Internet and Web Systems
Summer 1999
Homework Assignment 3

Prof. Haim Levkowitz

Due: Tuesday, August 10, 1999; 11:00 AM
Submission: Electronic only! Send me email with your URL. Make sure all your files for this assignment are stored in a subdirectory called hw3 directly under your .html directory, so I can find them without having to search.


Add new features to your previous assignment


Add to your site from the previous assignment the following features/capabilities:

Imagemap (15 points)

Establish a simple imagemap. By simple I mean that the image should be small (no larger than 400x300 pixels) and should have a small number of regions. It can be server- or client-side, but client-side imagemaps are easier to set up. Make sure there is an ALT for those people whose browsers cannot handle client-side imagemaps (few, but exist). ((Here is some information on client side imagemaps; here is an example of one -- look at the source.) Make sure that every link on that imagemap is obvious; if I miss a link, you lose points!

Password-protected secure area (15 points)

Establish one link off the imagemap as a restricted, "secure" area. I.e., a User ID and a password are required to allow access. Give me
access with the User ID and the password both as "haim" (no quotes).

New user sign-up (15 points)

Establish a separate link for people to sign up, i.e., to register their new User ID and password. Once they have signed up, you should allow them access to the restricted area. Make sure that passwords are NOT readable on the screen while typed, and that a new password has to be entered twice, the second time for verification. You have seen this in many systems.

Domain-based restricted access (30 points)

(15 points) Another link should provide access only to people coming in from certain locations. For now, people coming locally or from cs.uml.edu should be admitted. You may add other domains that are authorized, but make sure you leave a few that are not! Whenever someone tries to access from a location that isn't authorized, please provide a message that tells the user why s/he has been denied access.

(15 points) See if you can tell not only on which machine the server is running, but also from which machine the user's client (browser) was launched. To simulate access restriction locally, designate machines here from which access is/isn't allowed (based on where the client is running). Please provide the list in your README file, and in your denial-of-access message.

Sniff! (15 points)

While you are at it, try to "sniff" to see how much information you can gather on the visitor -- whether admitted or denied admission. Create and display a page showing a list of all the details you have been able to gather on the visitor.

Last 10 points

Impress me! Do something extraordinary, something exciting, something fun.

Examples: encrypted User ID and password; recognition of first/repeat visits to your site.

Back to Internet and Web Systems Syllabus


Prof. Haim Levkowitz

haim@cs.bgu.ac.il