ESSAY REPORT WEB PROGRAMMING AND APPLICATIONS WEB APPLICATION DEVELOPMENT

VIETNAM GENERAL CONFEDERATION OF LABOR TON DUC THANG UNIVERSITY INFORMATION TECHNOLOGY FACULTY ESSAY REPORT WEB PROGRAMMING AND APPLICATIONS WEB APPLICATION DEVELOPMENT Instructor: Bhagawan Nath Performer: Nguyen An Khanh – 519H0107 Phan Ho Tuan Kiet – 519H0025 Le Tuong Vy – 519H0056 Class: 19H50203 – 19H50204 Course: 19 HO CHI MINH CITY , 2021 INDEX INDEX CHAPTER – INTRODUCTION CHAPTER – DOMAIN NAME & WEB HOSTING CHAPTER – CONFIGURE 12 CHAPTER – UPLOAD SOURCE CODE 16 CHAPTER – SSL CERTIFICATE 23 CHAPTER – INTRODUCTION Our team's topic is Web Application Development Get an overview of how to deploy a web application after coding Intention: ➢ Know how to choose to buy / register domain names, web hosting ➢ Know how to configure to point the domain name to web hosting and configure other necessary parameters ➢ Know different ways to upload source code to your hosting or cloud services Google, Amazon, Heroku ➢ Other issues such as: how to choose to buy and install an SSL certificate CHAPTER – DOMAIN NAME & WEB HOSTING Before building and designing a website, we need to know clearly about what the domain name and the web hosting are? You can imagine that the website is a house, the domain name is an address, and the web hosting is a base for building your house Therefore, what is the domain name? How important it is? How to choose the domain name/ web hosting? Let’s try to find out What is the domain name? The domain name is a website’s name which works on the internet and plays a role as a physical address on it The domain name and the home address, or zip code are the same that help navigation satellite routers, so a browser also needs to the domain for linking and connecting to your website For example: Hostinger.vn, Google.com, Facebook.com are the domain of an internet company When the company (or a client) want to buy the domain name, they can select a server that the domain name can link to Any register for the domain name is managed by ICANN Organization (Internet Corporation for Assigned Names and Numbers) ICANN manages the domain name which can be registered and stored data base Web server is a computer which can store file and database for creating your website After that, it will be sent to users who access your site from their server The domain name that users type on the website is the name, then the domain links to web server address, so browser is able to send a request for accessing web server If there is no the domain, clients have to remember exactly IP address of server whenever they want to access Purpose of buying the web hosting and the domain name There are a lot of purposes that suitable for each user And there are some examples: - For making a website to introduce their enterprise - For developing an e-commercial projects - For protecting corporate brand - For SEO - For selling and making a profit - For storing data - For advertisement - For demo and developing a project at first Overall, depending on the purpose and needs of use as well as the nature of the deployment project, we should buy hosting and domain name at the same time or after a certain period of time or just buy domain names or just buy hosting Types of domain names The domain name has a wide variety of names; however, they are the same which are separated parts: first is name (as ‘Facebook’) and extended part (as ‘.com’) there are many extended parts, from country code (as ‘.co.uk’ or ‘.vn’) to specific code such as ‘.gov’ for government organizations and ‘.edu’ for education organizations, even though ‘.com’ domains is still held in priority on the internet with over 46.5% of websites having this domain name Buy/Register the domain name Registering the domain name simply and it is not special request In fact, we usually spend minutes buying the domain name For example, you just access or go to one of the domain selling sites, choose a suitable domain name and go through the payment process You may need to request personal information entered in accordance with the rules of the ICANN domain name authority CRITERIA ADVANTAGES DOMESTIC - Buy the domain name such as vn, com.vn and international domain name such as com, net,… - Can pay through Visa/Mastercard, Paypal and ATM with internet banking INTERNATIONAL - Easy to buy - Many promotion - Can pay through Visa/Mastercard, Paypal DISADVANTAG ES - Less promotion - ID is required to determine identity - Not allow to register the domain name like vn, com.vn,… - Not pay by ATM with internet banking - Some suppliers don’t have Vietnamese interface Some suppliers: • International: Bluehost – Free when you buy Hosting HostGator – promotion with buying hosting GODAADDY – Special Deal • Domestic: Hostinger.vn MONA MEDIA This is an example for you when you want to buy the domain name on MONA MEDIA with steps Select a reputable address to register a domain name (you can choose to buy now at domain.mona.media) Use the check tool to see if the name is registered yet, if no one has registered, you can buy that domain name Choose