Defensive Design

Defensive Design

1. Input Sanitisation

   • Cleaning up input data / removing unwated data
   • removing specisl char / preventing SQL injection

2. Validation

   • Checking whether input data should be allowed / is sensible / follwos criteria
   • Goals cannot be less than 0

3. Authentication

   • Ensuring only authorised users are allowed to access the data.

4. Verification

   • Checking whether data has been entered correctly
   • For e.g: double entry / visual check

5. Maintainable code

   • To allow other programmers to understand the code