Module 5

THIS PAGE UNDER CONSTRUCTION

In Module 6, you will learn about python, a scripting language, and Django, a web framework.

This article contains your assignments for Module 6.

Individual Assignments

Python tutorial Django tutorial

Python Tutorial

Install Python Tools

• sudo yum install python-setuptools
  
• sudo yum install python-devel

Python Assignment

• You will write a python script that reads a set of student grades in from a file and does some basic parsing and processing. here is the section of the python tutorial on reading and writing files.
• An example grades file is here. For the sake of simplicity you can assume that the file name is always going to be grades.txt.
• The first line of the file is of the form: NUM_LABS,NUM_EXAMS,LAB_WEIGHT
• All of the other lines in the file are of the form: FIRSTNAME LASTNAME|GRADE|TYPE
• The FIRSTNAME and LASTNAME fields are the student's full name (always only a first and last name), the GRADE is one grade for the student, and the TYPE describes what kind of assignment the grade was for, in this case either a 'lab' or an 'exam'.
• Your script should read in a grades file with the above format and perform the following:
  1. Compute the final grade for every student, given that there were a total of NUM_LABS labs, NUM_EXAMS exams, and that the labs account for a total of LAB_WEIGHT percent of the grade.
  2. Compute the final letter grade based on the final numeric grade (A = 90 or above, B = 80 - 90, C = 70 - 80, D = 60 - 70, F = below 60). 
  3. Ignore any blank lines.
  4. Sort the students by last name, and print out final grades in that sorted order.
  5. No names should be hard coded into the script (you will run your script on another file with different student names when we grade your assignment).
  6. Finally, the script should take one optional command line argument, which is a string to match against student names.  Only names that match the string in full or in part, should be printed out with their final grades.
     • For example, with the argument 'John' grades for both John Smith and John Locke should be printed (if those are the only two Johns in the grades.txt file)

Django Tutorial

Install Djgano

This procedure assumes you are using and Amazon AMI Linux on an ec2 instance. An in-depth install guide can be found on the Django website, but a quick version is below. Run these commands as root.

• Install Distribute (prerequisite for pip):
curl http://python-distribute.org/distribute_setup.py | python
• Install pip:
curl https://raw.github.com/pypa/pip/master/contrib/get-pip.py | python

• Install Django using pip:

pip install Django

That's it.

Django Assignment

Complete the tutorial on the django website. You will create a Polls app. There are four parts to this tutorial.

It is important you do all the steps in the tutorial to get comfortable defining models, views, templates, and using the interactive shell and the admin app. Understanding the concepts will make the project go much quicker.

• Part 1

  • Create a project
  • Start the development server
  • Setup an SQLite database
  • Create the Polls app and define the models
  • Interact with the database using the interactive python shell

• Part 2

  • Activate the admin site
  • Add the poll app to the admin site
  • Modify the database using the admin site

• Part 3

  • Configure URL handling
  • Create some views

• Part 4

  • Write a form that modifies the database
  • Refactor to use generic views

Group Project

You may work in pairs on this project. Your group will create a new project using one of the options below.

Option 1: Image Tagging/Browsing Site

A site that lets users upload images, apply multiple tags to them, and browse through images of a certain tag. When looking at an image, it lists all associated tags so you can switch albums.

Requirements

Each image can have multiple tags, and each tag can have multiple images.

• The home page should allow users to find tags that they want to view. (e.g. lolcat).
• After clicking a link to a tag, it should take you to a page with the newest image for that tag. (you may use external links to display the images)
• Clicking on the current image should take to to the next image according to date added. When at the last image, go the the first.
• Make it clear which tag you are currently browsing. Beside or below the current image, also display the full list of tags that belong to the current image (e.g. lolcat, meme, internet, funny). You should be able to click on any of the tags to begin looking through that collection of images.
• Provide a way for users to add new images and new tags.
• Provide a way to edit the tags that belong to an image
• Style the site with some CSS, and try to get it as polished as you can.

Notes: You may store images as an external web link. The admin interface and the interactive python shell will be very helpful when getting started with the database. As well as the keyword "many-to-many."

Option 2: Create Your Own

Your project needs to demonstrate that thought was put into web security and best practice. For more information, see this week's Web Application Security guide: Web Application Security, Part 2

In particular:

• Your application needs to be secure from SQL injection attacks. If you are using prepared queries, you should already be safe on this front.
• All of your output needs to be sanitized using htmlentities().

You shouldn't forget the practices you learned last week:

• You should pass tokens in forms to prevent CSRF attacks.
• Your page should validate with no errors through the W3C validator.

Grading

Due Date: Wednesday October 10th, by 1pm (both individual and group)

Assignment	Points
Tables Correct	2
Data Queries Correct	2
Group Portion:
User Authentication	1
User Registration	1
Salted One-Way Encryption	1
Main page displays all stories (or most recent stories)	1
Page with individual story and comments	1
Story Submission	1
Comment System	1
Administrator Deletion of Stories/Comments	1
User Edit/Delete of Story (1 pt) and Delete of Comment (1 pt)	2
Protect Against SQL Injection Attack	1
Sanitize Output	1
CSRF Safe and Validation	1
Creative Portion	2

Total Points = 19