Web Scripting Languages Research Articles

Applying JSP and Servlets in Introducing Secure Web-based Database for Online Admission System

At the present time websites produce dynamic responses to the user requests. So there is a need for dynamic web Scripting languages. A web page is a server-side dynamic page whose structure is controlled by server-side scripts. The Scripting Language refers to dynamic high level general purpose language. Three most popular web scripting languages are: PHP, JSP and ASP.NET languages in the world. The major requirements for enterprise applications are Performance, Scalability, manageability, code portability, mode of source, Cloud Feasibility, database, security are rapidly increasing. Now the issue in this competitive environment is choosing the best scripting language .the paper basically depicts the use of java server pages as well as servlets in building a web application.variety of topics will be covered in this paper including: Introduction to jsp and servlets , Life cycle and architecture of servlet and jsp ,Difference between jsp and servlets

Development of an Online Examination System Case Study: Cyprus International University

The study set out to develop an online examination system. System design made use of entity relation diagrams (ERDs), case diagrams, site diagrams and object oriented (class) design to model system processes and entities. MYSQL was used to implement the server based database, md5 for encryption. PHP (Hypertext pre-processor) web scripting language was used to enforce interaction with the database. The online examination is an Internet based questionnaire, with questions compiled from different libraries. Its mission is to offer a quick, easy and safe way for students to take the exam. The resulting system was tested and validated. It was able to meet the required specifications and address some limitations of the previous system such as data confidentiality and security.

Clone Detection Techniques for JavaScript and Language Independence: Review

Code clone detection is an active field of study in computer science. Despite its rich history, it lacks focus on web scripting languages. Due to the expansion of web applications and web development amongst developers of varying education and experience levels, they inevitably resort to cloning through out the web. The spread of code clones is further increased by websites like StackOverflow and GitHub. In this paper, we will be focusing on clone detection research done to target clones in JavaScript code and discuss its areas of concern. Also, we will summarize language independent research done and possibility of its application on JavaScript and web applications.

Making the Web 2.0 Faster for Next Generation

Undeniably the most favored web scripting language is PHP. Almost 80% of the internet’s server-side web applications are written in PHP which includes big giants like WordPress, Wikipedia, and Facebook. In present-day, at an accelerating pace, the quantity of digital content is burgeoning. A heterogeneous set of users' devices is being amassed by these contents and administering these contents manually is an infeasible solution engendering an increasing set of problems. A solution to this problem would be to switch to a web programming language, which can be compiled. We are describing an easy to deploy and a continuous conversion mechanism for converting existing Web 2.0 PHP application systems into Facebook’s HHVM supported Hack server-side application systems. We are trying to use the power of Hack language and amplify the performance of existing PHP server-side applications. Instead of interpreting all of your code Hack translates it to assembly and runs that instead, which can lead to an immense amount of increase in performance. We are using Hacktificator, a tool developed by Facebook Developers and our demo web application running on HHVM to test and convert user’s existing PHP codebase to Hack language. With this proposed methodology we do not have to make any change to existing codebase manually or hire new engineers for the conversion, nor do we have to take down our live systems. Conversion can be done on the fly and will result in approximately 2x to 20x better performance. The availability of this tool can save costs for manual conversion, save time as well as improve the user experience of websites with better performance.

Skip blocks: reusing execution history to accelerate web scripts

With more and more web scripting languages on offer, programmers have access to increasing language support for web scraping tasks. However, in our experiences collaborating with data scientists, we learned that two issues still plague long-running scraping scripts: i) When a network or website goes down mid-scrape, recovery sometimes requires restarting from the beginning, which users find frustratingly slow. ii) Websites do not offer atomic snapshots of their databases; they update their content so frequently that output data is cluttered with slight variations of the same information — e.g. , a tweet from profile 1 that is retweeted on profile 2 and scraped from both profiles, once with 52 responses then later with 53 responses. We introduce the skip block , a language construct that addresses both of these disparate problems. Programmers write lightweight annotations to indicate when the current object can be considered equivalent to a previously scraped object and direct the program to skip over the scraping actions in the block. The construct is hierarchical, so programs can skip over long or short script segments, allowing adaptive reuse of prior work. After network and server failures, skip blocks accelerate failure recovery by 7.9x on average. Even scripts that do not encounter failures benefit; because sites display redundant objects, skipping over them accelerates scraping by up to 2.1x. For longitudinal scraping tasks that aim to fetch only new objects, the second run exhibits an average speedup of 5.2x. Our small user study reveals that programmers can quickly produce skip block annotations.

