defensive design

defensive design

1. input sanitisation

   • removing any unwanted data we dont whant/need.
   • removing special charictors / preventing SQL ingections.

2. authentication

   • ensuring only authorised users can gain access to what they are trying to access.
   • For example by using Usernames and passwords.

3. validation

   • checks if data meets certain criteria befor passing it into the program.
   • for example chacking a email has a @ symble infront of it

4. verification

   • checking weather data has been entered correctly and no wrong data has been entered into any feild
   • for example having two-step verification.

5. maintanible code

   • to alow other programmers to understand the code.
   • for example using indentation.