JavaScript%20and%20PHP

1
JavaScript and PHP

• Week 10
• LBSC 690
• Information Technology

2
Agenda

• Questions
• PHP
• Joomla!
• Mythical person-month
• Advanced Database topics

3
Some Details About Access

• Joins are automatic if field names are same
• Otherwise, drag a line between the fields
• Sort order is easy to specify
• Use the menu
• Queries form the basis for reports
• Reports give good control over layout
• Use the report wizard - the formats are complex
• Forms manage input better than raw tables
• Invalid data can be identified when input
• Graphics can be incorporated

4
Programming Tips

• Attention to detail!
• Careful where you place that comma, semi-colon,
  etc.
• Write a little bit of code at a time
• Add some functionality, make sure it works, move
  on
• Dont try to write a large program all at once
• Debug by viewing the state of your program
• Print values of variables using document.write
• Is the value what you expected?

5
JavaScript Resources

• Google javascript
• Tutorials to learn to write programs
• Code to do things you want to do
• Engineering and Physical Sciences Library

6
Ways of Generating Web Pages

• Static Written in a markup language
• HTML, XML
• Dynamic Generated using a program
• Common Gateway Interface Perl (.cgi)
• Java servlets
• Dynamic Generated from a database
• Cold Fusion (.cfm)
• PHP (.php)

7
Why Database-Generated Pages?

• Remote access to a database
• Client does not need the database software
• Serve rapidly changing information
• e.g., Airline reservation systems
• Provide multiple access points
• By subject, by date, by author,
• Record user responses in the database

8
Issues to Consider

• Benefits
• Multiple views
• Data reuse
• Scalable
• Access control
• Costs
• Formal modeling
• Complex (learn, design, implement, debug)
• Brittle (relies on multiple communicating
  servers)
• Not crawlable

9
Downside

• Brittle
• Depends on multiple servers
• Complex
• Learning, design, implementation, debugging
• Formally modeled

10
Three Ways to Serve Data
Microsoft Web Server
Microsoft Access DBMS
.mdb
Web Browser
Cold Fusion Server
mysql DBMS
mysql database
PHP-enabled Web Server
11
Microsoft Data Access Pages

• Displays database content on Web pages
• Not very useful for changing database content
• Drag-and-drop design in Microsoft Access
• Reports are designed for printing
• Pages are designed for the Web
• Requirements
• Microsoft Web Server (not Apache)
• IE 5 or higher Web browser (not Firefox)
• Office Web Components on client machine
• IE 7 fails gracelessly without them!

12
Data Access Page Example
Design View
Web Page
13

• Relational normalization
• Structured programming
• Software patterns
• Object-oriented design
• Functional decomposition

Client Hardware
Web Browser
Database
Server Hardware
14
PHP Programming Environments

• You need three systems on the same server
• PHP (programming language)
• MySQL (DBMS)
• Apache (Web server)
• XAMPP Server
• Includes GUI tools
• OTAL (Sun Unix) supports Web deployment
• Requires a text editor (e.g., emacs) or FTP

15
Making PHP

• ----- HTML stuff -----
• lt?php
• ----- PHP stuff -----
• ?gt
• ----- HTML stuff -----
• http//---URL stuff---/xxxxx.php

16

• Download and install XAMPP
• http//www.apachefriends.org/en/xampp.html
• Check to install Apache and MySQL as services
• Check the Web server at http//localhost/
• Download and install Joomla!
• http//www.joomla.org
• Unzip to c\xampp\htdocs\joomla15
• Configure it at http//localhost/joomla15/
• Host Name localhost
• User Name root
• Database Name joomla15
• DO NOT install sample data
• Delete c\xampp\htdocs\joomla15\installation

17
Connecting PHP to MySQL

• On XAMPP
• dbcmysql_connect (localhost, userid,
  password)
• On OTAL
• dbcmysql_connect(/export/software/otal/mysql/r
  un/mysqld.sock,
• userid, password)

