Shtml streamlined tutorial _ HTML/Xhtml _ webpage Creation

What is SSI used? The reason we need to talk about ssi is the acronyms of shtml -- server-parsedHTML. Contains HTML text containing commands on the embedded server. Before being sent to a browser, the server will completely read, analyze, and modify the SHTML document. Shtml is similar to asp. Some ssi commands are used in files named after shtml, just like asp commands. You can write ssi commands in the shtml file, when the client accesses these shtml files,
The server will read and interpret the SHTML files and explain the SSI commands contained in The SHTML files, for example: you can use the SSI command in the SHTML file to reference other html files (# include). The files sent by the server to the client are interpreted as SHTML without the SSI command. It implements functions not available in HTML, that is, it can achieve dynamic
SHTML is an evolution of HTML. Like Sina's news system, the news content is fixed, but the advertisements and menus on it are referenced by # include.
At present, it mainly has the following usage:
1. Display Server Environment Variables <# echo>
2. Insert text content directly into the document <# include>
3. Display WEB Document Information <# flastmod> <# fsize> (for example, file creation date/size)
4. directly execute various programs on the server <# exec> (for example, CGI or other executable programs)
5. Set SSI information display format <# config> (for example, file creation date/Size Display Mode)
Advanced SSI You can set variables to use the if Condition Statement.
　
Use SSI
SSI is a set of commands provided for WEB servers. These commands can be directly embedded in the comments of HTML documents. For example:
<# Include file = "info.htm" -->
It is an SSI command, which serves to bring the content of "info.htm" to the front page. When a visitor visits the page, his htmldocument displays the content of info.htm.
The usage of other SSI commands is similar to the previous example. It can be seen that SSI only inserts a little code, and the usage is very simple.
Of course, if the WEB server does not support SSI, it simply uses it as a comment and directly skips the content. The browser also ignores this information.
　
How can I configure the SSI function on my WEB server?
On some WEB servers (such as IIS 4.0/SAMBAR 4.2), files containing the # include command must use extensions that have been mapped to the SSI interpreter; otherwise, the Web server will not process the SSI command; by default, the extension. stm ,. shtm and. shtml is mapped to the interpreter (Ssinc. dll ).
Apache depends on your settings. Modify srm. conf as follows:
AddType text/x-server-parsed-html. shtml parses only the file with the .shtml extension SSI command
AddType text/x-server-parsed-html. html parses SSI commands for all HTML documents
The Netscape WEB Server directly uses the Administration Server to enable the SSI function.
Website uses the Mapping label in the Server Admin program. The content type added with the extension is wwwserver/html-ssi.
The Cern server does not support SSI. You can use the SSI fraud method to download a PERL script from the http://sw.cse.bris.ac.uk/WebTools/fakessi.html so that your CERN server can use some SSI commands. (Exec commands are not supported .)
　
SSI command basic format
SSI command basic format:
Program code:



For example
Program code:

<# Include file = "info.htm" -->
<# Include file = "info.htm" -->
Note:
1. Is an annotation in HTML syntax. When the WEB server does not support SSI, this information is ignored.
2. # include is one of the SSI commands.
3. file is the include parameter and info.htm is the parameter value. In this instruction, specify the document name to be included.

Note:

1.



This document name: program code:



Current Time: program code:



Your IP address is the program code:




# Include example
Purpose:
Insert the content of a text file to the document page.
Syntax:
Program code:

<# Include file = "file name" -->
<# Include virtual = "file name" -->
<# Include file = "file name" -->
<# Include virtual = "file name" -->
The file name is a relative path, which is relative to the directory of the document using the # include command. The contained file can be in the same level directory or its sub-directory, but not in the upper level directory. For example, the nav_head.htm document under the current directory is file = "nav_head.htm ".
The virtual File name is the complete path of the virtual directory on the Web site. For example, if the parameter is relative to the nav_head.htm file in the hoyidirectory under the Server file root directory, it is file = "/hoyi/nav_head.htm"
Parameters:
File specifies the location of the contained file relative to this document
Virtual specifies the location relative to the root directory of the server document
Note:
1. The file name must have an extension.
2. The contained file can have any file extension. I think it is most convenient to directly use the htm extension. Microsoft recommends using the. inc extension (this depends on your hobby ).



Example:
Program code:





<# Include file = "nav_head.htm" --> Insert the header file to the current page.
<# Include file = "nav_foot.htm" --> Insert the last file to the current page.
<# Include file = "nav_head.htm" --> Insert the header file to the current page.
<# Include file = "nav_foot.htm" --> Insert the last file to the current page.

# Flastmod and # fsize demonstration
Purpose: # The Last Update date of the flastmod File
# Fsize file length
Syntax:
Program code:





Parameters:
File specifies the position of the file to be included in this document, such as info.txt under the current directory.
Virtual specifies the location relative to the root directory of the server document, as shown in/hoyi/info.txt
Note:
The file name must have an extension.
Example:
Program code:



Insert the latest update date of the news.htm file in the current directory to the current page.
Program code:



Add the news.htm file in the current directory to the current page.
　
# Exec demonstration
Purpose:
Insert the output of an external program to the page. The input of a CGI program or a general application can be inserted, depending on whether the parameter is cmd or cgi.
Syntax:
Program code:





Parameters:
Cmd common application
Cgi CGI script program
Example:
Program code:

The password file is displayed.
The file list in the current directory is displayed.
The CGI program gb. cgi will be executed.
The CGI program access_log.cgi will be executed.
The password file is displayed.
The file list in the current directory is displayed.
The CGI program gb. cgi will be executed.
The CGI program access_log.cgi will be executed.
Note:
As shown in the preceding example, this command is quite convenient, but there are also security problems.
Method prohibited:
. Apache: Delete the "Options exist des ExecCGI" line of code in access. conf;
To disable the # exec command in IIS, you can modify the SSIExecDisable metadatabase;
# Config
Purpose: Specify the error message, date, and file size returned to the client browser.
Syntax:
Program code:







Parameters:
Errmsg custom SSI execution error message, which can be any method you like.
Display Mode of sizefmt file size. The default mode is byte mode ("bytes"), which can be changed to kilobytes ("abbrev ")
Timefmt time display mode, the most flexible configuration attributes.
Example: display the size of a non-existing file
Program code:





Display file size in kilobytes



Program code:








Display time in a specific time format
Program code:


Displays the day of the week, month, and time zone.



