectively. In this publication baseline data of qualified hospitals concerning capacities and competence to manage radiological emergency patients are presented, and an allocation concept for radiological emergency patients is provided.

Rapid Web Application Development: A Ruby on Rails Tutorial

Ruby on Rails (Rails) is a powerful Web application framework based on the dynamic object-oriented (OO) language Ruby. Full support for Web 2.0 and Web services, and extremely rapid development capability, enable it to power high-traffic Web sites such as yellowpages.com and reliablehealth.com. Far from being yet another quick-and-dirty scripting environment, Rails incorporates important programming in the large features suited for scalability. This hands-on tutorial introduces Rails through a database-driven Web application that also showcases Ajax (Asynchronous JavaScript and XML) and Web services.

Luwak: a content management solution

PurposeTo inform librarians about the benefits, costs, and technologies involved in implementing a content management system.Design/methodology/approachA discussion of how XML is used to separate content from presentation, how this technology is used in a home‐grown freeware application, and the results of converting a static website into a database driven one through the use of this application.FindingsDemonstrates that converting to a dynamic, application driven web site results in a more flexible, efficient, and consistent web presence.Research limitations/implicationsEvery library is unique and what worked well at Rensselaer might not work as well elsewhere. Luwak is currently only available to organizations at Rensselaer.Practical implicationsA useful primer on how a conversion like this happens and on the sort of features that can make a database driven web application run smoothly.Originality/valueThis paper provides a unique account of one libraries' experience in making the sort of transition that will become increasingly important for all library web sites.

LARALink: a web application for cytogenetic linkage analysis

Genomic and expression data have increased dramatically over the last several years. This is primarily due to the completion of the human genome project as well as an upsurge in the use of various high-throughput technologies. Recent attempts to correlate genomic and expression data have stimulated the scientific community to determine how this data can be used within a clinical setting (P Khatri et al., Genomics 2002: 79: 266; LJ van't Veer et al., Nature 2002: 415: 530). LARALink (Loci Analysis for Rearrangements Link) is a database-driven web application that utilizes several public datasets to analyze clinical cytogenetic data to identify candidate genes. LARALink allows UniGene clusters or single-nucleotide polymorphisms (SNPs) to be queried for multiple patients by cytoband, chromosome marker, or base pair. The results can be further refined with the use of an anatomical site, developmental stage, pathology, or cell-type expression filter. Once a set of UniGene clusters (expressed genes) has been identified either for a single patient or for a shared region among multiple patients, the expression-distribution profile, expressed sequence tags (ESTs), or online mendelian inheritance in man (OMIM) entries are displayed. The utility of this tool is shown by its application to both research and clinical medicine. LARALink is a public resource available at: http://www.laralink.bioinformatics.wayne.edu:8080/unigene.

Just-in-time database-driven Web applications.

"Just-in-time" database-driven Web applications are inexpensive, quickly-developed software that can be put to many uses within a health care organization. Database-driven Web applications garnered 73873 hits on our system-wide intranet in 2002. They enabled collaboration and communication via user-friendly Web browser-based interfaces for both mission-critical and patient-care-critical functions. Nineteen database-driven Web applications were developed. The application categories that comprised 80% of the hits were results reporting (27%), graduate medical education (26%), research (20%), and bed availability (8%). The mean number of hits per application was 3888 (SD = 5598; range, 14-19879). A model is described for just-in-time database-driven Web application development and an example given with a popular HTML editor and database program.

The Research Wizard: An Innovative Web Application for Patron Service

SUMMARY The Research Wizard, a database-driven Web application developed at the University of Nebraska at Omaha's University Library, provides opportunities to offer patron services in new and innovative ways. Running on an open source PHP/MySQL framework known as iDriver, the Wizard delivers customized content via topical keyword access. Library Web site maintenance frustrations have eased with this move to database-backed Web page generation. While service to patrons is more dynamic and responsive, implementation and ongoing development of this tool bring forth challenges and new perspectives for staff in the consideration of patron needs as well as in the evolution of the Li-brary's Web presence.