18
Create a MySQL Database

• root user creates database grants permissions
• Using the XAMPP console (or mysql u root p)
• root has no initial password just hit ltentergt
  when asked
• By the system administrator on OTAL
  (otal.umd.edu)
• CREATE DATABASE project
• GRANT SELECT, INSERT, UPDATE, DELETE,
  INDEX, ALTER, CREATE, DROP ON project. TO
  foo_at_localhost IDENTIFIED BY bar
• FLUSH PRIVILEGES
• Start mysql
• MySQL console for XAMPP, ssh for OTAL
• 
  mysql u
  foo p bar
• Connect to your database
• USE project

19
Creating Tables

• CREATE TABLE contacts (
• ckey MEDIUMINT UNSIGNED NOT NULL
  AUTO_INCREMENT,
• id MEDIUMINT UNSIGNED NOT NULL,
• ctype SMALLINT UNSIGNED NOT NULL,
• cstring VARCHAR(40) NOT NULL,
• FOREIGN KEY (id) REFERENCES persons(id) ON
  DELETE CASCADE,
• FOREIGN KEY (ctype) REFERENCES ctlabels(ctype)
  ON DELETE RESTRICT,
• PRIMARY KEY (ckey)
• ) ENGINEINNODB
• To delete DROP TABLE contacts

20
Populating Tables

• INSERT INTO ctlabels
• (string) VALUES
• ('primary email'),
• ('alternate email'),
• ('home phone'),
• ('cell phone'),
• ('work phone'),
• ('AOL IM'),
• ('Yahoo Chat'),
• ('MSN Messenger'),
• (other)
• To empty a table DELETE FROM ctlabels

21
Looking Around in MySQL

• SHOW DATABASES
• SHOW TABLES
• DESCRIBE tablename
• SELECT FROM tablename

22
Structured Query Language

• DESCRIBE Flight

23
Structured Query Language

• SELECT FROM Flight

24
Structured Query Language

• SELECT Company.CompanyName, Company.CompanyPhone,
  Flight.Origin, Flight.DepartureTime
• FROM Flight,Company
• WHERE Flight.CompanyNameCompany.CompanyName
• AND Flight.AvailableSeatsgt3

25
Statements in PHP

• Sequential
• Semicolons are required at the end of every
  statement
• Conditional
• if (3i) else
• Loop
• for (i0 ilt10 i)
• while (rowmysql_fetch_array())
• foreach (array as key gt value)
• Braces are optional around a single statement

26
Variables

• Name starts with a
• Case sensitive (assume everything could be!)
• Hold a value
• Number (integer, float)
• String (double quotes, \ escape character)
• TRUE, FLASE
• NULL
• Need not be declared (automatically cast)

27
Operators in PHP

• Arithmetic operators
• - /
• Logical operators
• lt lt ! gt gt !
• String operator
• .

28
Arrays in PHP

• A set of key-element pairs
• days array(Jan-gt31, Febgt28, )
• months explode(/, Jan/Feb/Mar//Dec)
• _POST
• Each element is accessed by the key
• daysJan
• months0

29
Functions in PHP

• Declaration
• function multiply(a, b3)return ab
• Invoking a method
• b multiply(b, 7)
• All variables in a function have only local scope
• Unless declared as global in the function

30
Using PHP with (X)HTML Forms

• ltform actionformResponseDemo.php,
  methodpostgt
• email ltinput typetext, nameemail,
  valuelt?php echo email ?gt, size30 /gt
• ltinput typeradio, namesure, valueyes /gt
  Yes
• ltinput typeradio, namesure, valueno /gt
  No
• ltinput typesubmit, namesubmit,
  valueSubmit /gt
• ltinput typehidden, namesubmitted,
  valueTRUE /gt
• lt/formgt
• if (isset(_POSTsubmitted))
• echo Your email address is email.
• else
• echo Error page reached without proper form
  submission!

