Why you need to develop a Web interface _ interface test

System type XXX Management system:

such as backstage, CRM customer management system and so on. This kind of system generally takes the data management as the main, mainly handles each kind of report query, adds, deletes, modifies and so on function. This kind of system characteristic, the page design is single, the interaction is simple, generally by the backend developer completes, therefore generally also does not need to use the Web interface. Front-end page complex system:

These pages contain JS, CSS and pictures, need to design and front-end development complete, backend personnel only provide interface.

Web interfaces are used for back-and-end interactions, and backend development is done. Separation of front and back:

The backend provides a web interface, and the front-end uses the Web interface provided by the backend to fetch data, focusing on data presentation and page interaction design. With the separation of the front and back ends, the Web interface is more widely used,

For front-end page calls, web interfaces to mobile app calls, web interfaces to calls between different systems, internal or external to the company.

The above is the benefits of Web interface, especially in recent years, the gradual separation of the front and back, web interface development is very important.

The front-end is how to handle the interface.

After the backend provides the interface, the front-end calls the interface, which is displayed on the Web page through HTML, JS, and CSS processing. is the service layer (interface)-----> Application Layer (Input box, button, etc.)

Example:

The service layer backend provides a query interface with a transmission parameter ID, query keyword. The front end of the application layer has a form that fills in the query keyword and a confirmation button on the Web page, and the user fills out the form to call the Web interface.

1. Do not fill in the Query keyword, directly click the Confirmation button, the equivalent ID is null, the interface how to deal with

2. The form of the word limit can be controlled by the front end

3. Special string, fuzzy query, ID for these, how to handle the interface, should be matched by regular expression after the return, the front-end again displayed.

4. If it is a password input box, the front end should use the HTML5 <input type= ' password ' required> will not be explicitly displayed or through JS implementation, but the transmission process is clear or not. If the backend does not encrypt processing, it must also be clear text transmission, back-end interface needs to be MD5, SHA-256, AES and other ways encryption is encrypted transmission.

1.Web API interface How to prevent calls outside the/app of this website. -Know

https://www.zhihu.com/question/40159698?sort=created

1.https
2. Identity Certification
3. Interface and parameter name deliberately confused
4. Change the interface level two domain name irregularly

2.web interface Exposure Problem _ Baidu Search ...

https://www.baidu.com/s?ie=utf-8&f=8&rsv_bp=1&rsv_idx=2&tn=98012088_5_dg&wd=web%E6%8E%A5% E5%8f%a3%e6%9a%b4%e9%9c%b2%e9%97%ae%e9%a2%98&rsv_spt=1&oq=web%25e6%258e%25a5%25e5%258f%25a3&rsv_pq =e6b2d2850005cc1a&rsv_t=b532foavvv1anbshfnam2khe1lr%2bnrqpxqnvlgmzn0qjmepvivsc%2bzrup4rbksvfou%2bi0w& rqlang=cn&rsv_enter=1&rsv_sug3=28&rsv_sug2=0&inputt=31380&rsv_sug4=32056