http,php,nginx串讲

这不是讲http协议的
很多的东西是知其意而忘其形?, 趁着过年这段时间把很多的知识都review下, 把形找回来, 写代码并不是全部

tools

request

telnet
curl
chrome
postman

capture

fiddler/wireshark

http

http属于应用层的协议
http是无状态的(COOKIE和session的作用就体现出来了)

COOKIE and session

我这里画了一张图
https://www.processon.com/vie...
图片描述
下面是我的php.ini的部分配置

session.use_COOKIEs &＃61; 1 session.use_only_COOKIEs &＃61; 1 session.name &＃61; PHPSESSID session.auto_start &＃61; 0 session.COOKIE_lifetime &＃61; 0 session.save_path&＃61;F:\www\tmp\session

注意session.name &＃61; PHPSESSID
图片描述

URL

http://www.test.com:80/index.php/kill?d&＃61;1&a&＃61;x 以这个为例

description	value	commet
scheme	http	http代表使用http协议/https
host	www.test.com
port	80	http默认80/https默认443
uri	/index.php/kill?d&＃61;1&a&＃61;x
args	d&＃61;1&a&＃61;x	就是query_string

chrome demo

我使用虚拟机的, 把虚拟机的80端口映射到本机的8000端口, so下面的host是127.0.0.1:8000

完整的是在chrome里面打开http://127.0.0.1:8000/index/index/test2

request

GET /index/index/test2 HTTP/1.1 Host: 127.0.0.1:8000 Connection: keep-alive Cache-Control: max-age&＃61;0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 Accept: text/html,application/xhtml&＃43;xml,application/xml;q&＃61;0.9,image/webp,*/*;q&＃61;0.8 DNT: 1 Accept-Encoding: gzip, deflate, sdch, br Accept-Language: en-US,en;q&＃61;0.8,zh-CN;q&＃61;0.6,zh;q&＃61;0.4 COOKIE: XDEBUG_SESSION&＃61;PHPSTORM

response

HTTP/1.1 200 OK Server: nginx Date: Mon, 23 Jan 2017 02:29:09 GMT Content-Type: text/html; charset&＃61;utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/5.6.22 Proxy-Connection: keep-alive

body

test

curl demo

[xsu&＃64;localhost ~]$ curl -v "http://127.0.0.1/index/index/test2" * About to connect() to 127.0.0.1 port 80 (#0) * Trying 127.0.0.1... * Connected to 127.0.0.1 (127.0.0.1) port 80 (#0) > GET /index/index/test2 HTTP/1.1 > User-Agent: curl/7.29.0 > Host: 127.0.0.1 > Accept: */* > < * Connection #0 to host 127.0.0.1 left intact test

telnet demo

[xsu&＃64;localhost ~]$ telnet 127.0.0.1 80 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is &＃39;^]&＃39;. ^] telnet> GET /index/index/test2 HTTP/1.1 Host: 127.0.0.1HTTP/1.1 200 OK Server: nginx Date: Mon, 23 Jan 2017 02:14:36 GMT Content-Type: text/html; charset&＃61;utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/5.6.224 test 0

Transfer-Encoding: chunkedchunked 表示是分段, test前面的4表示接下来的数据的长度, 这是一个16进制的数, test下一段的长度为0 , 即表示结束

request

由3部分组成:

request method, uri, protocol version

GET /index.php/index/index/test HTTP/1.1

request method	curd
get	r, read
post	u, update
put	c, create
delete	d, delete

request header

只说几个有趣的, 其他的自己看详细的http协议, 或者chrome调试台的request header

User-Agent
所有的浏览器都是 Mozilla/5.0 开头的, 当时久我都惊呆了, 至于为什么看知乎
Accept-Language
在chrome地址栏里面打开chrome://settings/languages, 把英文拖到最上面, 打开www.swoole.com, 再把中文拖到最上面, 再打开www.swoole.com

困惑了我好久, 我之前打开很多网站, 打开的总是默认打开英文版的网站, 后来不小心review了下http协议, 恍然大悟?

X-Forward-For
可以用来伪造ip来源, 刷单, 限制ip的地方

在配置nginx的时候要注意, 和获取client ip的时候要注意, 不要相信用户的输入, 特别是http_xxx, 太容易伪造了

X-Request-With

区分是正常的请求还是ajax请求的, ajax请求一般都带有这个请求头, 当然可以直接定义

request body

post的数据就是放到里面

response

protocol version, response status, description

HTTP/1.1 200 OK

response header

Server: nginx Date: Mon, 23 Jan 2017 02:29:09 GMT Content-Type: text/html; charset&＃61;utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Powered-By: PHP/5.6.22 Proxy-Connection: keep-alive

response body

就是我们看到的html实体, 或者ajax返回的字符串

PHP

大概说下php里面$_SERVER

php的文件内容为

ksort($_SERVER); print_r($_SERVER);

request -> view-source:http://127.0.0.1:8000/index.php/index/index/test?a&＃61;1&d&＃61;x

