defensive design

defensive design

1. input sanitisation

   • remove any unwanted before passing data through the program
     • removing special characters/preventing SQL injection

2. input validation

   • checking if data meets certain criteria before passing it into the program.
     • goals cannot be less then 0

3. verification

   • checking whether data has been entered correctly
     • double entry/visual check

4. authentication

   • authentication can confirm the identity of a user before they're allowed to access certain pieces of data or features of the program
     • usernames/password

5. maintainable

   • to allow other programmers to understand the code
     • comments/indentation/meaningful/variable name