User-Defined Web Pages - Siemens S7-1200 System Manual

Additional information
For information on programming with the data log instructions, and importing (Page 376) and
exporting (Page 374) recipes, see the Recipes and Data logs (Page 369) chapter.
11.6

User-defined Web pages

The S7-1200 Web server also provides the means for you to create your own application-
specific HTML pages that incorporate data from the PLC.
Unauthorized access to the CPU through user-defined Web pages
Unauthorized access to the CPU through user-defined Web pages could disrupt process
operation, which could result in death, severe personal injury and/or property damage.
Insecure coding of user-defined Web pages introduces security vulnerabilites such as
cross-site scripting (XSS), code injection, and others.
Protect your S7-1200 CPU from unauthorized access by installing it in a secure fashion as
outlined in the Operational Guidelines found on the Industrial Security Web site.
You create user-defined Web pages using the HTML editor of your choice and download
them to the CPU where they are accessible from the standard Web page menu. This
process involves several tasks:
● Creating HTML pages with an HTML editor, such as Microsoft Frontpage (Page 626)
● Including AWP commands in HTML comments in the HTML code (Page 627):The AWP
● Configuring STEP 7 to read and process the HTML pages (Page 641)
● Generating blocks from the HTML pages (Page 641)
● Programming STEP 7 to control the use of the HTML pages (Page 642)
● Compiling and downloading the blocks to the CPU (Page 643)
● Accessing the user-defined Web pages from your PC (Page 644)
S7-1200 Programmable controller
System Manual, 03/2014, A5E02486680-AG
WARNING
commands are a fixed set of commands that Siemens provides for accessing CPU
information.
Web server
11.6 User-defined Web pages
625