REST (Representational State Transfer) \u0e40\u0e1b\u0e47\u0e19\u0e2a\u0e16\u0e32\u0e1b\u0e31\u0e15\u0e22\u0e01\u0e23\u0e23\u0e21\u0e01\u0e32\u0e23\u0e2d\u0e2d\u0e01\u0e41\u0e1a\u0e1a API \u0e17\u0e35\u0e48\u0e43\u0e0a\u0e49\u0e2b\u0e25\u0e31\u0e01\u0e01\u0e32\u0e23\u0e02\u0e2d\u0e07 HTTP protocol \u0e42\u0e14\u0e22\u0e21\u0e35\u0e2b\u0e25\u0e31\u0e01\u0e01\u0e32\u0e23\u0e2a\u0e33\u0e04\u0e31\u0e0d\u0e04\u0e37\u0e2d:<\/p>\n\n\n\n
<?php\nheader(\"Content-Type: application\/json; charset=UTF-8\");\nheader(\"Access-Control-Allow-Methods: GET,POST,PUT,DELETE\");\nheader(\"Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With\");\n\n\/\/ \u0e40\u0e0a\u0e37\u0e48\u0e2d\u0e21\u0e15\u0e48\u0e2d\u0e10\u0e32\u0e19\u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25\n$conn = new mysqli(\"localhost\", \"username\", \"password\", \"db_name\");<\/pre>\n\n\n\n\u0e01\u0e32\u0e23\u0e2a\u0e23\u0e49\u0e32\u0e07 API Endpoints<\/p>\n\n\n\n
<?php\n\/\/ GET \/api\/users - \u0e14\u0e36\u0e07\u0e23\u0e32\u0e22\u0e01\u0e32\u0e23\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e17\u0e31\u0e49\u0e07\u0e2b\u0e21\u0e14\nif ($_SERVER['REQUEST_METHOD'] === 'GET') {\n $sql = \"SELECT * FROM users\";\n $result = $conn->query($sql);\n $users = [];\n \n while($row = $result->fetch_assoc()) {\n $users[] = $row;\n }\n \n echo json_encode(['status' => 'success', 'data' => $users]);\n}\n\n\/\/ POST \/api\/users - \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e43\u0e2b\u0e21\u0e48\nif ($_SERVER['REQUEST_METHOD'] === 'POST') {\n $data = json_decode(file_get_contents(\"php:\/\/input\"));\n \n $sql = \"INSERT INTO users (name, email) VALUES (?, ?)\";\n $stmt = $conn->prepare($sql);\n $stmt->bind_param(\"ss\", $data->name, $data->email);\n \n if ($stmt->execute()) {\n echo json_encode(['status' => 'success', 'message' => 'User created']);\n } else {\n echo json_encode(['status' => 'error', 'message' => $conn->error]);\n }\n}<\/pre>\n\n\n\n\u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e01\u0e32\u0e23\u0e1e\u0e31\u0e12\u0e19\u0e32 REST API \u0e14\u0e49\u0e27\u0e22 Node.js \u0e41\u0e25\u0e30 Express<\/h2>\n\n\n\n
\u0e01\u0e32\u0e23\u0e15\u0e31\u0e49\u0e07\u0e04\u0e48\u0e32\u0e40\u0e1a\u0e37\u0e49\u0e2d\u0e07\u0e15\u0e49\u0e19<\/h3>\n\n\n\n
const express = require('express');\nconst bodyParser = require('body-parser');\nconst app = express();\n\napp.use(bodyParser.json());\n\n\/\/ \u0e40\u0e0a\u0e37\u0e48\u0e2d\u0e21\u0e15\u0e48\u0e2d MongoDB \u0e14\u0e49\u0e27\u0e22 Mongoose\nconst mongoose = require('mongoose');\nmongoose.connect('mongodb:\/\/localhost\/api_db', { useNewUrlParser: true });<\/pre>\n\n\n\n\u0e01\u0e32\u0e23\u0e2a\u0e23\u0e49\u0e32\u0e07 Model<\/p>\n\n\n\n
const userSchema = new mongoose.Schema({\n name: String,\n email: String,\n createdAt: { type: Date, default: Date.now }\n});\n\nconst User = mongoose.model('User', userSchema);<\/pre>\n\n\n\n\u0e01\u0e32\u0e23\u0e2a\u0e23\u0e49\u0e32\u0e07 API Routes<\/p>\n\n\n\n
