BYTE.com
RSS feed

Newsletter
Free E-mail Newsletter from BYTE.com
Email Address
First Name
Last Name




 
    
             
BYTE.com > Tangled in the Threads > 2001 > February

Website API Discovery

By Jon Udell

February 8, 2001

(Website API Discovery :  Page 1 of 3 )



In this Article
Website API Discovery
What About Secure Sites?
Snooping On Website APIs
For a couple of projects recently, I've ended up reverse-engineering website APIs, and then writing scripts to control sites using those APIs.

This is a black art that we can only hope will soon fade away as the web's new architecture of communicating services takes hold. But Internet time ain't what it used to be, so I expect I'll be doing this kind of thing for a while yet. Here are some examples of what I mean:

  • Automating common tasks in a Web-based issue-tracker.
    A couple of weeks ago I mentioned RequestTracker. It's really handy, but the novelty of pointing and clicking wears thin when you're trying to process dozens or hundreds of similar items. So, I've written a script to power through these chores.

  • Verifying website security.
    One of my projects is a site that reacts to certain kinds of spider activity. The best way to test these defenses is to probe with a spider that impersonates an authenticated user.

  • Reformulating Web statistics. For another project, I'm reformulating Web statistics. This, by the way, is a perfect example of the kind of problem that SOAP-style interfaces will solve. DON'T lock users into a specific HTML presentation. DO offer interfaces, use them yourself to create a default presentation, but let others use them directly to create alternate presentations. That's the vision, anyway. In reality, I'll bet the Web stats reprocessor I wrote yesterday won't be my last.

In cases like these, the name of the game is to first discover, and then use, the website's API. The fact that websites have APIs, even when they don't intend to, is one of the most remarkable aspects of the first-generation Web. I've shown elsewhere how it's possible to build novel Web services using existing sites (AltaVista, Yahoo) as components. So what comprises a website's implicit API? Basically, just these things:

Dr. Dobb's Media Center
BYTE.com Store

BYTE CD-ROM
NOW, on one CD-ROM, you can instantly access more than 8 years of BYTE.
 
The Best of BYTE: Volume 2 - Heuristic Algorithms
The Best of BYTE: Volume 2 - Heuristic Algorithms
In this volume of Best of BYTE, we explore the emergence of some heuristic algorithms. Although we have only scratched the surface of this intriguing subject, we hope we've suggested the potential of the synthesis of heuristics and algorithms.

© 2008 Think Services, Privacy Policy, Terms of Service, United Business Media Limited
Site comments: webmaster@byte.com
Web Sites: BYTE.com, dotnetjunkies.com, Dr. Dobb's Journal, SD Expo, Sys Admin, sqljunkies.com, Unixreview



MarketPlace
Try Numara FootPrints 9, The ITSM software that Delivers Real Value, Flexibility and Results.
Automatically capture customer crash data, no debugger required. Support for .NET, C++, OS X, Java.
Understand C/C++ code in less time. Get up to speed faster with Crystal Flow for C/C++.
Develop 10 times faster ! ALM, IDE, .Net, RAD, 5GL, Database, 5GL, 64-bit, etc. Free Express version
Easily create an automated, repeatable process for building and deploying software.
Wanna see your ad here?
 

web2