Kaiwhakakōrero URL

1. Kupu Whakataki

Kaiwhakawaehere URL he taputapu māmā engari tino hira e huri ana i ngā kuputuhi noa ki tētahi hōputu e haumaru ana mō te whakamahi i roto i tētahi URL. Ina whakaurua e koe ngā pūāhua motuhake pērā i ngā mokowā, ngā tohu ampersand, ngā rītaha, me ētahi atu tohu ki tētahi wāhitau tukutuku, me whakawaehere aua pūāhua kia tika ai te whakamāori a ngā pūtirotiro me ngā tūmau. Ka huri aunoatia tēnei taputapu i aua pūāhua ki ō rātou ōrite kua whakawaeherea mā te ōrau.

Ka whakamahia nuitia te whakawaehere URL i te wā e tuku raraunga ana mā ngā aho uiui (query strings), e tuku ana i ngā uara puka mā ngā tono GET, e waihanga ana i ngā hononga aroturuki, e whakauru ana rānei ki ngā API. Hei tauira, mēnā he mokowā kei tō URL, me whakawaehere hei %20 kia tika ai te mahi. Ki te kore e whakawaeherea, ka pakaru pea ngā URL, ka whakahoki hapa, ka puta rānei he hua ohorere.

I hangaia tēnei taputapu kia ngāwari te whakamahi mā te hunga tīmata. Whakapirihia noa tō kuputuhi, pāwhiritia te pātene whakawaehere, ā, ka whiwhi tonu koe i tētahi putanga haumaru mō te URL. Ahakoa he kaiwhakawhanake koe e waihanga ana i ngā hononga hihiri, he kaihokohoko rānei e hanga ana i ngā URL mō ngā kaupapa whakatairanga, ka whakarite tēnei taputapu kia noho tika, haumaru, ā, kia ū hoki ō hononga ki ngā paerewa.

2. Me Pēhea te Mahi

Ka huri te Kaiwhakawaehere URL i te kuputuhi kua tukuna e te kaiwhakamahi hei aho kua whakawaeherea tika mā te whakamahi i ngā ture paerewa mō te whakawaehere URL. Ka whakakapi tēnei tukanga i ngā pūāhua kāore i te haumaru ki ō rātou whakaaturanga kua whakawaeherea mā te ōrau kia taea ai te whakamahi haumaru i te kuputuhi i roto i tētahi aho uiui URL, ara URL rānei.

Tawhā Tāuru

• Ihirangi – Te kuputuhi e hiahia ana koe ki te whakawaehere. Ka taea te whakauru i ngā mokowā, ngā pūāhua motuhake, ngā tohu, me ngā URL katoa.

Ngā Ture Whakamana

• Me whakakī te āpure ihirangi, kāore e āhei kia noho pātea.
• Ka tangohia ngā mokowā kei te tīmatanga me te mutunga i mua i te tukatuka.
• Ka whakawāteatia te tāuru hei ārai i ngā ihirangi mōrearea, kino rānei.
• Ka whakahaerehia tētahi arowhai haumaru CSRF hei whakarite he tono tika tēnei.

Arorau Whakawaehere

Ina oti pai te whakamana, ka whakawaeherea e te taputapu ngā ihirangi mā te whakamahi i ngā ture paerewa mō te whakawaehere URL:

• Ka hurihia ngā mokowā hei %20
• Ka whakawaeherea mā te ōrau ngā pūāhua motuhake pērā i te &, =, ?, #, me ētahi atu
• Ka hurihia ngā pūāhua kāore i te pūāhua reta, tau rānei hei raupapa escape hautekau-tekau mā ono (hexadecimal)

Hanganga Putanga

Ko te putanga he aho kotahi kua whakawaeherea, ā, ka whakaaturia tonu i muri i te tuku. Ka noho kitea tonu te tāuru taketake kia taea ai e ngā kaiwhakamahi te whakatika me te whakawaehere anō mēnā e hiahiatia ana.

Ngā Herenga

• Ka whakawaehere tēnei taputapu i te kuputuhi, engari kāore e manatoko mēnā he tika ā-arorau te hanganga URL ka puta.
• Kāore e wetewaehere i ngā aho kua whakawaeherea kē.
• Kāore e tirotiro mēnā ka ahu atu te URL kua whakawaeherea ki tētahi rauemi tukutuku whaimana.

