OCR LEVEL 3 CAMBRIDGE TECHNICALCERTIFICATE/DIPLOMA IN

IT

WEB SERVER SCRIPTINGA/601/0443

LEVEL 3 UNIT 26

GUIDED LEARNING HOURS: 60

UNIT CREDIT VALUE: 10

TECHNICALSCambridge

2www.ocr.org.uk

WEB SERVER SCRIPTINGA/601/0443

LEVEL 3

AIM AND PURPOSE OF THE UNIT

The aim of the unit is for learners to understand the principles and be able to identify the different scripting languages that are available for server-side scripting. Learners will be able to identify potential issues, as well as benefits of using scripting in a professional website. The unit will provide learners with the knowledge to implement server-side scripts in a micro-site, and create a content management system with security features. It is essential for learners to have prior knowledge of HTML and database design before undertaking the unit.

3

Web server scripting Level 3 Unit 26

ASSESSMENT AND GRADING CRITERIA

Learning Outcome (LO)

The learner will:

Pass

The assessment criteria are the pass requirements for this unit.

The learner can:

Merit

To achieve a merit the evidence must show that, in addition to the pass criteria, the learner is able to:

Distinction

To achieve a distinction the evidence must show that, in addition to the pass and merit criteria, the learner is able to:

1 Understand the principles of web server scripting

P1 explain the principles of web server scripting

M1 compare differences between web server scripting languages

D1 justify the use of web server scripting in websites

2 Be able to use web server scripting

P2 use web server scripting to identify a user’s browser and screen resolution

P3 upload files to a web server using web server scripting

P4 implement, test and document a simple login system using web server scripting

M2 assign access rights to different levels of users using web server scripting

D2 create cookies to recognise users

P5 implement, test and document a web content management system to meet a defined user need

M3 implement validation for a database data entry form

D3 use filtering to return the most recent data entries

3 Understand the issues affecting web server scripting

P6 explain the issues surrounding web server scripting

M4 discuss solutions to issues surrounding web server scripting

4www.ocr.org.uk

TEACHING CONTENTThe unit content describes what has to be taught to ensure that learners are able to access the highest grade.

Anything which follows an i.e. details what must be taught as part of that area of content.

Anything which follows an e.g. is illustrative, it should be noted that where e.g. is used, learners must know and be able to apply relevant examples to their work though these do not need to be the same ones specified in the unit content.

LO1 Understand the principles of web server scripting

Principles of web server scripting

• server side scripting, (e.g. definition, difference from client-side scripting)

• languages - ASP - ASP.Net - PHP - JSP - ColdFusion - Ruby - Python.

• features - syntax - variables - operators - loops - functions - forms - database links.

• uses in websites - database connectivity - form processing and validation - content management system - dynamically generated pages - product catalogues - payment processing - forums - polls - searches - guest books - login systems.

• advantages - plugins not required - content management systems simplify editing of sites - fast loading times - scripts are hidden from users - improved accessibility.

Client-side scripting

• uses, (e.g. dynamic and interactive content, form validation, browser detection, execute events, create cookies).

LO2 Be able to use web server scripting

Web Server Scripting

• identify user settings - browser type - screen resolution.

• uploading files to a web server

• security features - simple login system - permissions - cookies.

• content management system - view - add / database entry form - edit - delete - form validation - filtering - database, (e.g. MySQL)

• legal requirements for cookies - EU cookie law.

Testing

• creating a test plan/table

• functionality, (e.g. working scripts/functions)

• software tools, (e.g. debug).

Documentation

• requirements, (e.g. requirements of the system, requirements of the user)

• architectural and design documentation, (e.g. user interface, database table design)

• technical documentation, (e.g. commented code).

5

Web server scripting Level 3 Unit 26

LO3 Understand the issues affecting web server scripting

Issues

• security - malicious scripts - SQL injection attacks - Xss attacks - poor passwords - programmer coding errors.

• requirement for installation of scripting software on the server

• some scripts require databases to store data.

Solutions

• security - security patches - firewall - file and network permissions - service logs - security tools - strong passwords - prevention codes.

6www.ocr.org.uk

DELIVERY GUIDANCE

Understand the principles of web server scripting

The server-side scripting language that can be used is optional; appropriate choice might be PHP, ASP or ASP.Net, although any listed in the criteria can be used. Tutors should discuss the different scripting languages that can be used to aid interactivity on websites, followed by features, uses and advantages of using the chosen language. Tutors should make this decision before delivering the unit. The delivery of the practical work could take the form of tutor led demonstration with learner participation, followed by practice exercises.

Learners should be made aware of the practical applications of scripting on ecommerce and other types of websites. Research individually or as groups can be carried out to look at a range of websites, identifying where scripting has been used and sharing and comparing findings. Alternatively, tutors could hold group discussions, drawing on learners own experience of implementing scripts through their practice exercises and real-life examples they may have experienced.

Be able to use web server scripting

Tutors should ensure that learners have the appropriate knowledge of HTML to prepare to create a micro-site, for example creating, setting out the layout and content of pages as well as being able to link web pages together. Tutors should then show examples of web server scripting. This should be followed by teaching through tutor demonstration and learner participation, step by step tutorials or online video tutorials, how to create specific web server scripting examples.