Computer-Based Examination System for the Licensure Examination of Agriculturist

Computer-based examination plays an important role in the assessment process in the 21st century. The study aimed to develop a computer-based examination system intended for the Agriculture graduates who would like to review in preparation for the Licensure Examination for Agriculturist. The researchers utilized various web scripting languages and Content Management System (CMS) in developing different pages. A descriptive survey was used to evaluate the capability of the system. There were one hundred seventy-eight (178) students taking agriculture related courses requested as respondents of the study. The statistical treatment used in the study was weighted mean to determine the perception of the respondents utilizing the Likert five-point scale criteria. Based on the findings of the study, it showed that the developed computer-based examination system for the licensure examination for agriculturist is meaningfully accepted by the users, because of the high accessibility, functionality, and usability level of the system features. Based on the result of the data gathered when respondents are grouped according to sex, it is described that the system is highly accessible, very much functional, highly reliable and highly usable. Therefore, this study should be adopted by the college, the review center of the school and other institutions across the country to help students review for their upcoming exams using this computer-based examination system.

Abstract Domains for Type Juggling

Web scripting languages, such as PHP and JavaScript, provide a wide range of dynamic features that make them both flexible and error-prone. In order to prevent bugs in web applications, there is a sore need for powerful static analysis tools. In this paper, we investigate how Abstract Interpretation may be leveraged to provide a precise value analysis providing rich typing information that can be a useful component for such tools.In particular, we define the formal semantics for a core of PHP that illustrates type juggling, the implicit type conversions typical of PHP, and investigate the design of abstract domains and operations that, while still scalable, are expressive enough to cope with type juggling. We believe that our approach can also be applied to other languages with implicit type conversions.

WebSHArk 1.0: A Benchmark Collection for Malicious Web Shell Detection

Web shells are programs that are written for a specific purpose in Web scripting languages, such as PHP, ASP, ASP.NET, JSP, PERL-CGI, etc. Web shells provide a means to communicate with the server's operating system via the interpreter of the web scripting languages. Hence, web shells can execute OS specific commands over HTTP. Usually, web attacks by malicious users are made by uploading one of these web shells to compromise the target web servers. Though there have been several approaches to detect such malicious web shells, no standard dataset has been built to compare various web shell detection techniques. In this paper, we present a collection of web shell files, WebSHArk 1.0, as a standard dataset for current and future studies in malicious web shell detection. To provide baseline results for future studies and for the improvement of current tools, we also present some benchmark results by scanning the WebSHArk dataset directory with three web shell scanning tools that are publicly available on the Internet. The WebSHArk 1.0 dataset is only available upon request via email to one of the authors, due to security and legal issues.

IJARCCE - Computer and Communication Engineering

DB is a perfect NoSQL database. We can improve performance and index operations speed using this DB database. There are various features of DB like increased speed of database operations, various functions instead of complex SQL queries and a very huge performance improvement. Python is web scripting language used for high usage websites for improving performance of the website and reducing the overhead on the web server. We will use this Python language in integration with DB for highest possible performance. Mongo DB wasn't designed in a lab. DB is Open-source database introduced by 10gen, for wide Variety of application.It is an agile database that allow Schema to change quick as application evolve. DB is High performance, scalability and availability in memory computing. DB native replication and Automated failure's enable enterprise grade reliability and also have operational flexibility. DB is a database which has document oriented storage. It is also object oriented written in C++. DB is open-source full index support database. It is easy to use and in the DB written query is very simple. DB provide Map Reduce function .It also provide Grid Fs for process on Big Data. DB is very powerful much flexible and provide very nice speed. DB is the primary daemon process for DB system in mongo DB database is physical container for collection. Each database get its own set of file on the file system. A single DB server typically has multipledatabases. In DB collection is Table and document is row And column/attribute/variable is filed. In DB document is set of key value pair. DB support Various driverssuch as AggregationFramework. AutoSharading, JSON data model with dynamic schema.

