4D in local mode, 4D in remote mode and 4D Server include a web server engine (aka http server) that enables you to design and publish powerful web applications that can make the most of your 4D databases.
You can start or stop publication of the web application at any time. To do so, you just need to select a menu command or execute a single line of code.
Monitoring the 4D web server is easy and can be done using the 4D Server administration window or through special URLs.
The 4D web server automatically creates a default root folder and a default home page for an instantaneous availability.
Data security is present at every stage of the 4D web server implementations. Security levels are scalable and default settings usually select the most secure options. The 4D web server security is based upon the following elements:
Extended support of the TLS Protocol (HTTPS),
Authentication: flexible and customizable authentication features based upon built-it settings as well as fallback database methods (
On Web Authenticationfor the web server and
On REST Authenticationfor the REST server),
Control of exposed contents: only elements that you expose explicitely can be available from direct web or REST requests. You must declare:
Sandboxing through the definition of a HTML Root folder by default,
Control of server resource usage (e.g. maximum concurrent web processes option).
For a general overview of 4D's security features, see the 4D Security guide.
The 4D web server includes complete automatic features for easily managing web sessions (user sessions) based on cookies.
Gateway to REST Requests
The 4D web server allows accessing data stored in your 4D applications through REST requests. REST requests provide direct access to any database operation such as adding, reading, editing, ordering, or searching data.
REST requests are detailed in the REST server section.
The 4D web server configuration is defined through a comprehensive set of application-level settings that can also be customized for the session using the
webServer object properties or the
WEB SET OPTION command.
Templates and URLs
The 4D web server supports access to data stored in your 4D applications through template pages and specific URLs.
Template pages contain special tags that initiate web server processing at the time when they are sent to browsers.
specific URLs enable 4D to be called in order to execute any action; these URLs can also be used as form actions to trigger processing when the user posts HTML forms.
Dedicated Database Methods
On Web Authentication,
On Web Connection, as well as
On REST Authentication database methods are the entry points of requests in the web server; they can be used to evaluate and route any type of request.