the right domain name and pay to buy the domain (if the domain name you choose already has buyers, the system will suggest some other domain names for you to choose from) STEP 1: Select “Register the domain name” STEP 2: Check the domain name have used STEP 3: Select the domain name you want and pay Check your domain name and choose time you want to remain STEP 4: Fill out information 12 CHAPTER – CONFIGURE Preparation: - Domain purchased - Hosting purchased - Use the domain name management system of the purchased provider WAYS TO POINT DOMAIN NAMES TO WEB HOSTING: - Point the domain name at the Name Server of the Hosting - Point domain name to IP address of Hosting: Use default Name Server of domain name provider (Use A record) - Point the domain name to the IP address of the Hosting: Use an Intermediate Name Server Each way will have its own pros and cons Depending on your goals, there will be different options • Point the domain name at the Name Server of the Hosting This is one of the most common ways to use it The advantages of this approach are: o Neat o Easy to operate o High likelihood of success Cons (for newcomers): o Must find the Name Server address of the Hosting o Must be able to access the Nameserver management area to change • Point domain name to IP address of Hosting: Use default Name Server of domain name provider (Use A record) When purchasing the domain name successfully, you will always use the default name server of the provider In case you point to another name server, you need to point to the default Advantages: o Full choice of name server o Manipulating the management of records is more convenient Record fast update o Take advantage of some of the advanced services of the name server Defect: o Must find the exact IP of the hosting provider o Must have basic knowledge of Records such as: A, CNAME, 13 • Point the domain name to the IP address of the Hosting: Use an Intermediate Name Server Some of the most famous free Intermediate Name Servers today are: CloudFlare, Incapsula, Namecheap FreeDNS Some advantages such as: o Save bandwidth for the server o Speed up access to the website because of using the cache (cache) on the server of the CDN o Increase website security, limit DDoS attacks, spam comments on blogs o Use free SSL (improve SEO rankings) However, there are still some disadvantages such as: o If the intermediate Nameserver server is down, your website will be interrupted o The SSL of Intermediate Nameserver (Cloudflare) doesn't work on older operating systems o Your website can be offline when the hosting firewall misunderstands CloudFlare's IP range as the attack address This is an example to config the domain name points to web hosting STEP 1: Find the Name Server address of the Hosting As mentioned above, after Hosting is activated, you will have an email to your Hosting login account, along with the address of the Name Server of the provider Below is the Nameserver information of some hosting providers o StableHost 14 o HawkHost o AZDIGI STEP 2: Access the DNS management area of your domain name provider The goal in this step is to change the Name Server Refer to "How to change the Name Server some domain name registrars" below for how to change Nameservers 15 For example, domain name register GoDaddy STEP 3: Update progress and test After you know the domain name registrar's Nameserver change area, enter the Name Server address of your hosting provider For hosting using cPanel, after changing the name server, in case you want to change the records, go to cPanel → click Advanced Zone Editor to configure 16 CHAPTER – UPLOAD SOURCE CODE Preparation: - Website files: all the datas you have in folder public_html, source code file or even the newest backup - Database files (if any) - Administration of control panel of your hosting account - FTP client (ex: FileZilla) Steps to upload your Website: Step 1: Pick a reliable web hosting company Here are several factors that you should consider when choosing a hosting provider: Live support A good hosting service should have a team of experts who can help you at any time There’s no worse feeling than running into some issues and having to wait for days to get a response Control over your web hosting space The less control you have over your account, the more likely you are to run into trouble when your site grows Room for growth Before you commit to a web host, make sure it offers scalable solutions that can provide more power (such as virtual private servers or cloud hosting) Money-back guarantee Nobody likes a bad investment, so make sure to check for a refund policy This will give you a time frame to test everything out before committing to the service Step 2: Choose your website upload method There are four of the most popular tools to upload a website: File Manager A browser-based tool with all the key features to take care of your website files and directories 17 However, the File Manager has an upload limit If your website files are larger than 256MB, you better use FTP instead File Transfer Protocol (FTP) Most web hosting providers