A rewriting logic approach to the formal specification and verification of web applications

This paper develops a Rewriting Logic framework for the automatic specification and verification of Web applications that considers the critical aspects of concurrent Web interactions, browser navigation features (e.g., forward/back-ward navigation, page refresh, and new window/tab opening), and Web script evaluation. By encompassing the main features of the most popular Web scripting languages (e.g., PHP, ASP, and Java Servlets), our scripting language is powerful enough to model the dynamics of complex Web applications, where the interactions among Web servers and Web browsers are formalized through a landmark communicating protocol that abstracts HTTP. We provide a detailed characterization of browser actions via rewrite rules and show how our models can be naturally model-checked by using the Linear Temporal Logic of Rewriting (LTLR), which is a Linear Temporal Logic that is specifically designed for model-checking rewrite theories. The framework has been completely implemented in Maude, and we report on some successful experiments that we conducted using the Maude LTLR model-checker.

Atomic Data Mining Numerical Methods, Source Code SQlite with Python

This paper introduces a recently published Python data mining book (chapters, topics, samples of Python source code written by its authors) to be used in data mining via world wide web and any specific database in several disciplines (economic, physics, education, marketing. etc). The book started with an introduction to data mining by explaining some of the data mining tasks involved classification, dependence modelling, clustering and discovery of association rules. The book addressed that using Python in data mining has been gaining some interest from data miner community due to its open source, general purpose programming and web scripting language; furthermore, it is a cross platform and it can be run on a wide variety of operating systens such as Linux, Windows, FreeBSD, Macintosh, Solaris, OS/2, Amiga, AROS, AS/400, BeOS, OS/390, z/OS, Palm OS, QNX, VMS, Psion, Acorn RISC OS, VxWorks, PlayStation, Sharp Zaurus, Windows CE and even PocketPC. Finally this book can be considered as a teaching textbook for data mining in which several methods such as machine learning and statistics are used to extract high-level knowledge from real-world datasets.

Use of Mobile Devices for Earthquake Response, Network Applications, and Diagnostics

Mobile, hand-held electronic devices such as Internet-enabled cell phones, personal digital assistants (PDAs), and similar tools are vastly expanding the potential to bring sophisticated Internet-based communications to a broader pool of users and workers than the traditional, wired Internet. In particular, such cellular devices are making possible a host of new mechanisms for remote interaction with seismic network hardware, seismic waveform data, and real-time seismic software systems in areas with reliable coverage. Many seismic network diagnostics and interactive processes can be extended to mobile devices, eliminating the need for personnel to be tethered to laptops and hard-wired Internet connections. With a properly written set of mobile-device applications, seismic networks can now provide their staffs with practical, 24–hour-a-day, seven-day-a-week access to network diagnostic tools and configuration tools and provide seismic-network information products to their staffs and constituents. To demonstrate the utility of mobile devices to seismic networks, we have written a suite of nine mobile-device applications, placed them in use for the Nevada Seismological Laboratory (NSL), and released their source code to the public. These applications assist in remote monitoring and reconfiguration of NSL real-time network operations; remote review and approval of information products for release; and widespread distribution of real-time results via Web-enabled mobile devices. We have used the server-side Web-scripting language PHP to construct these programs. Two of these programs facilitate interaction with the U.S. Geological Survey's ShakeMap program (Wald et al. 2005); three programs facilitate interaction with real-time systems and databases of the Antelope Environmental Monitoring System (BRTT 2008) via the Antelope interface to PHP (Lindquist et al. 2007); and the remaining four programs help manage Ref Tek RT130 data loggers (Ref Tek 2008), Motorola “Canopy” Internet-Protocol (IP) radios (Motorola 2008), seismic-station maintenance logs, and sensor calibration procedures. The NSL network staff routinely uses these mobile applications in …