返回的数据为(服务器用的是nginx, apache的类似)

Array ([CONTENT_LENGTH] &＃61;> [CONTENT_TYPE] &＃61;> [DOCUMENT_ROOT] &＃61;> /home/wwwroot/tp5/public[DOCUMENT_URI] &＃61;> /index.php[FCGI_ROLE] &＃61;> RESPONDER[GATEWAY_INTERFACE] &＃61;> CGI/1.1[HOME] &＃61;> /home/www[HTTP_ACCEPT] &＃61;> text/html,application/xhtml&＃43;xml,application/xml;q&＃61;0.9,image/webp[HTTP_ACCEPT_ENCODING] &＃61;> gzip, deflate, adch, br[HTTP_ACCEPT_LANGUAGE] &＃61;> en-US,en;q&＃61;0.8,zh-CN;q&＃61;0.6,zh;q&＃61;0.4[HTTP_CONNECTION] &＃61;> keep-alive[HTTP_COOKIE] &＃61;> XDEBUG_SESSION&＃61;PHPSTORM[HTTP_DNT] &＃61;> 1[HTTP_HOST] &＃61;> 127.0.0.1:8000[HTTP_UPGRADE_INSECURE_REQUESTS] &＃61;> 1[HTTP_USER_AGENT] &＃61;> Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36[PATH_INFO] &＃61;> /index/index/test[PHP_SELF] &＃61;> /index/index/test[QUERY_STRING] &＃61;> a&＃61;1&d&＃61;x[REDIRECT_STATUS] &＃61;> 200[REMOTE_ADDR] &＃61;> 10.0.2.2[REMOTE_PORT] &＃61;> 62835[REQUEST_METHOD] &＃61;> GET[REQUEST_SCHEME] &＃61;> http[REQUEST_TIME] &＃61;> 1485139559[REQUEST_TIME_FLOAT] &＃61;> 1485139559.6806[REQUEST_URI] &＃61;> /index.php/index/index/test?a&＃61;1&d&＃61;x[SCRIPT_FILENAME] &＃61;> /home/wwwroot/tp5/public/index.php[SCRIPT_NAME] &＃61;> /index.php[SERVER_ADDR] &＃61;> 10.0.2.15[SERVER_NAME] &＃61;> www.test.com[SERVER_PORT] &＃61;> 80[SERVER_PROTOCOL] &＃61;> HTTP/1.1[SERVER_SOFTWARE] &＃61;> nginx/1.10.0[USER] &＃61;> www )

大概可以分为以下(#1表)

分类	描述
HTTP开头	request header
REQUEST开头	request method, protocol
SERVER开头	服务器的相关信息
REMOTE开头	客户端的相关信息
SCRIPT,DOCUMENT开头	脚本相关的名称, 路径
路由, 参数相关	path_info, query_string
其他

nginx

cgi, fastcgi, php-fpm

cgi 　-> 公共网关接口, 与语言无关, 规定要传哪些数据(看#1表), 通过重定向语言的stdin, stdout来实现, 但是cgi很慢, 看下使用cgi的php执行流程
webserver 收到 parse php请求 -> 启动PHPCGI -> PHPCGI解析php.ini, 初始化运行环境 -> 处理请求, 以cgi规定格式返回 -> 退出PHPCGI -> webserver 返回数据
问题 : 每次都要启动phpcgi, 和初始化环境
fastcgi -> cgi的改进方案, 启动一个master进程, 解析配置文件, 初始化运行环境, 再fork多个worker来处理php请求, 返回数据, 他是要管理一个进程池来处理请求
php-fpm -> 是实现了fastcgi协议的 php fastcgi 进程管理器, 并且可以平滑重启(新的worker使用新的配置, 老的worker执行完就可以自动退出了),

nginx通常都是使用php-fpm, 通信有两种方式, socket和9000端口

params

看下fastcgi的重写

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param QUERY_STRING $query_string; fastcgi_param REQUEST_METHOD $request_method; fastcgi_param CONTENT_TYPE $content_type; fastcgi_param CONTENT_LENGTH $content_length; fastcgi_param SCRIPT_NAME $fastcgi_script_name; fastcgi_param REQUEST_URI $request_uri; fastcgi_param DOCUMENT_URI $document_uri; fastcgi_param DOCUMENT_ROOT $document_root; fastcgi_param SERVER_PROTOCOL $server_protocol; fastcgi_param REQUEST_SCHEME $scheme; fastcgi_param HTTPS $https if_not_empty; fastcgi_param GATEWAY_INTERFACE CGI/1.1; fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; fastcgi_param REMOTE_ADDR $remote_addr; fastcgi_param REMOTE_PORT $remote_port; fastcgi_param SERVER_ADDR $server_addr; fastcgi_param SERVER_PORT $server_port; fastcgi_param SERVER_NAME $server_name;fastcgi_split_path_info ^(.&＃43;?\.php)(/.*)$; set $path_info $fastcgi_path_info;fastcgi_param PATH_INFO $path_info;