include a File Transfer Protocol (FTP) service, so you can use it to connect to an FTP client FTP clients have no size limit, so you can upload as many files as you want 18 Automatic Website Importer Some hosting providers use an Import Website to extract a website archive to the public_html directory The tool supports zip, tar and tar.gz formats, and the upload limit is 256MB WordPress Migration Plugins If you plan to use WordPress, there are several ways to upload your website to the CMS One of the easiest methods is using a WordPress migration plugin like All in One WP Migration After installing and activating it, the rest of the steps are selfexplanatory 19 Step 3: Upload Your Website File Now that you know the best tools to upload a website, it’s time to get your hands dirty! In this tutorial, we’ll show you how to upload your website using Hostinger’s File Manager and a well-known FTP client, FileZilla Using File Manager Login to Hostinger’s hPanel and navigate to File Manager Once you’re in the public_html directory, select the Upload Files icon from the upper-right menu Select the website archive file on your computer and Upload it to our server Right-click on the uploaded file and Extract the archived files to the public_html directory 20 Using FileZilla Before we begin, make sure to extract the archive to your local computer as FileZilla doesn’t have an Extract feature Connect your account to FileZilla Navigate to Remote Site panel and click on the public_html folder Head to the Local Site panel and locate the extracted files Select the files, and right-click to Upload them to the public_html directory 21 That’s it! By following the above steps, you can transfer all files to public_html without doing any extra work Otherwise, you’ll need to connect via SSH and extract the archive manually Step 4: Move the Website Files to the Main Root Directory In some cases, an additional directory will be created when you upload website files As a result, visitors will be directed to yourdomain.com/subfolder instead of the default yourdomain.com To prevent that from happening, you need to make sure all the files are located in the root directory of your domain, which is public_html You can use the File Manager to move your website files All you need to is rightclick on the subfolder, select the Move option, and set public_html as the destination Use this tutorial for more detailed guidance Step 5: Import Your Database If your website uses a database, you’ll also need to import it along with your website files: Create a new MySQL database and user Access your newly created database via phpMyAdmin Use the Import section to upload the backup file of your database Update the MySQL database connection details (database name, host, user, password) in its configuration files For more detailed steps, check out our guide on how to restore a database using phpMyAdmin Skip this part if you don’t use any database Step 6: Check If the Website Works Once the website files are uploaded, it’s time for a final check! If your domain name is already pointed to your web host, enter the domain name into your browser and see if it directs you to your website Keep in mind that DNS changes can take up to 48 hours to fully propagate worldwide As such, if you just pointed your domain to the web host’s name servers, you might need to wait for a while 22 Use an online tool like whatsmydns.net to check the state of your DNS propagation Just enter your domain name and the tool will check the DNS records against multiple name servers Should you follow all the instructions correctly, your website will appear just fine However, if you run into an issue, ask your hosting provider for assistance And if you’re a Hostinger client, contact us via the live chat and one of our customer success agents will be ready to help you! 23 CHAPTER – SSL CERTIFICATE What is an SSL certificate ? An SSL certificate is a type of digital certificate that provides authentication for a website and enables an encrypted connection These certificates communicate to the client that the web service host demonstrated ownership of the domain to the certificate authority at the time of certificate issuance This authentication process is much like sealing a letter in an envelope before sending it through the mail SSL, short for Secure Sockets Layer, is commonly used on ecommerce sites and pages that require users to submit personal or credit card information By ensuring that all data passed between the two parties remains private and secure, SSL encryption can help prevent hackers from stealing private information such as credit card numbers, bank information, names, and addresses When you visit a Web address starting with "https," the "s" after the "http" indicates the website is secure These websites often use SSL certificates to verify their authenticity While SSL is most commonly seen on the Web (HTTP), it is also used to secure other Internet protocols, such as SMTP for sending e-mail and NNTP for newsgroups Early implementations of SSL were limited to 40-bit encryption, but now most