2.3 Programming

2.3 Programming

1. Data Validation

   • Actually making the data valid

2. Data Sanitisation

   • Filtering out the data

3. Authentication

   • Actually checking if the data is real

4. Maintainability

   • User access levels
   • Used to see how easy it is to attain data

5. Comments

   • Comments are used to see what happens at different stages

6. Indentation

   • So that the coding can actually work

7. GIGO

   • Garbage In Garbage Out
   • There is a lack of data

8. Different checks of data

   • Length check
   • Range check
   • Lookup check
   • Presence check

9. Defensive program designs

   • Number of tries
     • Less than 3 to ensure no brute force attacks
   • E.g
   • If the password is incorrect
     • It should say: Incorrect username or password
       • Errors
         • Syntax
           • Letters
           • Final and terminal testing
             • Terminal Along as you go
             • Final testing
               • Checking after all components are done
     • Not “incorrect password”
     • Anticipating Misuse
     • Physical authentication
       • Humans are the only reasons programs are compromised
       • Captcha is used to identify robots