WO2013102281A1

WO2013102281A1 - Method for developing web dynamic scripts using html

Info

Publication number: WO2013102281A1
Application number: PCT/CN2012/000047
Authority: WO
Inventors: 周晓红
Original assignee: Zhou Xiaohong
Priority date: 2012-01-06
Filing date: 2012-01-11
Publication date: 2013-07-11
Also published as: CN103197922A

Abstract

A method for writing dynamic programs using the HTML language instead, which has the execution efficiency of C++, is provided. Application data and the interface expression of the application data are separated. The repeat transmission of the interface expression is avoided, and the data transmission volume is reduced. Under the application environment of the HTML dynamic program development technology, a method for preventing Challenge Collapsar (CC) attacks is provided. The method is based on the manner of questioning at the server side and answering at the client side, which can sharply increase the resource cost required by performing the CC attacks and make it far above the resource cost of the web service to be attacked, and consequently, the effect of weakening or eliminating the CC attacks is achieved. Based on writing dynamic programs using HTML, the prediction of program execution is performed, and a method for implementing real-time update of a dynamic content buffer is provided. The client-side access of the dynamic content is accelerated, the consumption of the web service is reduced, and the real-time update of the dynamic content is achieved.

Description

The method of developing WEB dynamic script with HTML I. Technical field:

This technology is a new technology applied to the development of Internet (Web) programs. It consists of four modules: browser script mark interpretation software, Web data service software, Web service anti-CC software and Web real-time dynamic data cache software.

Second, technical background -

Web dynamic program development:

Today's Internet (Web) dynamic program development, mainly includes client-side script development and server-side script development. There are many ways to develop existing server scripts. The development methods are different in their difficulty and performance. If developers want to use existing technology methods to develop (Web) service programs, it is not enough to understand the html language. You must also learn its own development language (such as php, asp, cgi, fastcgi). In particular, developing programs with the most efficient C++ language is the most difficult. These have a certain implementation difficulty and a large workload for technicians who generally only understand html language.

The common features of several existing dynamic scripting languages are: Separating the scripting language from the static html, and embedding the static content or static content into the dynamic script program through dynamic scripting, and outputting it to the browser. This mode makes the scripting language and html intertwined, often confusing the programming of data and data representation, making the logic less clear, and the programmer must understand both the static html language and the dynamic language to program. On the other hand, in order to achieve the highest execution efficiency, complex C++ code (Fastcgi C++) needs to be written, and Fastcgi C++ is difficult to develop. So for rapid development, developers often choose to perform the most efficient, but relatively simple way to develop a WEB application (such as PHP). For the above unsolved problems, the browser script mark interpretation module based on the technology and the Web

Data Service Module, we propose a solution that can use html or xml (or other browser client language or data format) instead of (web) dynamic scripts for data request, arrangement, reuse, combination, etc. . At the same time, it can achieve C++ background service execution efficiency. Let ordinary developers only have html language foundation and sql knowledge, can develop ordinary web service programs, which not only simplifies the development method, reduces the development difficulty, reduces the development workload, and greatly improves the execution efficiency.

Web service Anti-CC:

The Internet's anti-CC attack is a difficult problem to solve. So far, CC has no effective prevention mechanism. Based on the technology of browser script mark interpretation module and Web data service module of this technology, combined with the principle of modern cryptography, a new mechanism of Web server anti-CC attack is proposed and implemented.

Web dynamic data cache:

The current Web cache is mainly for the caching of static data, and the concept of timeout is adopted for the caching of dynamic data. That is to say, the dynamic data content must be re-acquired after a certain period of time, so that although the customer's access speed is improved, the customer cannot get instant update information. The technology real-time dynamic data caching mode of the technology is based on the browser script markup interpretation module and the web data service module, and researches a real-time dynamic content caching method, which realizes real-time based on the new development web application. The function of dynamic data content caching. That is, it can improve the access speed of customers, and enables customers to get instant updates.

