Defensive Design

Defensive Design

1. Input Sanitisation

   • Cleaning up input data / removing unwanted data
   • For example removing special characters / preventing SQL Injection

2. Validation

   • Checking whether input data should be allowed / is sensible / follows criteria
   • For example goals cannot be less than 0

3. Verification

   • checking whether data has been entered correctly
   • For example double entry / visual check

4. Authentication

   • Ensuring only allowed / authorised users can gain access
   • For example username and passwords

5. Maintainable Code

   • To allow other programmers to understand the code
   • For example comments, indentation, meaningful variable names