Learners will require a reasonable amount of time to practice experimenting with scripts. This should cover identifying user settings, which will require some client-side scripting, uploading files to a web server, how to create a content management system, which would include a data entry form, manipulating data (by validation and filtering) and how to add security (e.g. logins, user accounts and cookies) to a website. It would be appropriate at this stage to discuss the legal requirements for cookies.

Learners should be shown good examples of planning documentation; documented code, architectural and design documentation and technical documentation, which can be supported by tutor led discussion and hand out examples.

Learners should look at specialist debugging tools and examples of completed test plans/tables. Tutors can discuss good practice when testing ensuring test plans are detailed and action taken where necessary; practice exercises could be used considering aspects such as:

• functionality, (e.g. working internal/external navigation, content loads/works)

• usability, (viewable in different browsers, easy to use)

• accessibility, (e.g. additional features function).

This can be practiced on existing websites.

Understand the issues affecting web server scripting

Learners should be taught about the issues affecting web server scripting and the solutions. Examples can be shown from real-life websites that have suffered from security issues, and working in small groups or individually, learners could carry out further research about each topic in the unit content. Research findings could be presented to the rest of the group, as part of a whole class discussion.

7

Web server scripting Level 3 Unit 26

SUGGESTED ASSESSMENT SCENARIOS AND TASK PLUS GUIDANCE ON ASSESSING THE SUGGESTED TASKS

Assessment Criteria P1, M1, D1

Assessment criteria P1, M1 and D1 can be evidenced by the use of a report or presentation with notes that could be supported by a tutor observation sheet, or recorded video evidence.

For P1, learners should explain the principles of web server scripting, looking at a range (at least three) of scripting languages, the features associated with each of the scripting languages. This must be supported by appropriate examples and annotations.

For merit criterion M1, learners should compare the differences between web server scripting languages. All of the languages in the teaching content must be covered, discussing their uses and potential advantages and disadvantages of each.

For distinction criterion D1, learners should justify the use of web server scripting in websites. Explanation must be detailed with appropriate supporting examples provided.

Assessment Criteria P2, P3, P4, P5, M2, M3, D2, D3

Assessment criteria P2, P3, P4, P5, M2, M3, D2 and D3 could be evidenced through the creation of a micro-site or using an existing site. This should be supported by relevant documentation as per the teaching content and should also include a test plan/table for testing functionality of the site. It would be appropriate to also include screenshots of features with annotations of where the scripting language has been used. Learners can use any of the listed server-side scripting languages to produce their evidence. Learners should be aware they will need to link the web pages to a database for the content management system.

P2 involves learners creating or using a web server script that specifies the browser and screen resolution that is required by a user. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence.

P3 involves learners creating a script to upload files to a server. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence.

For P4, learners will implement a simple login system using web server scripting. The evidence will include the components as identified in the teaching content. Evidence

will include the specification, plans, commented script, test plan and results and screenshots or video evidence of the system working.

The merit criterion M2 is an extension of P4; learners should assign access rights to pages depending on the user login e.g. administrator, operator, and/or visitor. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence.

The distinction criterion D2 follows on from P4 and M2, requiring learners to create cookies to recognise users when they log in to the website. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence.

For P5, learners will implement a web content management system as per the teaching content. It should then be tested after completion using a test plan or debugging tool with an explanation of the results. Evidence will include the documentation specification to include page plans, a script that includes comments explaining the code used, test plan and results and screenshots or video evidence of the system working.

The merit criterion M3 follows on from P5 and requires learners to implement validation for a database data entry form. Learners should provide a script that includes comments explaining the code used and a copy of the form.

The distinction criterion D3 follows on from P5 and M3, learners will add some sample content to their web page using the data entry form of the content management system. They can then use scripting to filter information by the most recent entries. Learners should provide a script that includes comments, explaining the code used together with a screenshot of the end result to provide the evidence.

Assessment Criteria P6, M4

P6 can be evidenced by the use of a report or presentation with notes supported by a tutor observation sheet, or recorded video evidence. Learners will explain issues that web server scripting can encounter. This must cover the range of topics listed in the teaching content and can be supported by screenshots or links to any real life examples.

The merit criterion M4 follows on from P6; learners should discuss in detail the solutions to the issues identified as part of P6.

8www.ocr.org.uk

SUGGESTED SCENARIOS

• For an interview for an emerging website firm, you have been asked to show your abilities.

• Your employer would like to improve their website by adding more server-side functionality.

RESOURCES

• Dedicated web creation software (e.g. Dreamweaver)

• Other (Internet, Web Server, Database software e.g. MySQL).

9

Web server scripting Level 3 Unit 26

MAPPING WITHIN THE QUALIFICATION TO THE OTHER UNITSUnit 12: Website production.

Unit 24: Client side customisation of web pages.

CONTACT USStaff at the OCR Customer Contact Centre are available to take your call between 8am and 5.30pm, Monday to Friday. We’re always delighted to answer questions and give advice.

Telephone 02476 851509Email cambridgetechnicals@ocr.org.ukwww.ocr.org.uk