Application Security Testing: An Integral Part of DevOps
This time, let's get a little more sophisticated and use a prompt box. Don't let the script scare you. We'll look at each step in detail. Remember to start with your template and add the script to it.
When you open the page in your browser and the box pops up, give an answer to the question, such as "I sure would," and check the result. Also, try just pressing "OK" or "Cancel" without entering an answer and see what it does.
Let's look at the script and see what exactly is happening. (We don't need to go over the open and closing tags and comment lines since you already know how they work. From now on I'll only be highlighting the actual script itself.)
On the first line (after the opening tags) the reserved word
var is used to declare the variable "ans." The variable is also initialized using the
prompt() method and two parameters ("Are you sure you want to do that?" and ""). The second parameter, "", is the default answer, which is null or nothing.
We then encounter an if/else statement, known as a "conditional statement." If you entered something in the prompt box (even a space), an alert box will be displayed with "You said" followed by your answer.
If you pressed "OK" without answering the question or if you pressed "Cancel," then it will skip to the next part of the statement and execute that line. That will open a prompt box with the words "You refused to answer."
Here is how this conditional statement works. The statement actually reads,
"If the variable
ans contains any data (what you would have entered
in the prompt box) then open an alert box and print 'You said' and the data
contained in the variable. If the variable
ans does not contain
any data, then open an alert box and print 'You refused to answer.'
Using Variables and Text Strings Together
There will be times when you might want to print out the results of a variable
in a sentence. To do so, you would use the
along with a text string and the variable. Here's how it works.
Let's say I want to write about music. I can list an artist in the variable and then use it to display information on the web page. Open your template and follow along with me. (You can place the code within the body of the document.) First I will declare the variable:
Next, I add the
The result would then be:
I like music by Bob Dylan. The script
is very simple. First, the variable "
dylan" is declared and initialized.
Then it's added to the text string in the
document.write command tells the script to write on the Web
page whatever is in the parentheses.
document.write statement above, the variable is added to the text string by means of concatenation (kon-kat-uh-NAY-shuhn). This is, very simply, the means of uniting (linking together) two or more items. This permits us to join (concatenate) several items together to form sentences, commands, even entire documents. The items are not added together as in mathematics; rather they are joined to form an entirely new item. The "items" can be different data types or variables.
When you're writing the text be sure to add the proper spacing within the
text string — in this case it would be after the word "by." This will
leave a space before the word in the variable. Otherwise the last word in the
text string and the variable will be printed together. i.e.,
I like music
recognize whitespace. If you added the space after the string and before the
would be ignored.
There are other ways that we can write this. We could add the variable in the middle of a sentence:
This would print out
Many people do not understand Bob Dylan's music.
Notice here that I did not add a space in the text string after the variable
since I wanted to add a letter to the variable.
We can also add HTML elements to the strings. For instance:
You could put each part of the HTML on the page in a variable and create the entire page (the part displayed in the browser) from within the script. We'll look at this in more depth later.
IT Solutions Builder TOP IT RESOURCES TO MOVE YOUR BUSINESS FORWARD
Which topic are you interested in?
What is your company size?
What is your job title?
What is your job function?
Searching our resource database to find your matches...