\/\/ GET \/api\/users - \u0e14\u0e36\u0e07\u0e23\u0e32\u0e22\u0e01\u0e32\u0e23\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e17\u0e31\u0e49\u0e07\u0e2b\u0e21\u0e14\napp.get('\/api\/users', async (req, res) => {\n try {\n const users = await User.find();\n res.json({ status: 'success', data: users });\n } catch (err) {\n res.status(500).json({ status: 'error', message: err.message });\n }\n});\n\n\/\/ POST \/api\/users - \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e43\u0e2b\u0e21\u0e48\napp.post('\/api\/users', async (req, res) => {\n try {\n const user = new User({\n name: req.body.name,\n email: req.body.email\n });\n \n const newUser = await user.save();\n res.status(201).json({ status: 'success', data: newUser });\n } catch (err) {\n res.status(400).json({ status: 'error', message: err.message });\n }\n});\n\n\/\/ PUT \/api\/users\/:id - \u0e2d\u0e31\u0e1e\u0e40\u0e14\u0e17\u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\napp.put('\/api\/users\/:id', async (req, res) => {\n try {\n const user = await User.findByIdAndUpdate(\n req.params.id,\n req.body,\n { new: true }\n );\n res.json({ status: 'success', data: user });\n } catch (err) {\n res.status(400).json({ status: 'error', message: err.message });\n }\n});\n\n\/\/ DELETE \/api\/users\/:id - \u0e25\u0e1a\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\napp.delete('\/api\/users\/:id', async (req, res) => {\n try {\n await User.findByIdAndDelete(req.params.id);\n res.json({ status: 'success', message: 'User deleted' });\n } catch (err) {\n res.status(500).json({ status: 'error', message: err.message });\n }\n});<\/pre>\n\n\n\n\u0e41\u0e19\u0e27\u0e17\u0e32\u0e07\u0e01\u0e32\u0e23\u0e1e\u0e31\u0e12\u0e19\u0e32 REST API \u0e17\u0e35\u0e48\u0e14\u0e35<\/h2>\n\n\n\n
\n
- \u0e01\u0e32\u0e23\u0e08\u0e31\u0e14\u0e01\u0e32\u0e23 Response<\/li>\n<\/ol>\n\n\n\n
\/\/ \u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e23\u0e39\u0e1b\u0e41\u0e1a\u0e1a Response \u0e17\u0e35\u0e48\u0e14\u0e35\n{\n \"status\": \"success\",\n \"data\": {\n \"id\": 1,\n \"name\": \"John Doe\",\n \"email\": \"john@example.com\"\n },\n \"message\": \"User created successfully\"\n}<\/pre>\n\n\n\n2. \u0e01\u0e32\u0e23\u0e08\u0e31\u0e14\u0e01\u0e32\u0e23 Error<\/p>\n\n\n\n
\/\/ \u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e23\u0e39\u0e1b\u0e41\u0e1a\u0e1a Error Response\n{\n \"status\": \"error\",\n \"code\": 400,\n \"message\": \"Invalid email format\",\n \"errors\": [\n {\n \"field\": \"email\",\n \"message\": \"Email is not valid\"\n }\n ]\n}<\/pre>\n\n\n\n\n
- \u0e01\u0e32\u0e23\u0e15\u0e31\u0e49\u0e07\u0e0a\u0e37\u0e48\u0e2d Endpoints<\/li>\n<\/ol>\n\n\n\n
\n
- \u0e43\u0e0a\u0e49\u0e04\u0e33\u0e19\u0e32\u0e21 \u0e41\u0e17\u0e19\u0e04\u0e33\u0e01\u0e23\u0e34\u0e22\u0e32:
\/api\/users<\/code> \u0e41\u0e17\u0e19\/api\/getUsers<\/code><\/li>\n\n\n\n- \u0e43\u0e0a\u0e49\u0e15\u0e31\u0e27\u0e1e\u0e34\u0e21\u0e1e\u0e4c\u0e40\u0e25\u0e47\u0e01\u0e17\u0e31\u0e49\u0e07\u0e2b\u0e21\u0e14<\/li>\n\n\n\n
- \u0e43\u0e0a\u0e49\u0e02\u0e35\u0e14\u0e01\u0e25\u0e32\u0e07\u0e43\u0e19\u0e01\u0e32\u0e23\u0e41\u0e1a\u0e48\u0e07\u0e04\u0e33:
\/api\/user-profiles<\/code><\/li>\n<\/ul>\n\n\n\n\n
- \u0e01\u0e32\u0e23\u0e08\u0e31\u0e14\u0e01\u0e32\u0e23 Version<\/li>\n<\/ol>\n\n\n\n
\/api\/v1\/users\n\/api\/v2\/users<\/pre>\n\n\n\n\n
- \u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49 HTTP Status Codes \u0e17\u0e35\u0e48\u0e40\u0e2b\u0e21\u0e32\u0e30\u0e2a\u0e21<\/li>\n<\/ol>\n\n\n\n
\n
- 200 OK – \u0e2a\u0e33\u0e40\u0e23\u0e47\u0e08<\/li>\n\n\n\n
