Internet Server Application Programming Interface

Internet Server API ( ISAPI) is an API (Application Programming Interface ) from Microsoft, the Microsoft Internet Information Services ( web server), the Microsoft Exchange Server and Microsoft Internet Security and Acceleration Server (firewall and Web cache) will be used. A distinction ISAPI Extensions and ISAPI Filters.

• 2.1 Overview

ISAPI Extensions

ISAPI extensions are to be regarded as the next generation of CGI applications, but can be run without corresponding additional third-party programs solely on Microsoft servers. An ISAPI extension is different from a PHP or ASP script, a DLL file that is already loaded, depending on the configuration at startup or through the Microsoft Internet Information Server only when needed. Depending on the application security ISAPI extensions are thereby jointly by a host application ( this is needed to run DLLs), or can be run separately.

Pros and Cons

As an advantage, the gain in speed is mentioned. Unlike scripts such as ASP or PHP is an ISAPI extension from compiled source code, as well as used in Microsoft operating systems, system DLL files. ISAPI extensions allow a deeper engagement with the software of the operating system, making existing resources (such as memory, but other devices such as video editing cards, ISDN adapter cards, etc.) can be better used and addressed directly. Unlike script files are ISAPI extensions not in plain text readable, what an attack but not difficult. A risk to the security of the system provide all unknown, for example, dynamically loaded via the browser, external. dar. These DLL files contain executable code and can read or manipulate data in an uncontrolled manner.

ISAPI filter

ISAPI filters are DLLs that can be added to the Web Service to intervene on certain events in advance.

ISAPI filter intervene directly in the data traffic of a web server or proxy. This allows them to read and modify the data being transmitted.

Overview

ISAPI filters are, unlike ISAPI extensions, resident in memory after starting the web server. They are located between the Web server and the client.

ISAPI filters are used for example for authentication in Microsoft Exchange Server.

Example of use

An example of ISAPI filters and ISAPI extensions is that running in Microsoft Internet Information Server integrated asp.dll, which is used to execute ASP files, as well as separately installable php.dll to the PHP files on a Microsoft Web server can be.

CGI | SCGI | FastCGI | AJP

Mod_jk | mod_lisp | mod_parrot | mod_perl | mod_php | mod_python | mod_wsgi | mod_ruby | Phusion Passenger

WSDL | XML ​​-RPC | SOAP | REST

• World Wide Web
• Server
• Microsoft