n A m I B I A U n I V ER SI TY OF SCIEnCE AnD TECHnOLOGY

Transcription

1 n A m I B I A U n I V ER SI TY OF SCIEnCE AnD TECHnOLOGY FACULTY OF COMPUTING AND INFORMATICS DEPARTMENT OF INFORMATICS QUALIFICATION: Bachelor of lnformatics and BIT : Business Computing QUALIFICATION CODE: 07BAIF and SOBSBC LEVEL: 7 COURSE: Enterprise Web Application Development DATE: November 2016 COURSE CODE: EWD621S SESSION: DURATION: 3 Hours MARKS: 100 FIRST OPPORTUNITY EXAMINATION PAPER EXAMINER: Dr Nobert Jere and Ms Katazo Amunkete MODERATOR: Mr Kandetu Tengovandu THIS EXAMINATION PAPER CONSISTS OF 8 PAGES (INCLUDING THIS FRONT PAGE) INSTRUCTIONS 1. Answer all questions. 2. When writing take the following into account: The style should inform than impress, it should be formal, in third person, paragraphs set out according to ideas or issues and the paragraphs flowing in a logical order. Information provided should be brief and accurate. 3. Please, ensure that your writing is legible, neat and presentable. 1

2 Section A: Question 1 [50 marks] [16 marks] a. Describe and explain two (2) Enterprise Application considerations? b. How can the understanding of the organisational structure help to develop a Web Application? c. Discuss two (2) challenges of implementing and using the various enterprise applications? d. Describe the need to understand and the role of business process in web application development. Justify your answer with specific business process examples. Question 2 [16 marks] a. You are hired as an Enterprise Web Developer and one of your tasks is to explain the technical environment that will be required? Indicate the steps you will take to set up the development environment. What will you install? Give specific technologies required from installation to the coding environment. b. Draw and explain with a clearly labeled diagram to represent the www and the client server model. In your explanation mention the technologies that run on both the client and server side. c. Before implementing an enterprise web system, it is important to have the entire stakeholders prepared. Discuss three (3) possible ways to do so. Question 3 [18 marks] a. Discuss any three (3) security threats that the enterprise developer should be aware of in proposing Enterprise Web applications. b. Identify any three (3) different ways that could be used to overcome the security issues identified in (a). 2

3 c. What are the advantages of having integrated Enterprise Web applications? Explain by giving examples and specifying technologies that are used to integrate applications. Section B: [25 marks] Question 4 Examine the PHP code, for each snapshot (Snapshot 1-4) and answer the question at the end of each snapshot. Code Snapshot 1 1. <form name="reg" action="code_exec.php" onsubmit="return validateform()" method="post"> 2. <table width="274" border="o" align="center" cellpadding="2" cellspacing="o"> 3. <tr> 4. <td colspan="2"> 5. <div align="center"> 6. <?php 7. $remarks=$_get['remarks']; 8. if ($remarks==null and $remarks=="") 9. { 10. echo 'Register Here'; 11. } 12. if ($remarks=='success') 13. { 14. echo 'Registration Success'; 15. } 16.?> 17. </div></td> 18. </tr> 19. <tr> 20. <td width="95"><div align="right">first Name:</div></td> 21. <td width="171"><input type="text" name="fname" /></td> 22. </tr> 23. <tr> 24. <td><div align="right">last Name:</div></td> 25. <td><input type="text" name="lname" /></td> 26. </tr> 27. <tr> 28. <td><div align="right">gender:</div></td> 29. <td><input type="text" name="mname" /></td> 30. </tr> 3

4 31. <tr> 32. <td><div align="right">address:</div></td> 33. <td><input type="text" name="address" /></td> 34. </tr> 35. <tr> 36. <td><div align="right">contact No.:</div></td> 37. <td><input type="text" name="contact" /></td> 38. </tr> 39. <tr> 40. <td><div align="right">picture:</div></td> 41. <td><input type="text" name="pic" /></td> 42. </tr> 43. <tr> 44. <td><div align="right">username:</div></td> 45. <td><input type="text" name="username" /></td> 46. </tr> 47. <tr> 48. <td><div align="right">password:</div></td> 49. <td><input type="text" name="password" /></td> 50. </tr> 51. <tr> 52. <td><div align="right"></div></td> 53. <td><input name="submit" type="submit" value="submit" /></td> 54. </tr> 55. </table> 56. </form> End of Snapshot 1 QUESTION FOR SNAPSHOT 1 a. Clearly draw the output form based on the code in the snapshot. [14 marks] Code Snapshot 2 1. CREATE TABLE IF NOT EXISTS 'member' ( 2. 'mem_id' int(11.) NOT NULL AUTO_INCREMENT, 3. ' username' varchar(30) NOT NUll, 4. 'password' varchar(30) NOT NUll, 5. 'fname' varchar(30) NOT NUll, 6. ' lname' varchar(30) NOT NUll, 7. 'add ress' varchar(loo) NOT NULl, 8. 'contact' varchar(30) NOT NULL, 9. 'picture' varchar( loo) NOT NULL, 4

5 10. 'gender' varchar(10) NOT NULL, 11. PRIMARY KEY ('mem_id' ) 12.) ENGINE=MyiSAM DEFAULT CHARSET=Iatin1 AUTO_INCREMENT=3 ; End of Snapshot 2 QUESTION FOR SNAPSHOT 2 b. What does this code- Snapshot 2 do? Refer to some lines. [3 marks] Code Snapshot 3 1. <?php 2. $mysql_hostname = "localhost"; 3. $mysql_user = "root"; 4. $mysql_password = '"'; 5. $mysql_database = "registration"; 6. $prefix=""; 7. $bd = mysql_connect($mysql_hostname, $mysql_user, $mysql_password) or die("could not connect database"); 8. mysql_select_db($mysql_database, $bd) or die("could not select database"); 9.?> End of Snapshot 3 QUESTION FOR SNAPSHOT 3 c. Explain the code in the snapshot. Code Snapshot 4 1. <?php 2. session_start(); 3. include('connection.php'); 4. $fname=$_post['fname']; 5. $1name=$_POST['Iname']; 6. $mname=$_post['mname']; 7. $address=$_post['address']; 8. $contact=$_post['contact']; 9. $pic=$_post['pic']; 10. $username=$_post['username']; 11. $password=$_post['password']; 5