- 201 Created – \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25\u0e2a\u0e33\u0e40\u0e23\u0e47\u0e08<\/li>\n\n\n\n
- 400 Bad Request – \u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25\u0e44\u0e21\u0e48\u0e16\u0e39\u0e01\u0e15\u0e49\u0e2d\u0e07<\/li>\n\n\n\n
- 401 Unauthorized – \u0e44\u0e21\u0e48\u0e44\u0e14\u0e49\u0e22\u0e37\u0e19\u0e22\u0e31\u0e19\u0e15\u0e31\u0e27\u0e15\u0e19<\/li>\n\n\n\n
- 403 Forbidden – \u0e44\u0e21\u0e48\u0e21\u0e35\u0e2a\u0e34\u0e17\u0e18\u0e34\u0e4c<\/li>\n\n\n\n
- 404 Not Found – \u0e44\u0e21\u0e48\u0e1e\u0e1a\u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25<\/li>\n\n\n\n
- 500 Internal Server Error – \u0e40\u0e01\u0e34\u0e14\u0e02\u0e49\u0e2d\u0e1c\u0e34\u0e14\u0e1e\u0e25\u0e32\u0e14\u0e17\u0e35\u0e48\u0e40\u0e0b\u0e34\u0e23\u0e4c\u0e1f\u0e40\u0e27\u0e2d\u0e23\u0e4c<\/li>\n<\/ul>\n\n\n\n
\u0e01\u0e32\u0e23\u0e23\u0e31\u0e01\u0e29\u0e32\u0e04\u0e27\u0e32\u0e21\u0e1b\u0e25\u0e2d\u0e14\u0e20\u0e31\u0e22<\/h2>\n\n\n\n
\n
- \u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49 JWT (JSON Web Tokens)<\/li>\n<\/ol>\n\n\n\n
\/\/ Node.js example\nconst jwt = require('jsonwebtoken');\n\n\/\/ \u0e2a\u0e23\u0e49\u0e32\u0e07 token\nconst token = jwt.sign({ userId: user.id }, 'secret_key', { expiresIn: '1h' });\n\n\/\/ \u0e15\u0e23\u0e27\u0e08\u0e2a\u0e2d\u0e1a token\nconst verifyToken = (req, res, next) => {\n const token = req.headers.authorization;\n if (!token) return res.status(401).json({ message: 'Token required' });\n\n try {\n const decoded = jwt.verify(token, 'secret_key');\n req.user = decoded;\n next();\n } catch (err) {\n res.status(401).json({ message: 'Invalid token' });\n }\n};<\/pre>\n\n\n\n\n
- \u0e01\u0e32\u0e23\u0e1b\u0e49\u0e2d\u0e07\u0e01\u0e31\u0e19 SQL Injection<\/li>\n<\/ol>\n\n\n\n
\n
- \u0e43\u0e0a\u0e49 Prepared Statements<\/li>\n\n\n\n
- \u0e43\u0e0a\u0e49 ORM<\/li>\n\n\n\n
- Sanitize \u0e02\u0e49\u0e2d\u0e21\u0e39\u0e25 input<\/li>\n<\/ul>\n\n\n\n
\n
- \u0e01\u0e32\u0e23\u0e08\u0e33\u0e01\u0e31\u0e14 Rate Limiting<\/li>\n<\/ol>\n\n\n\n
\/\/ Node.js example using express-rate-limit\nconst rateLimit = require('express-rate-limit');\n\nconst limiter = rateLimit({\n windowMs: 15 * 60 * 1000, \/\/ 15 \u0e19\u0e32\u0e17\u0e35\n max: 100 \/\/ \u0e08\u0e33\u0e01\u0e31\u0e14 100 requests \u0e15\u0e48\u0e2d IP\n});\n\napp.use('\/api\/', limiter);<\/pre>\n\n\n\n\u0e01\u0e32\u0e23\u0e17\u0e14\u0e2a\u0e2d\u0e1a API<\/h2>\n\n\n\n
\n
- \u0e43\u0e0a\u0e49\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e21\u0e37\u0e2d\u0e17\u0e14\u0e2a\u0e2d\u0e1a<\/li>\n<\/ol>\n\n\n\n
\n
- Postman<\/li>\n\n\n\n
- curl<\/li>\n\n\n\n
- Jest (\u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a Node.js)<\/li>\n\n\n\n
- PHPUnit (\u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a PHP)<\/li>\n<\/ul>\n\n\n\n
\n
- \u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e01\u0e32\u0e23\u0e17\u0e14\u0e2a\u0e2d\u0e1a\u0e14\u0e49\u0e27\u0e22 Jest<\/li>\n<\/ol>\n\n\n\n
describe('User API', () => {\n test('should create a new user', async () => {\n const res = await request(app)\n .post('\/api\/users')\n .send({\n name: 'Test User',\n email: 'test@example.com'\n });\n \n expect(res.statusCode).toBe(201);\n expect(res.body.data).toHaveProperty('name', 'Test User');\n });\n});<\/pre>\n<\/div>