Web development: Difference between revisions

Revision as of 17:15, 12 June 2016

Revision as of 08:45, 8 July 2016

Line 32:

==Security considerations==

''Web development'' takes into account many security considerations, such as data entry error checking through forms, filtering output, and encryption.<ref>{{Cite web|url=http://docforge.com/wiki/Web_application/Security|title=Web Application Security|accessdate=17 December 2008|publisher=DocForge|date=22 February 2010}}</ref> Malicious practices such as [[SQL injection]] can be executed by users with ill intent yet with only primitive knowledge of web development as a whole. Scripts can be used to exploit websites by granting unauthorized access to malicious users that try to collect information such as email addresses, passwords and protected content like credit card numbers.

Some of this is dependent on the server environment on which the scripting language, such as [[Active Server Pages|ASP]], [[JavaServer Pages|JSP]], [[Perl]], [[PHP]], [[Python (programming language)|Python]] [[Perl|or]] [[Ruby (programming language)|Ruby]] is running, and therefore is not necessarily down to the web developer themselves to maintain. However, stringent testing of web applications before public release is encouraged to prevent such exploits from occurring.