6 12. mysql_query("insert INTO member(fname, lname, gender, address, contact, picture, username, password)values('$fname', '$1name', '$mname', '$address', '$contact', '$pie', '$username', '$password')"); 13. header("location: index.php?remarks=success"); 14. mysql_close($con); 15.?> End of Snapshot 4 QUESTION FOR SNAPSHOT 4 d. Explain the importance of line 2- session_start(); and line 14. Section C: Question 5 [25 marks] Instructions: Read the following case study and answer all the questions Database-backed library web sites: a case study of the use of PHP and MySQL at the University of Nottingham Mike Gardner and Stephen Pinfield 1 Introduction As web sites grow in complexity it is important to choose the right technology to deliver the information. Here we discuss the advantages of database-backed web sites and our model for a library web site using open source software, PHP 1 and MySQL 2. Dynamically-generated web sites are easy to manage and offer significant advantages over those built with static HTML. 1.1 Redesign of the library web site During the recent reorganisation of the University of Nottingham Library Services web site ( / the decision was made to improve the design by minimising the number of options presented to the user on the home page. As well as options to find out more about the library, many library home pages offer a number of different choices to users, such as 'subject guides', 'networked CD-ROMs' and 'online databases'. These choices are often based on the format of the resources (CD-ROMs, web sites, printed items). Monica Brinkley points out that this is "undoubtedly the least likely way the user will approach an information need, and should not be the primary route to the information they seek". 3 6

7 In an attempt to reduce the potential for user confusion, it was decided to bring these resources together under one option: 'Subject resources' (the other home page options are currently 'Online catalogue', 'Services and information', 'Opening hours', 'Manuscripts and Special Collections' and 'Contact us'). The pages in the Subject resources section of the web site offer a subject-based view of important resources, including bibliographies, databases and web gateways. Resources are listed together regardless of their format (although the format and access details of the resource are still made clear to the user for each resource). Staff and students know intuitively the subject in which they are interested and this section provides a simple gateway to the resources (as shown in figure 1). Subject res ources Subjta IIMIItcca ne~~~ &.:;~o'd~ 1C9f pno n, (().110\ts. c <o~ ;t~ ;..: 1, oc~ uuu ""'b UH,,M :. o 1 CUOalt J OIIIIIals_ J>,! ~f" T n.r-..: y l.on... d S d l Sdotroc- j Atch:t ~ :tur, :::J (ID Utdlc:inii&KnlthSeiencn j S JC rr.t~c:.is:i ul: I S ::::J (ID Figure 1: subject resources homepage 2 Technologies To deliver a database-backed web site, three main technologies are required: a web server, a database and a mechanism for these two to interact and incorporate database content in the HTML pages. We chose to run the Apache web server ( / the most popular web server on the Internet, 5 on a Unix server. For a relational database, we chose MySQL ( / which is stable, has a very fast query response time on simple tables, is reliable and ANSI SQL92 6 compliant. To glue these two together (see figure2l we chose the increasingly popular server-side HTML embedded scripting language PHP ( / PHP is now in use at over 2 million web sites, 7 including Volvo, Mitsubishi Motors, W3C and HumanitiesWeb. 8 lt is available as an Apache module, and is therefore very efficient, and works well with MySQL (as well as a variety of other databases). PHP is very easy to integrate with HTML. Blocks of PHP code can simply be inserted in a standard HTML document as required. Before the web server sends the requested file to a user's browser it executes any PHP code within the page and incorporates the relevant output. For example, the PHP code <?print "Today's date is: date("m d, Y")";?>becomes Today's date is: August 1st, One of the most useful features of PHP is the way it handles HTML forms. Any form element automatically results in a variable with the same name being created on the target page. All the elements in the form are therefore available as variables and ready to incorporate in your HTML output or include in a database query. PHP can perform mathematical calculations, manipulate 7

8 strings of data and (as in this case) query databases. lt can work with many predefined functions, including XML support, capabilities (including IMAP functions) and automatic session handling. All of these popular products are open source and available free of charge. There is also support from the user community available in a variety of ways on the Internet. For example, there are excellent tutorials on PHP and MySQL at both the DevShed and Webreview sites, and active discussion boards on PHP at the PHPBuilder and Faqts sites. The installation and setup of these products is not described here as this is done elsewhere. However, it is possible to setup a standard lntel PC as a web/database Unix server using Apache, PHP and MySQL in just a few hours. We chose to use Linux, a free version of Unix. This combination of software running on a Linux server proved to be easy to install, tightly integrated, and stable. The whole system can also be assembled for very little cost END 0 F CASE STUD V Case study questions: a. From the Introduction section, state two (2) reasons for the University of Nottingham to modify the website. [2 marks] b. What were the three (3) reasons for redesigning the website from Section 1.1? [3 marks] c. With reference to Figure 1: Subject resources homepage, give any comments to the presented interface. Indicate whether the interface is easy to navigate and justify your answer. [7 marks] d. (i) What were the specific technologies used for the library website design? (ii) Why was PHP chosen? [5 marks] (iii) Explain in your own words, the meaning of open source as used in Enterprise web application development.... End of Examination Paper.... 8