Save
Upgrade to remove ads
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

M4 - Web Sys

WEB SYSTEM TECHNOLOGIES / IT0049

QuestionAnswer
Matching type. Match the term with the correct description. _______________________________________________________________________
Flash data Stores a short message for the next request
Logout Removes the authenticated session state
Session Stores small user-related data across requests
Authentication Verifies that a user is who they claim to be
Why should passwords be verified using a password-checking function rather than comparing plain text? Secure verification works with hashed passwords instead of exposing raw passwords.
Which line is a reasonable way to set session data in CodeIgniter? session()->set(['isLoggedIn' => true]);
A developer stores the full password hash and user role in session after login. What should be evaluated? Whether only necessary, non-sensitive session data is stored.
What is the safest general description of authentication? Confirming a user's identity before allowing access.
Session data can persist across multiple HTTP requests for the same user. True
A team wants every protected controller method to repeat the same session-check code. What is a better long-term approach? Use a reusable check, filter, or shared helper pattern.
Password verification should work against hashed passwords rather than exposing raw passwords. True
What is the primary purpose of a session in a web application? To store small user-related data across multiple requests.
Flash data is intended to last permanently until manually deleted from the database. False
Why should access-control checks happen before displaying protected content? To prevent unauthorized users from seeing restricted pages.
What is the main purpose of logout? To remove the user's authenticated session state.
What should a controller check before showing a protected page? Session/authentication state
A user logs in successfully, but protected pages still redirect to login. What should be checked first? Whether the expected session key is set and read consistently.
What CodeIgniter feature is used for temporary messages such as 'Login successful'? Flash data
Which line is a reasonable way to remove all authentication session data on logout? session()->destroy();
A protected page relies only on hiding menu links, but the route can still be opened manually. What is the main weakness? The server-side access check is missing or incomplete.
A controller checks if session()->get('isLoggedIn') is true before returning the dashboard view. What security goal does this support? Session-based access control
What is flash data best used for? A message that should be available only for the next request.
Session-based authentication removes the need to validate login input. False
Logout should leave the authenticated session values untouched. False
Which behavior indicates a protected page is working correctly? Unauthenticated users are redirected to login.
A protected page should verify the user's authenticated state before showing restricted content. True
Which logout design is stronger? Destroy the session and redirect to login with a short message.
A login page shows 'Invalid credentials' only after a failed attempt and then the message disappears. What feature most likely supports this? Flash data
What should happen after a successful login? Store appropriate user identity data in the session and redirect to a protected page.
What process clears authenticated session data so the user is no longer logged in? Logout
A login workflow usually redirects after successful authentication. True
Which session value would be reasonable to store after login? The logged-in user's id or username.
Which CodeIgniter service is commonly used to access session functionality? session()
What term refers to the process of verifying a user's identity? Authentication
What is a common reason to redirect after processing login? It prevents the same form submission from being repeated by browser refresh.
Hiding a menu link is enough to secure a protected page even if the route remains accessible. False
Created by: Jsean-Ed
 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards