Assignment front sheet

brickborderΑσφάλεια

3 Νοε 2013 (πριν από 3 χρόνια και 7 μήνες)

81 εμφανίσεις





Assignment front sheet

Learner name


Assessor name


Len Shand

Date issued

Completion date

Submitted on

21
st

May

2012

8
th

June

2012


Qualification

Unit

number and title

BTEC
Level 3
Extended Diploma in

Information Technology

(QCF)

Unit 2
7

Web S
erver Scripting

(Group B)

Assign
ment title

3
:
Issues and security

In this assessment you will have opportunities to provide evidence against the following criteria.

Indicate the page numbers where the evidence can be found.


Criteria
reference

To ac
hieve the criteria the evidence must show that

the student is able to:


Task
no.


Page numbers

P
5

Implement, test and document a web content management system to meet a
defined need


1



P
6

E
xplain the issues surrounding

web server scripting


4



M
4

I
m
plement an error log for

a website using web server

scripting


2



D
2

C
reate a web application to

generate website statistics

using web server
scripting


3



D
3

R
ecommend ways to improve

web security when using web

server scripting


5




Learner declara
tion

I certify that the work submitted for this assignment is my own and research sources are fully acknowledged.


Learner signature:

Date:







Assignment brief

Unit
number and
title


Qualification

BTEC
Level 3
Extended Diploma in

Information Tech
nology

(QCF)

Start date

21
st

May 2012

Deadline

8
th

June 2012

Assessor

Len Shand


Assignment title

3: Issues and security

The pu
rpose of this assignment is to
demonstrate that you know

how to use web server scripting to perform a series of useful
tas
ks

Scenario
:
Having

implement
ed

a few, everyday,
you now want to combine them into an car hire application. You also need to
explain some of the issues, and especially security, involved in
web server scripting.


Task 1 (P
5
)



Combine the following funct
ions you have developed into a small car hire application



Create a web page that will allow multiple users to login on the page. The page must have
a textbox to accept the username and a text box to accept the password. The password
field must not display
the typed password. The comparison of the username and the
password must be performed on the server and the password database (password.mdb) is
to be used. If the two values match then the user will be allowed to view the contents of
the vehicles available

for rent

on the welcome.aspx page. If the credentials are not met,
an error message with the following text must be displayed

in red
:
You are not authorised
to view this page
. If the login is successful, redirect the user to a page called
welcome.aspx



On
the welcome.aspx page display the vehicles and their information in a datagrid. You
must allow the user to sort by category.



Make sure your web pages are attractive as well as functional



Use a database to
display

the content (cars

and car details including

prices of rentals
)



Write a test plan and run the tests



Document any problems you find and the fixes you apply



This will be assessed by witness statement
.

You must also submit
screen shots
,
commented scripts
, a test plan and a problem log.

Task 2 (
M4
)



M
odify the login scripts so that an error log entry is created in a file which records the
date, time and type of error. A screen message stating the error has been logged should
be displayed.



This will be assessed by witness statement. You must also subm
it screen shots
and
commented

scripts
.


Task 3 (
D2
)



Modify the login scripts so that an entry is made into
a
file which records the date the
login occurred, browser and operating system in use
.



This will be assessed by witness statement. You must also sub
mit screen shots
and
commented

scripts.

Task 4 (
P6
)




Describe three ethical issues concerning web server scripting. Write a paragraph on each,
about a page in total.


Task 5 (
D
3
)



Describe four ways in which security vulnerabilities in web server scripti
ng can be
remedied. Where applicable use examples of scripts to illustrate your descriptions. Write
a paragraph on each, at least a page in total.



This brief has been verified as being fit for purpose

Assessor

Bob Higgie

Signature


Date


Internal verifier

Len Shand


Signature


Date


21 May 2012



Witness statement

Learner name


Qualification

BTEC
Level 3
Extended Diploma in

Information Technology

(QCF)

Unit number and title

Unit 27 Web Server Scripting

(Group
A
)

Assignme
nt

3: Issues and security


Description of activity undertaken (please be as specific as possible)

Implement a few, everyday, tasks to learn and demonstrate your understanding of web server scripting.



Assessment and grading criteria


Evidence

Descri
ption

Witnessed

Date

P
5
:
Car hire application

Secure login to all pages

Display error message if appropriate

Display vehicles and details in a datagrid

Sort columns in the datagrid

Appearance of web pages



M4
:
Log errors

Screen message

Log file entries

Data and time recorded

Type of error recorded



D2
:
Record statistics

Log file entries

Date recorded

IP address recorded

Browser and OS recorded




How the activity meets the requirements of the assessment and grading criteria,

including how and whe
re the activity took place



Witness name


Job role






Witness signature


Date










Assessor name






Assessor signature


Date




Internal verification of assignment brief

Qualification

BTEC
Level 3
Extended Diploma in

Information
Techn
ology

(QCF)

Unit number and title

Unit 27 Web Server Scripting (Group B)

Assessor

Bob Higgie


Internal verifier checklist


Comments

Are accurate programme details shown?

Y


Are accurate unit details shown?

Y


Are clear deadlines for assessment given
?

Y


Is this assignment for whole or part of a unit?

P


Are
the grading and
assessment criteria to be addressed
listed?

Y


Does each task show which criteria are being addressed?

Y


Are these criteria actually addressed by the tasks?

Y


Is it clear wh
at evidence the learner needs to generate?

Y


Are the activities appropriate?

Y


Is there a scenario or vocational context?

Y


Are

the language and presentation appropriate?

Y


Is the timescale for the assignment appropriate?

Y


Overall is the assignm
ent fit for purpose?

Y


* If “No” is recorded and the internal verifier recommends remedial action before the brief is issued, the assessor and the
internal verifier should confirm that the action has been undertaken
.

Internal verifier

Len Shand

Signat
ure


Date

21 May 2012





Action required:

None

Action taken:


Assessor

Error! Bookmark not defined.

Signature


Date


Internal verifier


Signature


Date