UB Information Technology


Web Application Policy

Changes to the Web Application Registration Process

As of June 1, 2007 it is no longer neccessary to register an application using the Central Web Server's Registration Database. It is manditory to have the Central Web Service Team test all new and modified applications that reside on the Central Web Server. Anyone that does not notifiy the Central Web Service team will have their applications made unavailable until it is tested. Any applications that are causing problems with the health of the server will be automatically turned off and the Central Web Service Team will notify the responsible owner.

Overview

The Central Campus Web Hosting Server has been in existence for approximately 10 years. The University at Buffalo's main web page is stored on and displayed from the Central Web Server as well as many research center and department home pages. Untested new and changed Central Web Server applications could result in instability of the campus server thereby denying access to information by prospective students, researchers from around the world and the University community. In order to ensure a stable viewing platform for the millions of visitors to the University at Buffalo web sites and their use of the central Search Engine, all applications must be reviewed annually. Rogue applications will be discovered during monthly server checks and will be made unavailable until compliance with this policy.

Definitions

     
  • An application is something that executes on the Central Campus Web Server (i.e., uses facilities such as Perl, Oracle, PHP, etc.). All web applications must use the following extensions: .php, .cgi and reside in a separate directory apart from the main website.  
  • A responsible owner is a faculty or staff member who takes administrative responsibility for the web application and associated site. The person is usually a department chair or area director.

Mandatory Testing for All Applications on the Central Web Hosting Server

All Applications that reside on the Wings central web server must be reviewed and tested by the Wings Team. This includes any form that sends mail. All mail sent from a form on the Wings Web server must only be sent to @buffalo.edu addresses or utilize CAPTCHA or similar technology that ensures that forms are being filled out by humans. Also, mail forms should be using Wingsmail, unless otherwise approved by the Central Web Service Team.

All new and/or changed applications must be tested by the Central Web Service Team by filling out the Web App Testing Request Form at https://wings.buffalo.edu/help/forms/webapptesting.php

Updates and Changes to Existing Web Applications

Web developers/responsible parties must notify the Central Web Service Team in advance as to any testing or updates done to their web application. This can be done by filling out the Web App Testing Request Form at https://wings.buffalo.edu/help/forms/webapptesting.php

Central Web Server Application Policy Compliance

The following will be done on a monthly basis to ensure stability of the Central Campus web server. Regular checks will be run to compare what web applications are new and/or have changed. Any new applications that have "not" been tested by the Central Web Service Team will be made unavailable by taking away execute and read permissions. These Web applications will no longer work or be viewable on the Central Web Server. After form submission, careful review and testing, the Central Web Service Team will reinstate (reset permissions) the web application.

Student Organization Applications

Effective Jan 1, 2005, web services to Student Organizations on the Central Web Server will no longer include new application programs, i.e. Perl, PHP, Oracle. This change is in keeping with a recent web applications review policy designed to ensure the stability and reliability of the Central Web Server.  We expect this service change to continue until implementation of new web hosting services are completed no earlier than Spring 2006.  Student Organizations who currently have web application programs are grandfathered under this policy change, but no expansion of service will be supported.