Third, the invention content:

(Web) Dynamic Script Development Technology:

1. Technical principle:

This technology implements request, or fetch, arrange and combine application data through html, ess format data executed on the browser side, and with a special web data service program, which realizes only through html mark or ess data and Simple sql statement in the background, you can develop web service programs without writing dynamic scripts.

This technology greatly reduces the development workload of the WEB service program. Developers only need to hold the html and sql language to develop the web service program. The code written with this technology can be executed transparently on any web service that supports PHP or Fast cgi (c++) without changing the code according to different background execution methods (PHP, Fastcgi C++). The development difficulty is greatly reduced, the development workload is reduced, and the execution speed of the background service program is improved, the network data transmission amount is reduced, and the network bandwidth is saved.

2. An example:

Here defines a business, specifying the parameter description ParaRule="paral", display style: ShowRule="Showl", display position: ShowId="topiclist", MaxShowNumber=6 means to display up to 6 lines. InitExec="true"3⁄4 shows autoload execution.

Web anti-CC attack technology

1. Technical principle:

Based on the server-side questioning, the client-side answering method, in the application environment of the HTML development dynamic program, we developed a new anti-CC attack technology method, and combined it with the HTML development dynamic program technology to complete the implementation. This method mainly uses the browser-side request procedure and the back-end web server program to reply to the question-and-answer mechanism, and combines the large-scale decomposition principle of modern cryptography to increase the computational cost of CC attacks. Under this mechanism, the server's question must be made by the client to perform a large number of calculations in order to answer. The resources of the CC attack must be enlarged by hundreds of thousands, millions, or even millions of times compared to the web service they are attacking in order to achieve the previous attack effect.

The application of this technology can solve common CC attacks. In particular, it can effectively prevent a single master server from controlling CC attacks by multiple proxy servers, and can perform single-master server CC attacks without affecting normal user access. When the time between two attack packets is extended to the second level. Real-time dynamic content caching technology:

1. Technical principle:

Based on the mechanism of the new method of dynamic script development mentioned above, a technical method of real-time dynamic caching is developed. The technical method is to encapsulate the background data operations, and the web application program is scheduled by the web service program on the basis of the package, which simplifies the development of the web application and enables the developer to manage the relationship between different data operations. . In this way, for general business data operations, we can implement real-time dynamic content caching through the management of business data. This means that the cache does not have a cache "timeout" concept in the normal sense, and dynamic data is only updated when the content is updated. If the web server "predicts" that the dynamic program will get the content that matches the cached content, then the dynamic program will not be executed, the cached content will not be updated, and the user request will get the data in the cache.

Fourth, the implementation method:

By deploying specialized web service software (including web data service software, anti-CC module and real-time dynamic cache module), and placing the program code developed by this technology in the directory of the web server, the user through the browser ( IE, CHROME, FIRERX) Enter the server URL, the browser downloads the webpage and the program, and implements the interaction with the background service program by executing the javascript code in the webpage. That is, the function as described above can be achieved.

For the client, the service can be accessed only by the user's browser supporting javascript.

The code layout in the background is the same as that of a normal web server. You need to put the web page and the written program to the specified address. Users do not need to install any client software, as long as they have a browser that supports javascript.

Claims

Claim

1. Write html or ess instead of server-side dynamic scripting and client-side dynamic scripting.

2, strictly separate the interface expression of application data and application data, making the development logic clear, different from the traditional dynamic web programs (they are dynamic static content is mixed back in the same link), thus avoiding the repeated transmission of the interface expression. Reduce the amount of data transfer.

3, through the server to simply ask questions, and the browser must perform a large number of operations or consume a lot of resources to answer the method, without affecting the normal user access, dramatically increase the cost of launching CC attacks, making its resource costs tens of thousands, ten Ten thousand, one million, ten million times (the resources consumed depend on the server-side algorithm settings) and the consumption of server resources, weakening or eliminating CC attacks.

4, real-time dynamic content cache: do not use the concept of cached content timeout for dynamic content caching, when the server predicts this customer request, will not generate new data updates, the background service program corresponding to this data request will not When executed, the data request will only retrieve the data in the cache and return, so as to speed up access, reduce service pressure, and enable the client to obtain real-time content updates.