Webprogrammering

Cyberattacks are becoming more commonplace and the Open Web Application Security Project (OWASP), estimates 94% of sites have flaws in their access control alone.  Attacks evolve to work around new defenses, and defenses must evolve to remain effective.  Developers need to understand the fundamentals of attacks and defenses in order to comprehend new techniques as they become available. This book teaches you how to write secure web applications.The focus is highlighting how hackers attack applications along with a broad arsenal of defenses.  This will enable you to pick appropriate techniques to close vulnerabilities while still providing users with their needed functionality.Topics covered include:A framework for deciding what needs to be protected and how stronglyConfiguring services such as databases and web serversSafe use of HTTP methods such as GET, POST, etc, cookies and use of HTTPSSafe REST APIsServer-side attacks and defenses such as injection and cross-site scriptingClient-side attacks and defenses such as cross-site request forgerySecurity techniques such as CORS, CSPPassword management, authentication and authorization, including OAuth2Best practices for dangerous operations such as password change and resetUse of third-party components and supply chain security (Git, CI/CD etc)What You'll LearnReview the defenses that can used to prevent attacksModel risks to better understand what to defend and howChoose appropriate techniques to defend against attacksImplement defenses in Python/Django applicationsWho This Book Is ForDevelopers who already know how to build web applications but need to know more about securityNon-professional software engineers, such as scientists, who must develop web tools and want to make their algorithms available to a wider audience.Engineers and managers who are responsible for their product/company technical security policy

HTML5 opens up a plethora of new avenues for application and game development on the web. Games can now be created and interacted with directly within HTML, with no need for users to download extra plugins, or for developers to learn new languages. Important new features such as the Canvas tag enable drawing directly onto the web page. The Audio tag allows sounds to be triggered and played from within your HTML code, the WebSockets API facilitates real-time communication, and the local storage API enables data such as high scores or game preferences to be kept on a user's computer for retrieval next time they play. All of these features and many more are covered within The Essential Guide to HTML5.The book begins at an introductory level, teaching the essentials of HTML5 and JavaScript through game development. Each chapter features a familiar game type as its core example, such as hangman, rock-paper-scissors, or dice games, and uses these simple constructs to build a solid skillset of the key HTML5 concepts and features. By working through these hands on examples, you will gain a deep, practical knowledge of HTML5 that will enable you to build your own, more advanced games and applications. Concepts are introduced and motivated with easy-to-grasp, appealing examples Code is explained in detail after general explanations Reader is guided into how to make the examples 'their own'

Auf unterhaltsame Weise liefert dieses Buch historisch belegte Fakten zu ungewohnlichen Manahmen aus der langen Leidensgeschichte der Steuern, die Schlaglichter auch auf heutige Absurditaten der Steuergesetzgebung werfen. Die kurzen, schnell lesbaren Texte und ihr unterhaltsamer Charakter eignen sich perfekt, um als kleine Geschichten im Buro, in Reden oder in personlichen Gesprachen weitererzahlt zu werden. Ein ubersichtliches, alphabetisch sortiertes und mit vielen Illustrationen angereichertes Layout sorgt fur eine kurzweilige Lekture. In der sonst so trockenen Bucherwelt der Steuertexte ist dies eine willkommene Abwechslung und ein wunderbares, handliches Geschenk fur alle, die sich beruflich mit Steuern beschaftigen, sowie auch fur die Vielzahl der kritischen Steuerzahler.

In a beautiful, green, wild wild wood lives a gentle mole. But then a SOLD sign appears in the wood one morning, and Mole decides to write a firmly worded letter to Barry Bristlethwaite of Burnum Buildem Real Estate: their home is not for sale! But when diggers arrive the next morning, Mole and his friends must activate Plan B! Will they be able to save their wood?Wild Wild Wood is an empowering, rhyming tale about the power of using your voice.