31
lt?php Script 8.1 - mysql_connect.php // Set the
database access information as constants. DEFINE
('DB_USER', 'tester') DEFINE ('DB_PASSWORD',
'tester') DEFINE ('DB_HOST', 'localhost') DEFINE
('DB_NAME', 'sitename') // Make the
connection. dbc _at_mysql_connect (DB_HOST,
DB_USER, DB_PASSWORD) OR die ('Could not connect
to MySQL ' . mysql_error() ) // Select the
database. _at_mysql_select_db (DB_NAME) OR die
('Could not select the database ' .
mysql_error() ) // Create a function for
escaping the data. function escape_data (data)
// Address Magic Quotes. if
(ini_get('magic_quotes_gpc')) data
stripslashes(data) // Check for
mysql_real_escape_string() support. if
(function_exists('mysql_real_escape_string'))
global dbc // Need the connection. data
mysql_real_escape_string (trim(data),
dbc) else data mysql_escape_string
(trim(data)) // Return the escaped
value. return data // End of function. ?gt
32
lt?php login.php // Send NOTHING to the Web
browser prior to the session_start() line! //
Check if the form has been submitted. if
(isset(_POST'submitted')) require_once
('../mysql_connect.php') // Connect to the db.
errors array() // Initialize error array.
// Check for an email address. if
(empty(_POST'email')) errors 'You
forgot to enter your email address.' else
e escape_data(_POST'email')
// Check for a password. if
(empty(_POST'password')) errors
'You forgot to enter your password.' else
p escape_data(_POST'password')
33
if (empty(errors)) // If everything's OK.
/ Retrieve the user_id and first_name for that
email/password combination. / query
"SELECT user_id, first_name FROM users WHERE
email'e' AND passwordSHA('p')"
result _at_mysql_query (query) // Run the
query. row mysql_fetch_array (result,
MYSQL_NUM) // Return a record, if applicable.
if (row) // A record was pulled from the
database. // Set the session data
redirect. session_name ('YourVisitID')
session_start()
_SESSION'user_id' row0
_SESSION'first_name' row1
_SESSION'agent' md5(_SERVER'HTTP_USER_AGENT
') // Redirect the user to the
loggedin.php page. // Start defining the
URL. url 'http//' .
_SERVER'HTTP_HOST' . dirname(_SERVER'PHP_SELF
') // Check for a trailing slash.
if ((substr(url, -1) '/') OR
(substr(url, -1) '\\') ) url
substr (url, 0, -1) // Chop off the slash.
// Add the page. url .
'/loggedin.php' header("Location
url") exit() // Quit the script.
else // No record matched the query.
errors 'The email address and password
entered do not match those on file.' // Public
message. errors mysql_error() .
'ltbr /gtltbr /gtQuery ' . query // Debugging
message. // End of if
(empty(errors)) IF. mysql_close() // Close
the database connection. else // Form has not
been submitted. errors NULL // End of
the main Submit conditional.
34
// Begin the page now. page_title
'Login' include ('./includes/header.html') if
(!empty(errors)) // Print any error messages.
echo 'lth1 id"mainhead"gtError!lt/h1gt ltp
class"error"gtThe following error(s) occurredltbr
/gt' foreach (errors as msg) // Print each
error. echo " - msgltbr /gt\n" echo
'lt/pgtltpgtPlease try again.lt/pgt' // Create the
form. ?gt lth2gtLoginlt/h2gt ltform action"login.php"
method"post"gt ltpgtEmail Address ltinput
type"text" name"email" size"20" maxlength"40"
/gt lt/pgt ltpgtPassword ltinput type"password"
name"password" size"20" maxlength"20" /gtlt/pgt
ltpgtltinput type"submit" name"submit"
value"Login" /gtlt/pgt ltinput type"hidden"
name"submitted" value"TRUE" /gt lt/formgt lt?php in
clude ('./includes/footer.html') ?gt
35
Configuring Joomla!

