Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
SA2 - Web Sys
SA2[M3-4] - WEB SYSTEM TECHNOLOGIES / IT0049
| Question | Answer |
|---|---|
| Matching type. Match the term with the correct description. | _______________________________________________________________________ |
| Validation rule | Describes what submitted input must satisfy before saving |
| old() | Restores previously submitted input on a redisplayed form |
| move() | Transfers an accepted uploaded file to a target folder |
| getFile() | Reads an uploaded file object from the request |
| _______________________________________________________________________ | _______________________________________________________________________ |
| A controller wants to update an existing user record after validation succeeds. Which Model method is most appropriate? | update($id, $data) |
| What file input form encoding is required for file uploads? | multipart/form-data |
| The uploaded file's original name should always be trusted as the final server filename. | False |
| Which form attribute is required when a CodeIgniter page must upload a file? | enctype="multipart/form-data" |
| What does validation_show_error('title') display in a CodeIgniter view? | The validation message for the title field. |
| A developer allows any uploaded file type because only images are expected. What is the best correction? | Use file validation rules for allowed image MIME types and maximum size. |
| What acronym refers to Create, Read, Update, and Delete operations? | CRUD |
| Validation should normally run after saving the submitted data. | False |
| Why is a random server filename safer than using the uploaded file's original name? | It reduces name collisions and avoids trusting user-supplied filenames. |
| A Model can be used by a controller to insert, update, retrieve, or delete records. | True |
| Why should validation run before insert() or update() in a CodeIgniter controller? | It prevents invalid or unsafe input from being saved. |
| A student saves uploaded avatars before checking file type and size. What is the main risk? | Unsafe or unexpected files may already be stored before rejection. |
| A page successfully saves a customer but displays a blank list afterward. The controller calls return view('customers/index') without passing records. What should be checked first? | Whether customer data is retrieved and passed to the view. |
| File type and file size restrictions help reduce unsafe upload behavior. | True |
| A form field is named email, but the controller validates user_email. What is the most likely result? | Validation will not check the submitted email field correctly. |
| What helper can print the validation error message for one field in a view? | validation_show_error() |
| What is the main purpose of redisplaying old input after validation fails? | To let users correct mistakes without retyping every field. |
| Which CodeIgniter helper function is commonly placed inside a form to include CSRF protection? | csrf_field() |
| old() helps preserve submitted values when a form is redisplayed after validation failure. | True |
| Which approach is best when a real system should avoid permanently deleting user accounts? | Use an archive or deactivation status when possible. |
| A controller receives a submitted title field. Which line safely reads the posted value through CodeIgniter's request object? | $this->request->getPost('title'); |
| What CodeIgniter constant points to the public front-controller path, often used when saving files under public/uploads? | FCPATH |
| Which validation rule set best restricts an uploaded avatar to JPG or PNG images no larger than 2 MB? | uploaded[avatar]|max_size[avatar,2048]|mime_in[avatar,image/jpg,image/jpeg,image/png] |
| Which validation rule makes a form field required before the controller saves data? | required |
| A CodeIgniter form that uploads files must use multipart/form-data. | True |
| Why should a Delete action normally be submitted using POST rather than a normal GET link? | Destructive actions should not be triggered by simple page visits or crawlers. |
| What should be saved in the database after a successful public image upload? | Only the generated filename or path needed to display the file. |
| A view should normally decide by itself which database record to delete. | False |
| Which CodeIgniter UploadedFile method generates a safer unique filename before moving the file? | getRandomName() |
| Deleting records through a normal GET link is a safe default for production systems. | False |
| Which line moves an uploaded file object named $file into the public uploads folder using a generated name? | $file->move(FCPATH . 'uploads', $newName); |
| Which statement best describes CRUD? | The four record actions: create, read, update, and delete. |
| _______________________________________________________________________ | _______________________________________________________________________ |
| Matching type. Match the term with the correct description. | _______________________________________________________________________ |
| Flash data | Stores a short message for the next request |
| Logout | Removes the authenticated session state |
| Session | Stores small user-related data across requests |
| Authentication | Verifies that a user is who they claim to be |
| _______________________________________________________________________ | _______________________________________________________________________ |
| Which line is a reasonable way to set session data in CodeIgniter? | session()->set(['isLoggedIn' => true]); |
| A developer stores the full password hash and user role in session after login. What should be evaluated? | Whether only necessary, non-sensitive session data is stored. |
| What is the safest general description of authentication? | Confirming a user's identity before allowing access. |
| Session data can persist across multiple HTTP requests for the same user. | True |
| A team wants every protected controller method to repeat the same session-check code. What is a better long-term approach? | Use a reusable check, filter, or shared helper pattern. |
| Password verification should work against hashed passwords rather than exposing raw passwords. | True |
| What is the primary purpose of a session in a web application? | To store small user-related data across multiple requests. |
| Flash data is intended to last permanently until manually deleted from the database. | False |
| Why should access-control checks happen before displaying protected content? | To prevent unauthorized users from seeing restricted pages. |
| What is the main purpose of logout? | To remove the user's authenticated session state. |
| What should a controller check before showing a protected page? | Session/authentication state |
| A user logs in successfully, but protected pages still redirect to login. What should be checked first? | Whether the expected session key is set and read consistently. |
| What CodeIgniter feature is used for temporary messages such as 'Login successful'? | Flash data |
| Which line is a reasonable way to remove all authentication session data on logout? | session()->destroy(); |
| A protected page relies only on hiding menu links, but the route can still be opened manually. What is the main weakness? | The server-side access check is missing or incomplete. |
| A controller checks if session()->get('isLoggedIn') is true before returning the dashboard view. What security goal does this support? | Session-based access control |
| What is flash data best used for? | A message that should be available only for the next request. |
| Session-based authentication removes the need to validate login input. | False |
| Logout should leave the authenticated session values untouched. | False |
| Which behavior indicates a protected page is working correctly? | Unauthenticated users are redirected to login. |
| A protected page should verify the user's authenticated state before showing restricted content. | True |
| Which logout design is stronger? | Destroy the session and redirect to login with a short message. |
| A login page shows 'Invalid credentials' only after a failed attempt and then the message disappears. What feature most likely supports this? | Flash data |
| What should happen after a successful login? | Store appropriate user identity data in the session and redirect to a protected page. |
| What process clears authenticated session data so the user is no longer logged in? | Logout |
| A login workflow usually redirects after successful authentication. | True |
| Which session value would be reasonable to store after login? | The logged-in user's id or username. |
| Which CodeIgniter service is commonly used to access session functionality? | session() |
| What term refers to the process of verifying a user's identity? | Authentication |
| What is a common reason to redirect after processing login? | It prevents the same form submission from being repeated by browser refresh. |
| Hiding a menu link is enough to secure a protected page even if the route remains accessible. | False |
| Why should passwords be verified using a password-checking function rather than comparing plain text? | Secure verification works with hashed passwords instead of exposing raw passwords. |
Created by:
Jsean-Ed