"A bold, unflinching call to reject damaging design myths and instead build an ethical, aware, responsible design practice that contributes to the greater good-and how to do it successfully"--

Discover the secrets of building Python microservices using the FastAPI frameworkKey Features:- Provides a reference that contains definitions, illustrations, comparative analysis, and the implementation of real-world apps- Covers concepts, core details, and advanced integration and design-related topics- Imparts context, app templates, suggestions, and insights that are helpful to actual projectsBook Description:FastAPI is an Asynchronous Server Gateway Interface (ASGI)-based framework that can help build modern, manageable, and fast microservices. Because of its asynchronous core platform, this ASGI-based framework provides the best option when it comes to performance, reliability, and scalability over the WSGI-based Django and Flask. When working with Python, Flask, and Django microservices, you'll be able to put your knowledge to work with this practical guide to building seamlessly manageable and fast microservices.You'll begin by understanding the background of FastAPI and learning how to install, configure, and use FastAPI to decompose business units. You'll explore a unique and asynchronous REST API framework that can provide a better option when it comes to building microservices. After that, this book will guide you on how to apply and translate microservices design patterns in building various microservices applications and RESTful APIs using the FastAPI framework.By the end of this microservices book, you'll be able to understand, build, deploy, test, and experiment with microservices and their components using the FastAPI framework.What You Will Learn:- Understand, orient, and implement REST APIs using the basic components of the FastAPI framework- Build asynchronous as well as synchronous REST services using the built-in pydantic module and asyncio support- Create small-scale and large-scale microservices applications using features supported by FastAPI- Build event-driven and message-driven applications using the framework- Create an asynchronous and synchronous data layer with both relational and NoSQL databases- Perform numerical and symbolic computations with FastAPIWho this book is for:This book is for Python web developers, advanced Python developers, and backend developers using Flask or Django who want to learn how to use the FastAPI framework to implement microservices. Readers familiar with the REST API and microservices will also benefit from this book. Some parts of the book contain general concepts, processes, and instructions that intermediate-level developers and Python enthusiasts can relate to as well.Table of Contents- Setting Up FastAPI for Starters- Exploring the Core Features- Investigating Dependency Injection- Building the Microservice Application- Connecting to a Relational Database- Using a Non-Relational Database- Securing the REST APIs- Creating Coroutines, Events, and Message-Driven Transactions- Utilizing Other Advanced Features- Solving Numerical, Symbolic, and Graphical Problems- Adding Other Microservice Features

 Get started with Vue.js quickly and easily with this bookThis book provides a compact and practical introduction to the popular Vue.js. Use the MVVC concept for applications on the web on the basis of MVC design patterns and create single-page web applications easily. You will use one of the powerful frameworks based only on elementary WWW standard technologies. With Vue.js you will understand and apply data binding, components, directives and modularity.With this book, you will not only learn the most important basics of Vue.js. You will also learn how to create and maintain web applications with this JavaScript web framework. The focus of this comprehensive work is on the following aspects:- HTML/CSS/JavaScript and the Web: The Vue.js environment- Basis of JavaScript (above all JSON)- Working with the Vue instance- templates- Double Curly Syntax and Data Binding With its strong application focus, this book on Vue.js is an ideal companion for self-study or relevant courses. In terms of content, it is aimed at:(a) creators of websites(b) programmersc) Web designer Dive even deeper into the matter Ralph Steyer shows which prerequisites you should have to work with this book. Then you will learn more about the framework and the special features of Vue.js. In the further course, the author covers these partial aspects, among others:- First examples - just test Vue.js once- How and why does Vue.js work?- Conditional Rendering: The v-if directive - making decisions- Dynamic layouts with data binding - making stylesheets dynamic - Forms and form data binding - interaction with the user- Transitions and animations - Moving things If you want to learn even more about the application, this book gives you an outlook on further possible uses and functions of Vue.js in the final chapter. To make it easier for you to get started, you will find program codes and illustrations in each chapter that illustrate complex processes.

