click below
click below
Normal Size Small Size show me how
web system tech FA4
| Question | Answer |
|---|---|
| What CodeIgniter feature is used for temporary messages such as 'Login successful'? | Flash data |
| Session-based authentication removes the need to validate login input. | False |
| What is a common reason to redirect after processing login? | It prevents the same form submission from being repeated by browser refresh. |
| Matching type. Match the term with the correct description. Flash data | Stores a short message for the next request |
| Matching type. Match the term with the correct description. Authentication | Verifies that a user is who they claim to be |
| Why should passwords be verified using a password-checking function rather than comparing plain text? | Secure verification works with hashed passwords instead of exposing raw passwords. |
| What process clears authenticated session data so the user is no longer logged in? | Logout |
| Why should access-control checks happen before displaying protected content? | To prevent unauthorized users from seeing restricted pages. |
| Which line is a reasonable way to set session data in CodeIgniter? | session()->set(['isLoggedIn' => true]); |
| What is flash data best used for? | A message that should be available only for the next request. |
| A controller checks if session()->get('isLoggedIn') is true before returning the dashboard view. What security goal does this support? | Session-based access control |
| Which CodeIgniter service is commonly used to access session functionality? | session() |
| A developer stores the full password hash and user role in session after login. What should be evaluated? | Whether only necessary, non-sensitive session data is stored. |
| Matching type. Match the term with the correct description. Logout | Removes the authenticated session state |
| Session data can persist across multiple HTTP requests for the same user. | True |
| Which logout design is stronger? | Destroy the session and redirect to login with a short message. |
| What should happen after a successful login? | Store appropriate user identity data in the session and redirect to a protected page. |
| Matching type. Match the term with the correct description. Session | Stores small user-related data across requests |
| Which line is a reasonable way to remove all authentication session data on logout? | session()->destroy(); |
| Flash data is intended to last permanently until manually deleted from the database. | False |
| What term refers to the process of verifying a user's identity? | Authentication |
| Logout should leave the authenticated session values untouched. | False |
| A login workflow usually redirects after successful authentication. | True |
| A user logs in successfully, but protected pages still redirect to login. What should be checked first? | Whether the expected session key is set and read consistently. |
| A protected page should verify the user's authenticated state before showing restricted content. | True |
| A team wants every protected controller method to repeat the same session-check code. What is a better long-term approach? | Use a reusable check, filter, or shared helper pattern. |
| What is the primary purpose of a session in a web application? | To store small user-related data across multiple requests. |