1. Pertemuan 3 Server Side Scripting (ASP & ASP.Net) Matakuliah: T0053/Web Programming Tahun: 2006 Versi: 2

2. Learning Outcomes Pada akhir pertemuan ini, diharapkan mahasiswa akan mampu : Menjelaskan konsep server side scripting Membuat program menggunakan ASP & ASP.Net

3. Material Outline Mengenal Server side scripting Pemrograman dasar ASP & ASP.Net Koneksi ke database

4. Server Side Scripting Server Side Scripting is script that execute in web server (IIS, Apache Web Server, etc) Server Side Scripting very useful if require validation against database, server processing and security.

5. Introduction to ASP ASP (Active Server Pages) is server side scripting from Microsoft that usually uses Internet Information Services (IIS) as web server. Active Server Pages (ASP) –Processed in response to client request –ASP file contains HTML and scripting code –VBScript de facto language for ASP scripting Other languages can be used –JavaScript –.asp file extension –Microsoft-developed technology –Send dynamic Web content HTML DHTML ActiveX controls Client-side scripts Java applets

6. How ASP Work Client sends request –Server receives request and directs it to ASP –ASP processes, then returns result to client HTTP request types –Request methods GET –Gets (retrieves) information from server –Retrieve HTML document or image POST –Posts (sends) data to server –Send info from HTML form »Client-entered data »Info to search Internet »Query for a database »Authentication info

7. How ASP Work Browsers often cache Web pages –Cache: save on disk –Typically do not cache POST response Next POST request may not return same result Client requests ASP file –Parsed (top to bottom) by ActiveX component asp.dll ActiveX component: server-side ActiveX control that usually does not have GUI Code executed as encountered @LANGUAGE statement –Specifies scripting language –If not used, VBScript assumed As interpreted, HTML (plus client-side scripts) sent to client –Parsed each time requested –Web server must support ASP by providing component such as asp.dll

8. Client Side VS Server Side Client-side scripting –Used for: Validation Interactivity Enhancing Web page with ActiveX controls Dynamic HTML Java applets Accessing browser –Browser-dependent Scripting language must be supported by browser or scripting host –Viewable on client Protecting source code difficult

9. Client Side Vs Server Side Server-side scripting –Reside on server  more flexibility Database access –Usually generate custom response for client –Access to ActiveX server components Extend scripting language functionality –Run exclusively on server  cross-platform issues not a concern –Not visible to client Only HTML + client-side scripts sent to client

10. ASP Example Scripting delimiters – –Indicate code is to be executed on server, not client @LANGUAGE –Specify scripting language (default VBScript) – Each time page refreshed, server loads and interprets ASP

11.  2000 Deitel & Associates, Inc. All rights reserved. Outline 1.1Specify VBScript as scripting language 1.2Use Option Explicit to indicate variables be explicitly declared by programmer 1.3Use META tag to set refresh interval Time gets current time on server (hh:mm:ss) Short for 1 2 3 4 5 6 7 8 A Simple ASP Example 9 10 11 12 13 Simple ASP Example 14 15 16 17 18 19 20 21 22 23 24 25

12.  2000 Deitel & Associates, Inc. All rights reserved. Output from a simple Active Server Page

13. Server Side ActiveX Component Server-side ActiveX components –Typically do not have GUI –If scripting language for ASP not support certain feature, create ActiveX Server component Visual C++, Visual Basic, Delphi, etc. –Usually execute faster than scripting language equivalents –Executed on server Client does not need to support ActiveX technologies

14.  2000 Deitel & Associates, Inc. All rights reserved. Some server-side ActiveX components included with IIS and PWS

15.  2000 Deitel & Associates, Inc. All rights reserved. Outline 1.1Create instance of AdRotator component 1.2Call Response object’s Write method to send advertisement to client 1 2 3 4 5 6 7 8 AdRotator Example 9 10 11 12 AdRotator Example 13 14<% 15 ' Declare flagChanger 16 Dim flagChanger 17 18 ' Create an AdRotator object 19 Set flagChanger = Server.CreateObject( "MSWC.AdRotator" ) 20 21 ' Use config.txt to send an advertisement to the client 22 Call Response.Write( _ 23 flagChanger.GetAdvertisement( "config.txt" ) ) 24%> 25 26

16.  2000 Deitel & Associates, Inc. All rights reserved. Outline config.txt 1.Header includes image HEIGHT, image WIDTH and image BORDER width Asterisk separates header from advertisements Image location Destination URL ALT tag Percentage of time image appears 27WIDTH 54 28HEIGHT 36 29BORDER 1 30* 31/images/us.gif 32http://www.odci.gov/cia/publications/factbook/us.html 33United States Information 3420 35/images/france.gif 36http://www.odci.gov/cia/publications/factbook/fr.html 37France Information 3820 39/images/germany.gif 40http://www.odci.gov/cia/publications/factbook/gm.html 41Germany Information 4220 43/images/italy.gif 44http://www.odci.gov/cia/publications/factbook/it.html 45Italy Information 4620 47/images/spain.gif 48http://www.odci.gov/cia/publications/factbook/sp.html 49Spain Information 5020

17.  2000 Deitel & Associates, Inc. All rights reserved. Demonstrating the AdRotator ActiveX component

18. File System Object File System Objects (FSOs) –Manipulate files, directories and drives –Read and write text –In Microsoft Scripting Runtime Library –5 FSO types: FileSystemObject –Interact with File s, Folder s and Drive s File –Manipulate File s of any type Folder –Manipulate Folder s (i.e, directories) Drive –Gather info about Drive s (local or remote) TextStream –Read and write text files

19. File System Object OpenTextFile(filename, code, create) –filename - file to open –code 8 - open for appending 1 - open for reading 2 - open for writing –create? - if true, creates a new file if does not exist