SSL secured protocols use 128-bit encryption or higher The different types of SSL certificates Website owners purchase SSL certificates through Certification Authorities CAs are trusted entities that manage and issue security certificates and public keys that are used for communication in a public network There are three different types of SSL certificates Each provides a different level of security Domain validated (DV) DV certificates only verify who owns the site It’s a simple process where the CA will send an email to the website’s registered email address in order to verify its identity No information about the company is required Be aware that DV certificates have the lowest level of trust and are commonly used by cybercriminals because they are easy to obtain and can make a website appear more secure than it is Organizationally validated (OV) To receive an OV certificate, a CA must validate certain information, including the organization, physical location, and its website’s domain name This process typically takes a couple of days OV certificates have a 24 moderate level of trust and are a good option for public-facing websites that deal with less sensitive transactions Extended validation (EV) This type of certificate is a must-have for websites that handle sensitive information It has the highest level of security and is the easiest to identify In order to issue an EV certificate, the CA performs an enhanced review of the applicant to increase the level of confidence in the business The review process includes examination of corporate documents, confirmation of applicant identity, and checking the information with a third-party database Users can know if a website holds an EV certificate if the browser’s URL bar contains a padlock and the company name is listed in green Why we need SSL certificates? An SSL certificate ensures that the provider is who they claim to be and also indicates secure connections between personal devices and websites Understanding SSL certificates is important for website trust and to help protect customers from becoming a victim to scammers It’s smart to keep in mind that not all websites, or SSL certificates, are created equal An SSL certificate helps secure information such as: • • • • • Login credentials Credit card transactions or bank account information Personally identifiable information — such as full name, address, date of birth, or telephone number Proprietary information Legal documents and contracts Medical records SSL Encryption Offers the Following Advantages: • • • • High encryption levels of up to 256-bit to protect user’s sensitive information Provides strong encryption to protect the users’ information from phishing scams & attacks Protects websites from attack, reducing the risk of hacking, eavesdropping and man-in-the-middle attacks Can provide a positive influence in Google’s evaluation of your website 25 • • • Establishes a safe shopping experience - It’s necessary for websites accepting payments Proves your business authentication and increase your brand reputation by validating your Business from Trusted Certificate Authority (CA) Displays Green Address Bar along with Organization Name (Only for EV SSL) What we need to have before buying an SSL certificate? • A unique IP address Because of the way that the SSL protocol was set up, you will need a separate IP address for each certificate that you want to use • A CSR A certificate signing request or CSR is a piece of text that must be generated on your web server before ordering the SSL certificate • Correct contact information in WHOIS record When you purchase a certificate for a particular domain name, the certificate authority needs to ensure that you own the domain name that you are getting the certificate for and that you are authorized to order the certificate • Business/Organization validation documents If you are buying a high-assurance certificate, your business must also be validated How to order an SSL certificate? First, you need to create a CSR and prepare your WHOIS record and company validation documents before submitting your order The process of ordering a certificate goes something like this: 26 • • • • • Prepare by getting your server set up and getting your WHOIS record updated (it needs to show the correct company name and address), etc Generate the CSR on the server Submit the CSR and other info to the Certificate Authority Have your domain and company validated Receive and install the issued certificate ... choose to buy and install an SSL certificate CHAPTER – DOMAIN NAME & WEB HOSTING Before building and designing a website, we need to know clearly about what the domain name and the web hosting... the same place Differences between web hosting and domain name Domain names and web hosting have a symbiotic relationship like software and hardware or yin and yang While it is technically possible... provider is who they claim to be and also indicates secure connections between personal devices and websites Understanding SSL certificates is important for website trust and to help protect customers