3. Me Pēhea te Whakamahi i Tēnei Taputapu

1. Tāurua, whakapiri rānei i tō kuputuhi ki te āpure tāuru.
2. Me whakarite kāore te āpure ihirangi e noho pātea.
3. Pāwhiritia te pātene tukatuka.
4. Tirohia te putanga kua whakawaeherea e whakaaturia ana ki te mata.
5. Tāruatia te aho kua whakawaeherea, ā, whakamahia ki tō URL, ki tō taupānga rānei.

4. Ngā Tauira Whaihua

Tauira 1: Te Whakawaehere i tētahi Aho Uiui

Tāuru:

name=John Doe & city=New York

Putanga:

name%3DJohn+Doe+%26+city%3DNew+York

Ka taea te tāpiri haumaru i tēnei putanga kua whakawaeherea ki tētahi URL me te kore e pakaru te hanganga o te aho uiui.

Tauira 2: Te Whakawaehere i tētahi Tawhā URL Katoa

Tāuru:

https://example.com/search?q=red shoes

Putanga:

https%3A%2F%2Fexample.com%2Fsearch%3Fq%3Dred+shoes

He whaihua tēnei ina tukuna tētahi URL hei tawhā i roto i tētahi atu URL, pērā i ngā pūnaha whakahoki anō, ngā taputapu aroturuki rānei.

5. Ngā Whakamahinga mā ngā Kaiwhakawhanake

- Te Waihanga i ngā Aho Uiui Hihiri

Ina waihangatia ngā URL i roto i ngā pūnaha tuarongo (backend), ka whakarite te whakawaehere kia kore ai te tāuru a te kaiwhakamahi e pakaru i ngā tawhā uiui.

- Te Hanga Tono API

He maha ngā REST API e tono ana kia whakawaeherea ngā tawhā uiui. Ka āwhina tēnei taputapu ki te whakarite aho tawhā haumaru i mua i te tuku tono HTTP.

- Te Ārai i ngā Raru Injection

Mā te whakawaehere i te tāuru a te kaiwhakamahi i mua i te whakauru ki ngā URL ka whakaitihia te tūraru o ngā URL hē me ētahi whakaraeraetanga e pā ana ki te injection.

- Aunoatanga Tuarongo

Ka taea e ngā kaiwhakawhanake te whakauru i te whakawaehere URL ki ngā rerenga mahi aunoa mō te waihanga hononga, te aroturuki kaupapa whakatairanga, me ngā pūnaha whakahoki anō.

Tauira PHP

<?php
$input = "John Doe & New York";
$encoded = urlencode($input);
echo $encoded;
?>

Tauira JavaScript

const input = "John Doe & New York";
const encoded = encodeURIComponent(input);
console.log(encoded);

Ngā Whakaaro Haumaru

• Me manatoko tonu kāore ngā āpure tāuru e noho pātea i mua i te tukatuka.
• Whakamahia te whakamarumaru CSRF i te wā e tuku puka ana.
• Whakawāteatia te tāuru a te kaiwhakamahi i mua i te whakawaehere hei pupuri i te tōtika o te taupānga.

6. Pātai Auau

He aha te whakawaehere URL?

Ka huri te whakawaehere URL i ngā pūāhua kāore i te haumaru hei hōputu kua whakawaeherea mā te ōrau kia taea ai te whakamahi haumaru i ngā wāhitau tukutuku.

He aha i whakawaeherea ai ngā mokowā i roto i ngā URL?

Kāore e whakaaetia ngā mokowā i roto i ngā URL, ā, me huri hei %20 kia tika ai te whakamāori a ngā pūtirotiro me ngā tūmau.

Āhea au whakamahi ai i tētahi Kaiwhakawaehere URL?

Whakamahia ina waihanga aho uiui, tuku tawhā ki ngā hononga, tuku raraunga rānei mā ngā tono GET.

Ka huri rānei te whakawaehere URL i te tikanga o aku raraunga?

Kāo. Ka huri noa i te āhua e whakaaturia ai ngā raraunga i roto i tētahi URL, ehara i te ihirangi ake.

He ōrite rānei te whakawaehere URL ki te whakawaehere HTML?

Kāo. Ka whakamahia te whakawaehere URL mō ngā wāhitau tukutuku, ā, ka whakamahia te whakawaehere HTML hei whakaatu haumaru i ngā ihirangi ki ngā whārangi tukutuku.

Ka taea e au te whakawaehere i tētahi URL katoa?

Āe. He maha ngā wā e hiahiatia ana tēnei ina whakaurua tētahi URL ki roto i tētahi atu URL hei tawhā.