Web Servers / Deployment Alastair Dawes Original by Bhupinder Reehal

What is a web server? Computer with a software package Manages and shares web based applications Files retrieved via a web browser Using HTTP protocol Accessed via IP address/Domain name Types of Servers Local Service Providers

Issues with Web Servers Local Server Security Maintenance Service Providers User Support Limited support of technology Sensitive information exposed

Local Servers Testing purposes Windows Time consuming to upload to external server Windows IIS Download and Install web server software Apache Web Server Abyss Web Server X1

Apache Web Server “. . .63% of the web sites on the Internet are using Apache, thus making it more widely used than all other web servers combined" Apache.org Install server before any other technologies PHP MySQL Configure themselves for the server

Using Apache Web Server Software Database and PHP hosted on Server PHP executed on Server Install Web Server Software MySQL Database PHP Front end for MySQL database (optional) MySQL Control Centre MySQL Administrator

Using Internet Information Server (IIS) Installed on Windows 2000 server by default Use Add/Remove to install components Use Inetpub root directory to store files To access files http://servername/filename

Web Server Requirements Server must support Database Server Side Scripting Language Unable to communicate without support If using a Service Provider Where will the database be stored?

Database with a Service Provider Most provide a GUI Create database and tables online Update database via service provider website Import and export your database

How secure is your web server? Public websites are hacked on a daily basis Hackers may be seeking to: Embarrass an organisation Placement of illegitimate material Can your files be easily accessed? How will you protect your server? Firewall Security

Firewall Security Protect using Software Firewalls Hardware Routers Wireless Routers Protects against unauthorised access and viruses Windows XP in-built firewall

Software Firewalls Good for single computers Pro’s Cons No requirement for additional software No requirement for additional computer wiring Cons Speed – uses system resources

Hardware Routers Provide protection for multiple computers If they have a hardware firewall At least 4 network ports Requires wiring

Wireless Routers Allows wireless connection Excellent for laptops, PDA’s etc Unauthorised access Encryption Wired Equivalent Privacy (WEP) Wi-Fi Protected Access (WPA and WPA2) Neighbours People outside home Not always available with built-in firewall

Importance of a Firewall Hackers with malicious intent Delete information Crash machine Steal personal information Passwords Credit Card Numbers

Maintenance Keep software up to date Regular virus checks Web Server software Firewall security Virus checkers Regular virus checks Regular Back-ups

How will your web files be accessed? Client/Server Communication A web browser is a client program that requests services from a web server Hypertext Transport Protocol (HTTP) The web server responds to the request File requests also made using File Transfer Protocol (FTP)

Client/Server Communication Example Client requests details from bank using HTTP

Web page deployment Web files need to be: Stored Retrieved Updated How will files be transferred? Local Server Transfer to root folder External Server FTP

What is FTP? File Transfer Protocol Transfers files between server and client Two Basic operations Downloading Uploading

How to use FTP Requires username and password Anonymous – not secure Easily accessible using web browser Different protocol identifier e.g. HTTP or FTP ftp://username:password@webaddress.com Command Line Using and ‘Get’ and ‘Put’ FTP Programs Provide a GUI CuteFTP, FileZilla, SmartFTP

Using a web browser - IE Upload Download

Using Command Line Open FTP connection Enter username and password Use ‘Get’ command to download a file Use ‘Put’ command to upload a file

Using an FTP program - SmartFTP Username Password Client Files Files on Server Transfer Queue

Summary Web server setup Protecting your server Maintenance Web page deployment