A celebrated international bestseller that exposes the ticking time-bomb underneath our new technological order.The resources race is on. Powering our digital lives and green technologies are some of the Earth's most precious metals - but they are running out. And what will happen when they do? The green-tech revolution will reduce our reliance on nuclear power, coal, and oil, but by breaking free of fossil fuels, we are setting ourselves up for a new dependence - on rare metals like cobalt, gold, and palladium. These are essential to electric vehicles, wind turbines, and solar panels, as well as our smartphones, computers, tablets, and other technologies. But we know very little about how rare metals are mined and traded, or their environmental, economic, and geopolitical costs - until now.

Diese Studie untersucht den komplexen Zusammenhang zwischen Naturkatastrophen, individuellem Verhalten - in Form von individueller Risikobereitschaft und Vertrauensniveau - und der Nachfrage nach Mikroversicherungen. Entwicklungsländer sind besonders anfällig für die Auswirkungen von Naturkatastrophen und Klimawandel, da diese ihre Entwicklungsprozesse beeinträchtigen und die Bemühungen zur Armutsbekämpfung zurückwerfen. Unter Verwendung eines einzigartigen Datensatzes für das ländliche Kambodscha, der auf einer Umfrage, experimentellen Spielen und einem diskreten Auswahlexperiment basiert, unterstreicht die Studie die Bedeutung von Wahrnehmungen, Erwartungen und psychologischen Faktoren in Entscheidungsprozessen mit erheblichen Folgen für langfristige wirtschaftliche Perspektiven und die Armutsbekämpfung.

"Teaches how to identify vulnerabilities in apps that use GraphQL. Describes GraphQL, its query language, and the mechanisms of GraphQL APIs, then guides readers through setting up a hacking lab for targeting GraphQL applications. Shows how to conduct offensive security tests against production GraphQL systems, how to glean information from GraphQL implementations during reconnaissance, and how to probe APIs for vulnerabilities"--

Not the Same Old JavaScript.Think you know JavaScript? Think again. This isn’t your typical coding book—it’s a deep dive into the powerful world of data structures and algorithms that will transform the way you approach problem solving in JavaScript.Whether you’re a frontend developer tackling complex applications, a backend engineer building scalable systems, or a programmer preparing for technical interviews, this book will revolutionize the way you code. Key features include:Modern JavaScript techniques: Use the latest language features and functional programming principles for cleaner, more efficient code.Performance-focused approach: Analyze and optimize algorithms using Big O notation.Essential algorithms explained: Implement and fine-tune core algorithms like quicksort, merge sort, digital search, and binary search.Algorithm design strategies: Solve challenging problems with techniques like recursion, dynamic programming, backtracking, and brute-force search.Advanced data structures: Explore complex structures such as binary search trees, heaps, and graphs. Each chapter is carefully crafted with clear, no-nonsense explanations of complex concepts, real-world coding examples, and challenging questions (with answers at the end) to reinforce your understanding.Ready to break free from ordinary JavaScript? Whether your aim is to build cutting-edge web applications, optimize critical systems, or land your dream job, this book equips you with the advanced JavaScript knowledge that sets true experts apart.

Das Werk erlautert praxisnah alle Besonderheiten der Grundung, Fuhrung und Verwaltung der haftungsbeschrankten Unternehmergesellschaft (UG). Die UG ist eine Mini-GmbH, die bereits mit 1 Stammkapital gegrundet werden kann und damit attraktive Voraussetzungen mitbringt. Interessant ist die UG vor allem fur Einzelunternehmer und BGB-Gesellschaften ohne groeres Anlagevermogen, die ihre Haftung einschranken wollen. Aber auch fur die Grundung von Tochtergesellschaften oder als Komplementar-UG in der UG & Co. KG ergeben sich Vorteile. Erganzt wird das Werk mit zahlreichen Arbeitshilfen und Mustern.

Das Buch ist ein Leitfaden speziell fur Energieversorgungsunternehmen (EVU) und vor allem fur Netzbetreiber von Gasinfrastrukturen, die vor der Fragestellung stehen, wie die neue Sparte des Wasserstoffs ausgepragt werden kann und welche regulatorischen wie auch technischen Restriktionen zu beachten sind. Dabei wird ein Schwerpunkt auf die operative Umsetzung und die Darlegung wesentlicher strategischer Fragen gelegt, die sich fur EVU vor dem Aufbau der eigenen Wasserstoffsparte und allgemein im Markthochlauf des Wasserstofffs als Energietrager stellen. Die technischen Aspekte sind in diesem Rahmen aus einer allgemeineren Perspektive betrachtet.