DEVELOPING AND IMPLEMENTING A SOFTWARE SYSTEM DESIGNED FOR RECORDING AND EVALUATING THE PARACLINICAL TEST RESULTS OF PATIENTS INVESTIGATED IN THE BUCHAREST VETERINARY FACULTY CLINICS

SUMMARY Because of the special needs and particularities o f a paraclinical laboratory, it was necessary for the already existing patient manageme nt software program to be upgraded with a new specific component, designed exclusively for recording and evaluating the test results for all the clinical cases that are investigated an d treated in our University Clinics. For a better compatibility and integration, this n ew laboratory software was designed and developed using the same software tools as the already existing informatics platform: Microsoft SQL Server and ASP web-scripting language. After the personal password based authentication, the user has the possibility to browse inside a patient’s medical record to reach the para clinic test results page where, based on his access level he can either just visualize the test results, focus on comparing medical history of the patient or he can enter a series of new values from the latest tests. The software is capable of managing three types of paraclinical tests ‐ hematological exam, biochemical exam and urinary exam ‐ being able to follow over 50 different parameters. Also the database contains the normal values for t hree species ‐ canine, feline and equine ‐ while the system is able to automatically compare the obtained test results and visually display those parameters that are not with in the normal boundaries of that species. The test results can be printed at any given time in an user-friendly format that contains: a header with the number of the test result bulleti n and current date, patient’s and owner’s identification, the tests result component (in a ta ble format with 4 columns ‐ name of the parameter, measure unit, obtained values and normal values), the names of the medical staff that performed the test results and a field for any other observations and mentions. Keeping in mind the possibility of future developm ents of the Clinic’s Laboratory, the software can be permanently modified and upgraded, either by introducing new parameters in the database or by increasing the number of support ed species.

Sound and precise analysis of web applications for injection vulnerabilities

Web applications are popular targets of security attacks. One common type of such attacks is SQL injection, where an attacker exploits faulty application code to execute maliciously crafted database queries. Bothstatic and dynamic approaches have been proposed to detect or prevent SQL injections; while dynamic approaches provide protection for deployed software, static approaches can detect potential vulnerabilities before software deployment. Previous static approaches are mostly based on tainted information flow tracking and have at least some of the following limitations: (1) they do not model the precise semantics of input sanitization routines; (2) they require manually written specifications, either for each query or for bug patterns; or (3) they are not fully automated and may require user intervention at various points in the analysis. In this paper, we address these limitations by proposing a precise, sound , and fully automated analysis technique for SQL injection. Our technique avoids the need for specifications by consideringas attacks those queries for which user input changes the intended syntactic structure of the generated query. It checks conformance to this policy byconservatively characterizing the values a string variable may assume with a context free grammar, tracking the nonterminals that represent user-modifiable data, and modeling string operations precisely as language transducers. We have implemented the proposed technique for PHP, the most widely-used web scripting language. Our tool successfully discovered previously unknown and sometimes subtle vulnerabilities in real-world programs, has a low false positive rate, and scales to large programs (with approx. 100K loc).

Secure Web scripting

Current Web scripting languages lack an explicit security model. The model proposed in the article has been implemented for JavaScript in the Mozilla browser source code; it is realized by a safe interpreter and based on three basic building blocks: access control, to regulate what data a script can access on a user's machine and in what mode; independence of contexts, to ensure that two scripts executing in different contexts (for example, simultaneously in different browser windows or sequentially in the same browser window) cannot access each other's data at will; and trust management, to regulate how trust is established and terminated among scripts executing simultaneously in different contexts. We also advocate a clear separation between a security policy and an implementation. Different users require different degrees of privacy and security, which translate to different degrees of flexibility when interacting with a Web server; these differences can be expressed in different security policies. A sound implementation, however, should be universally applicable. These are principles that first appeared decades ago in work on secure operating systems.