WEB PROGRAMMING LABORATORY

Università degli Studi
"G. d'Annunzio"

Chieti - Pescara

General Module

Course Sheet

Course code:

00085LM2

Academic Year of enrolment:

2018

Year of supply:

2019/2020

Type of Course:

Related/Supplementary

Degree:

Course of 1st Cycle Degree in ECONOMICS AND BUSINESS INFORMATICS

Disciplinary Sector:

Computer Science

Is part of:

WEB PROGRAMMING

Location:

PESCARA

Divisions:

Cognomi A-L - Professor: FIORAVANTI Fabio
Cognomi M-Z - Professor: FIORAVANTI Fabio

Credits:

Programme Year:

Cycle:

Second semester

Hours of classroom activity:

Individual study hours:

Prerequisites:

- Knowledge of the principles of imperative and object-oriented programming.
- Knowledge of databases and of the SQL language.
- Ability to write small programs and to design databases.
- Ability to understand documentation and guides in English.

Objectives

The educational objective for the student is to achieve the following learning outcomes.

Knowledge and understanding

The course aims to provide the relevant fundamental knowledge about architectures, standards, protocols, markup languages, client-side and server-side programming languages, and tools used for developing dynamic web applications that manipulate data stored in databases.

Attention will be paid to the general principles to be followed for development of web applications with regard to the following aspects:
- application security;
- user interaction (e.g. navigability and usability)
- code quality (e.g. readability, use of conventions, documentation, modularity and parametricity, model-view-controller separation).

At the end of the course the student will be able to understand how a web application works and the role of the different technologies used in its implementation.

Applying knowledge and understanding

At the end of the course the student will be able to develop dynamic web applications that interact with databases integrating client-side and server-side technologies, starting from a specification in natural language.

Contents

- Client-server architectures and HTTP. HTML and CSS.
- Introduction to the PHP language.
- Forms, Cookies and Sessions. User authentication.
- Accessing databases.
- Browser Object Model, Document Object Model, Javascript and asynchronous interaction via AJAX.
- Security: access control, data protection. Vulnerability of web applications and countermeasures.

Extended Syllabus

- Laboratory: analysis of HTTP request and response messages exchanged during the visit of a website. Creating and sending a custom HTTP message.
- Laboratory: creation of web pages containing links, tables and data entry forms.

- Laboratory: development of PHP programs to validate the data received via HTTP, and entered through HTML forms
- Laboratory: development of PHP programs to create, use and delete data using cookies.
- Laboratory: development of PHP programs to create, use and delete data using sessions.
- Laboratory: development of PHP programs to manage user authentication and access control
- Laboratory: development of PHP programs to access databases via the PDO library.
- Laboratory: analysis of PHP programs vulnerable to SQL injection security attacks. Adoption of countermeasures using PDO prepared statements.
- Laboratory: development of PHP programs to manage interaction with the user to view, insert, modify and delete data stored in a database.

- Laboratory: development of simple Javascript functions to manipulate strings and arrays.
- Laboratory: development of Javascript functions for the validation of HTML forms
- Laboratory: development of Javascript functions to access the contents of an HTML page and modify them using the Document Object Model.
- Laboratory: development of Javascript functions to interact asynchronously with servers via AJAX.

Recommended Bibliography

- Course notes
- Enrico Zimuel. Sviluppare in PHP 7. Tecniche Nuove
- Mark Wandschneider. Sviluppare applicazioni web con PHP e MySQL. Apogeo

Teaching Methods

Presentation of case studies.
Practical sessions in the computer laboratory.

Evaluation methods

Verification of learning:

Knowledge and understanding
The learning assessment can be carried out in two alternative modes.

The first mode requires the student to take one or more written tests containing theoretical questions and/or empirical exercises for the creation of web applications using the PHP and Javascript languages.

After passing the written tests, an oral test can be taken to verify the knowledge of the fundamental concepts presented in class (at student request and at teacher discretion).

The final grade will be expressed in thirtieths and will be based on the evaluation of the written tests and, possibly, of the oral exam.

In the second mode one or more written tests can be replaced by an in-depth study (or software project development) carried out individually or in small groups.

At the end of this work, a written paper must be delivered accompanied by any software artifacts created during its course.

Subsequently an oral test will be held to ascertain the individual contribution of the student to the in-depth study (or project) work and to verify the knowledge of the theoretical and fundamental concepts presented in class.

The final grade will be expressed in thirtieths and will be based on the evaluation of any written tests taken, the in-depth study (or project) work, and the oral exam.

Applying knowledge and understanding

During the exam tests and the performance of any project or in-depth study, the students' ability to apply the knowledge acquired to create web applications using client-side and server-side technologies is verified.

Università degli Studi
"G. d'Annunzio"

Chieti - Pescara

Aree