Displays the day of the week, month, and time zone.



XSSI
XSSI (Extended SSI) is a set of advanced SSI commands built into the mod-include module of Apache 1.2 or later.
The available Commands include:
# Printenv
# Set
# If
# Printenv
Purpose: Display All environment variables currently in the WEB server environment.
Syntax: program code:



Parameter: None
Example:
Program code:




# Set
Function: assign a value to the variable to be used in the later if statement.
Syntax: program code:



Parameter: None
Example: program code:




# If
Purpose: Create a page that can change the data. The data is displayed according to the requirements calculated when the if statement is used.
Syntax: program code:


Display content

Display content

Display content


Display content

Display content

Display content

Example:
Program code:


Welcome to the server security forum: http://www.31896.net /.

Welcome to love long computer network security online http://www.fineacer.org /.

Welcome to the server security forum!


Welcome to the server security forum: http://www.31896.net /.

Welcome to love long computer network security online http://www.fineacer.org /.

Welcome to the server security forum!

Note: It is used for the backslash in the preceding command to replace internal quotation marks so that they are not interpreted as an end expression. It cannot be omitted.


1. Config command

The Config command is mainly used to modify the default settings of SSI. Where:

Errmsg: sets the default error message. To return user-defined error messages normally, the Errmsg parameter in the HTML file must be placed before other SSI commands; otherwise, the client can only display default error messages, instead of user-defined information.



Timefmt: defines the format of the date and time. The Timefmt parameter must be used before the echo command.






The result is as follows:

Wednesday, 10000l 12,200 0

Maybe the user is unfamiliar with % A % B % d in the previous example. Below we will summarize some of the commonly used Date and Time formats in SSI in the form of A table.

Sizefmt: determines whether the file size is expressed in bytes, kilobytes, or megabytes. In bytes, the parameter value is "bytes". You can use the abbreviations for kilobytes and megabytes. Similarly, the sizefmt parameter must be placed before the fsize command.




2. Include command

The Include command can insert text or images from other documents into the currently parsed documents, which is the key to the entire SSI. By using the Include command, you only need to change one file to instantly update the entire site!

The Include command has two different parameters:

Virtual: the Virtual path to a document on the server. For example:

<# Include virtual = "/includes/header.html" -->

File: Specifies the relative path to the current directory. "../" cannot be used or an absolute path. For example:

<# Include file = "header.html" -->

In this case, each directory contains a header.html file.

3. Echo command

The Echo command displays the following environment variables:

DOCUMENT_NAME: displays the name of the current document.



The result is as follows:

Index.html

DOCUMENT_URI: displays the virtual path of the current document. For example:



The result is as follows:

/YourDirectory/YourFilename.html

With the continuous development of websites, those longer and longer URLs will be a headache. If SSI is used, everything will be solved. Because we can combine the website domain name with the SSI command to display the complete URL, that is:

Http: // yourdomain % 3c! --/# Echo var = "&... uot; -->

QUERY_STRING_UNESCAPED: displays unescaped query strings sent by the client. All special characters are preceded by the Escape Character "". For example:



DATE_LOCAL: displays the date and time when the server sets the time zone. You can combine the timefmt parameter of the config command to customize the output information. For example:


　

The result is as follows:

Saturday, the 15 of each l, in the year 2000

DATE_GMT: similar to DATE_LOCAL, but returns a date based on Greenwich Mean Time. For example:



LAST_MODIFIED: displays the Last Update Time of the current document. Similarly, this is a very practical feature of SSI. You only need to add the following simple lines of text to the HTML document to dynamically display the Update Time on the page.



CGI Environment Variable

In addition to SSI environment variables, the echo command can also display the following CGI Environment variables:

SERVER_SOFTWARE: displays the name and version of the server software. For example:

SERVER_NAME: displays the host name, DNS alias, or IP address of the server. For example:

SERVER_PROTOCOL: displays the protocol name and version used by the client request, such as HTTP/1.0. For example:

SERVER_PORT: display the server's response port. For example:

REQUEST_METHOD: display the client's document request methods, including GET, HEAD, and POST. For example:

REMOTE_HOST: the name of the client host that sends the request information.

REMOTE_ADDR: displays the IP address of the client sending the request.

AUTH_TYPE: shows the authentication method for user identity.

REMOTE_USER: displays the account name used by the user accessing the protected page.




4. Fsize: displays the size of the specified file. You can customize the output format based on the sizefmt parameter of the config command.






5. Flastmod: display the last modification date of the specified file. You can control the output format using the timefmt parameter of the config command.




Here, we can use the flastmod parameter to display the update dates of all links on a page. The method is as follows:


File

Another File

The result is as follows:
File Transfer l 19,200 0
Another File January 08,200 0

6. Exec

The Exec command can execute CGI scripts or shell commands. The usage is as follows:

Cmd: run the specified string using/bin/sh. If SSI uses the IncludesNOEXEC option, the command will be blocked.

Cgi: it can be used to execute CGI scripts. For example, in the following example, the counter. pl script under the cgi-bin directory on the server is used to place a counter on each page: