TK Study

Software Engineering › Learn step by step › Y12 Secure Software Architecture

Item 209 of 426 · Year 12: Secure Software Architecture, 32 of 57

Input validation

Term Key terms bank

Jump to a topic
  1. Exam format, question types and command words (46)
  2. Year 11: Programming Fundamentals (69)
  3. Year 11: The Object-Oriented Paradigm (33)
  4. Year 11: Programming Mechatronics (29)
  5. Year 12: Secure Software Architecture (57)
  6. Year 12: Programming for the Web (59)
  7. Year 12: Software Automation (35)
  8. Year 12: The Software Engineering Project (47)
  9. Diagrams and modelling tools (18)
  10. Python, SQL, pseudocode and CSS patterns (33)

See every item in the sequence

Definition

Checking that input meets rules (type, range, length, format, presence) before it is used.

Example: if not age.isdigit(): reject

Found in: syllabus, sample exam and familiarisation guidelines, school notes.

Short version to memorise (key terms bank)

Checking input meets rules before use.

Where you'll use it in the test

Syllabus area: Y12 Secure Software Architecture.

Question types it can appear in

Where it has appeared in the paper

Secure Software Architecture (Part A, B, C). Part letters follow each paper’s own layout.

Related past questions

How to use it

A model sentence

General advice, built from the definition and example above

“Checking that input meets rules (type, range, length, format, presence) before it is used.” Then apply it: if not age.isdigit(): reject

In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.

Command words used with it

General advice

No linked question shows the command word for this term. Across the past python and short answer questions in this bank the words used most are: Explain, Outline, Describe, Compare, Classify, Analyse. Check the actual word in your question.

Official worked answer

Sample exam Q18b (3 marks): Developing secure code (Python input validation) (3 marks): official criteria and sample answer

Criteria

3: Correct function in Python to check whether a username satisfies the rules. 2: Partially correct function. 1: Some understanding of the problem and Python.

Sample answer

def validate_username(username): valid = True

 # length check
 if len(username) < 8:
      valid = False
 elif (not username[0].isupper()):
      valid = False
 elif (not username[-2].islower()):
      valid = False
 elif (not username[-1].isdigit()):
      valid = False

 return valid

Open the question page

Go deeper

Check yourself

Explain “Input validation” in one sentence, give an example, and name a question type that could test it.

Reveal the answer

Checking that input meets rules (type, range, length, format, presence) before it is used.

Example: if not age.isdigit(): reject

Could be tested as: Python, Short answer, Multiple choice, Fill in the blanks.

Quick multiple choice

What is the difference between input validation and input sanitisation?

  1. Validation happens only after the data is saved; sanitisation happens before
  2. Validation encrypts the input; sanitisation decrypts it
  3. Validation checks that input meets the rules and rejects it if not; sanitisation cleans or removes harmful characters from input
  4. They are the same process with different names
Show the answer

C

Validation = is this acceptable (type, range, format, length)? Sanitisation = make unsafe input safe (e.g. escape or strip < > and quotes).

Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.