20.  2000 Deitel & Associates, Inc. All rights reserved. FileSystemObject methods

21.  2000 Deitel & Associates, Inc. All rights reserved. Some common File properties and methods

22.  2000 Deitel & Associates, Inc. All rights reserved. Some Folder properties and methods

23.  2000 Deitel & Associates, Inc. All rights reserved. Drive properties

24. Quering Data <% 'Declare Variables Dim dcnDB'As ADODB.Connection Dim rsDB'As ADODB.Recordset Dim sqlQuery'As String 'Find path of database file filePath = Server.MapPath("depkeu.MDB") 'Open Database Connection Set dcnDB = Server.CreateObject("ADODB.Connection") 'dcnDB.Open "DBName" - This is for an ODBC Datasource (if set up) or ' use the below code for opening a Access 2000 DB dcnDB.ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source="&filePath dcnDB.Open 'Query and create recordset sqlQuery = "SELECT * FROM Students ORDER BY LastName,FirstName" Set rsDB = Server.CreateObject("ADODB.Recordset") Set rsDB = dcnDB.Execute(sqlQuery) %>

25. Quering Data ">Update "> Delete <% rsDB.MoveNext Loop %>

26. Updating Data <% 'Declare Variables Dim dcnDB'As ADODB.Connection Dim rsDB'As ADODB.Recordset Dim sqlQuery'As String Dim sqlUpdate'As String Dim filePath'As String 'Find path of database file filePath = Server.MapPath("depkeu.mdb") 'Open Database Connection Set dcnDB = Server.CreateObject("ADODB.Connection") 'dcnDB.Open "DBName" - This is for an ODBC Datasource (if set up) or ' use the below code for opening a Access 2000 DB dcnDB.ConnectionString = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source="&filePath dcnDB.Open

27. 'Check for action If Request.Form("action") = "Update" Then 'Create SQL UPDATE statement from form fields sqlUpdate = "UPDATE Students " _ & "Set FirstName = '" & Request.Form("FirstName") & "'," _ & "LastName = '" & Request.Form("LastName") & "' " _ & "WHERE StudentID = '" & Request.Form("StudentID") & "'" 'Execute the query dcnDB.Execute(sqlUpdate) 'Notify action taken Response.Write "Record Updated " End If 'Check for StudentID in URL Path If Request("StudentID") <> "" Then 'Create SQL String sqlQuery = "SELECT * FROM Students WHERE StudentID = '" & Request("StudentID") & "'" 'Query the database and create a recordset Set rsDB = Server.CreateObject("ADODB.Recordset") Set rsDB = dcnDB.Execute(sqlQuery) End If %>

28. ASP.NET New version of ASP Using.NET CLR.aspx extension ASP.Net is part of Visual Studio.Net

29. Visual Studio.Net IDE

30. ASP.NET Code Untitled Page

31. Toolbox

32. Simple Form

33. ASP.Net Code Partial Class _Default Inherits System.Web.UI.Page Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click Label1.Text = "Helo " & DropDownList1.Text & ", Selamat Belajar ASP.Net" End Sub End Class

34. Result

35. Validation in ASP.Net ASP.NET provides validation controls to: Compare values Compare to a custom formula Compare to a range Compare to a regular expression pattern Require user input Summarize the validation controls on a page

36. Adding Validation Controls to a Web Form 1. Add a validation control 2. Select the input control to validate 3. Set validation properties <asp:Type_of_Validator id="Validator_id" runat="server" ControlToValidate="txtName" ErrorMessage="Message_for_error_summary" Display="static|dynamic|none" Text="Text_to_display_by_input_control"> <asp:Type_of_Validator id="Validator_id" runat="server" ControlToValidate="txtName" ErrorMessage="Message_for_error_summary" Display="static|dynamic|none" Text="Text_to_display_by_input_control"> 11 22 33

37. Positioning Validation Controls on a Web Form Create error messages Select display mode Static Dynamic

38. Combining Validation Controls Can have multiple validation controls on a single input control Only the RequiredFieldValidator checks empty controls

39. Input Validation Controls RequiredFieldValidator InitialValue CompareValidator ValueToCompare or ControlToCompare Type Operator RangeValidator MinimumValue MaximumValue Type Code Examples

40. Using the RegularExpressionValidator Control Used when input must conform to a pre-defined pattern Visual Studio.NET includes patterns for: Telephone numbers Postal codes E-mail addresses <asp:RegularExpressionValidator … ControlToValidate="US_PhoneNumber"… ValidationExpression=" ((\(\d{3}\) ?)|(\d{3}-))?\d{3}-\d{4} " …>* <asp:RegularExpressionValidator … ControlToValidate="US_PhoneNumber"… ValidationExpression=" ((\(\d{3}\) ?)|(\d{3}-))?\d{3}-\d{4} " …>*

41. Connecting to Database Namespace used: System.Data.SqlClient and System.Data. Classes used: SqlConnection, SqlDataAdapter and SqlCommand.

42. Connecting to database dim cn as sqlConnection cn= new SqlConection (“server=localhost;uid=“ &username.text & “;pwd=“&pass.value &”;database=pubs;”) try ‘open connection cn.open … catch sx as sqlException … end try cn.close

43. Using Templates with List-Bound Controls Displaying Data in the Repeater and DataList Controls Using Templates Demonstration: Using a DataList Control

44. Displaying Data in the Repeater and DataList Controls Create the control and bind it to a DataSet Set custom properties Autoformat Columns (horizontal vs. vertical columns) Display data in templates

45. Using Templates FooterTemplate HeaderTemplate ItemTemplate SeparatorTemplate AlternatingItemT emplate