Defensive Design

Defensive Design

1. Input sanitisation

   • cleaning up input data/ removing unwanted data
   • for example removing special characters. preventing SQL injection

2. Validation

   • checking whether input data should be aloud / is sensible/ follows criteria
   • for example goals cannot be less than 0

3. verification

   • checking whether data has been entered correctly
   • for example double entry/ visual check

4. Authentication

   • ensuring allowed/ authorised users can gain access
   • for example usernames and passwords

5. Maintainable code

   • to allow other programmers to understand the code
   • for example comments indentation meaningful and variable names