• Major divisions
• Sections
• Categories
• Content
• Articles
• Links
• Contact
• Navigation
• Menus
• Search

36
Discussion Point Mythical Person-Month

• Why is software development different from
  manufacturing car?
• If it would take one person three months, why
  does it take four people SIX months?

37
Estimating Completion Time

• Rules of thumb
• 1/3 specification
• 1/6 coding
• 1/2 test planning, testing, and fixing!
• Add time for coding to learn as you go, but dont
  take time away from the other parts!
• Reread the section on gutless estimating if you
  are tempted

38

• Relational normalization
• Structured programming
• Software patterns
• Object-oriented design
• Functional decomposition

Client Hardware
Web Browser
Database
Server Hardware
39
(No Transcript)
40
(No Transcript)
41
Ajax Applications

• Google Maps
• http//maps.google.com
• Google Suggest
• http//www.google.com/webhp?complete1hlen
• Sajax Tables
• http//labs.revision10.com/?p5
• Sajax
• http//www.modernmethod.com/sajax/

42
Trading People and Months is Hard

• Sequential constraints
• Communication
• Training

43
Databases in the Real World

• Some typical database applications
• Banking (e.g., saving/checking accounts)
• Trading (e.g., stocks)
• Airline reservations
• Characteristics
• Lots of data
• Lots of concurrent access
• Must have fast access
• Mission critical

44
Caching servers 15 million requests per second,
95 handled by memcache (15 TB of RAM)
Database layer 800 eight-core Linux servers
running MySQL (40 TB user data)
Source Technology Review (July/August, 2008)
45
Database Integrity

• Registrar database must be internally consistent
• Enrolled students must have an entry in student
  table
• Courses must have a name
• What happens
• When a student withdraws from the university?
• When a course is taken off the books?

46
Integrity Constraints

• Conditions that must always be true
• Specified when the database is designed
• Checked when the database is modified
• RDBMS ensures integrity constraints are respected
• So database contents remain faithful to real
  world
• Helps avoid data entry errors

47
Referential Integrity

• Foreign key values must exist in other table
• If not, those records cannot be joined
• Can be enforced when data is added
• Associate a primary key with each foreign key
• Helps avoid erroneous data
• Only need to ensure data quality for primary keys

48
Concurrency

• Thought experiment You and your project partner
  are editing the same file
• Scenario 1 you both save it at the same time
• Scenario 2 you save first, but before its done
  saving, your partner saves

Whose changes survive? A) Yours B) Partners C)
neither D) both E) ???
49
Concurrency Example

• Possible actions on a checking account
• Deposit check (read balance, write new balance)
• Cash check (read balance, write new balance)
• Scenario
• Current balance 500
• You try to deposit a 50 check and someone tries
  to cash a 100 check at the same time
• Possible sequences (what happens in each case?)

Deposit read balance Deposit write
balance Cash read balance Cash write balance
Deposit read balance Cash read balance Cash
write balance Deposit write balance
Deposit read balance Cash read balance Deposit
write balance Cash write balance
50
Database Transactions

• Transaction sequence of grouped database actions
• e.g., transfer 500 from checking to savings
• ACID properties
• Atomicity
• All-or-nothing
• Consistency
• Each transaction must take the DB between
  consistent states.
• Isolation
• Concurrent transactions must appear to run in
  isolation
• Durability
• Results of transactions must survive even if
  systems crash

51
Making Transactions

• Idea keep a log (history) of all actions carried
  out while executing transactions
• Before a change is made to the database, the
  corresponding log entry is forced to a safe
  location
• Recovering from a crash
• Effects of partially executed transactions are
  undone
• Effects of committed transactions are redone

the log
52
Before You Go

• On a sheet of paper, answer the following
  (ungraded) question (no names, please)
• What was the muddiest point in todays class?