Our words have POWER!And no one understands this more than Persephone the bee.Astronaut and telescopeRhinoceros; kaleidoscopePterodactyl; saxophonePomegranate; xylophone!Hermione, The Queen Bee, thinks Persephone should spend less time with words and more time on the hunt for flowers, which are getting harder and harder to find.But what if Persephone can use her words to help?Join Persephone in this read-aloud, read-again rhyming story about the power of our words, as well as the important task of protecting our bees. Packed with bright illustrations and plenty of word-play, The Bee Who Loved Words is the perfect way to introduce your little one to the joy of language.

Etwas messbar zu machen, bedeutet es steuern zu konnenNachhaltigkeit ist ein Begriff mit einer Fulle von Bedeutungen und vielen moglichen Missdeutungen. Dabei kann Nachhaltigkeit ein machtiges und effektives Werkzeug sein, um unser praktisches Handeln zu leiten und komplizierte Entscheidungen zu vereinfachen.Mit Nachhaltigkeit lassen sich Kosten sparen und jede Organisation sowie jedes Unternehmen stabilisieren. Sie schont das Klima und die Umwelt und fuhrt alle Menschen in eine gute Zukunft.Das Sachbuch Nachhaltigkeit messbar machen"e; ist ein praxisnaher Leitfaden, wie Methoden und Instrumente der Nachhaltigkeit erfolgreich eingesetzt werden konnen - sei es im beruflichen Leben oder im privaten und ehrenamtlichen Engagement.Das Buch verschafft nicht nur dem interessierten Laien eine umfassende Ubersicht uber die zentralen Aspekte des Nachhaltigkeitsmanagements, es bietet auch dem Praktiker wichtige Entscheidungshilfen und Tipps zur Umsetzung. Der leicht verstandliche Stil vermittelt auch Neueinsteigern alle wesentlichen Inhalte der Thematik der Nachhaltigkeit. Ob Vorkenntnisse oder nicht - mit den vielen sofort umsetzbaren Best-Practices"e; bietet das Buch eine Menge praktische Anwendungsmoglichkeiten. Die Anhange enthalten uneingeschrankt nutzbare Tools aus der Praxis des Autors fur die Einfuhrung eines erfolgreichen Nachhaltigkeitsmanagements.

The definitive history of the modern climate change era, from an award-winning writer who has been at the centre of the fight for more than thirty yearsIn 1979, President Jimmy Carter was presented with the findings of scientists who had been investigating whether human activities might change the climate in harmful ways. "e;A wait-and-see policy may mean waiting until it is too late,"e; their report said. They were right -- but no one was listening. Four decades later, we are haunted by the consequences of this inattention, and the years of complacency, obfuscation and denialism that followed. Today, the staggering scale and scope of what we have done to the planet is impossible to ignore: the seasons of fire and flood have crossed into plain view. Fire and Flood is a comprehensive, compulsively readable history of climate change from veteran environmental journalist Eugene Linden. Linden retells the story of the modern climate change era decade by decade, tracking the progress of four ticking clocks: first, the reality of climate change itself; second, advances in scientific understanding; third, the spread of public awareness; and fourth, the business and finance response. Like no previous writer, Linden has drawn together the elements of the biggest story in the world, in a book that it is gripping as history, as economic investigation, and as scientific thriller.

Object Lessons is a series of short, beautifully designed books about the hidden lives of ordinary things. These days the bicycle often appears as an interloper in a world constructed for cars. An almost miraculous 19th-century contraption, the bicycle promises to transform our lives and the world we live in, yet its time seems always yet-to-come or long-gone-by. Jonathan Maskit takes us on an interdisciplinary ride to see what makes the bicycle a magical machine that could yet make the world a safer, greener, and more just place.Object Lessons is published in partnership with an essay series in The Atlantic.