This module provides students with an explanation of how to manage user input in a Web application in a secure way. The methods for checking user input, and a discussion of the consequences of not performing those checks, are the focus of this module. After completing this module, students will be able to secure their Web applications by validating user input. | msdn training Module 3 Validating User Input Contents Overview 1 Lesson User Input 2 Lesson Types of User Input Attacks 8 Lesson Performing Validation 23 Lesson Revealing As Little Information As Possible to Users 38 Review 46 Lab 3 Verifying User Input 48 Microsoft Information in this document including URL and other Internet Web site references is subject to change without notice. Unless otherwise noted the example companies organizations products domain names e-mail addresses logos people places and events depicted herein are fictitious and no association with any real company organization product domain name e-mail address logo person place or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright no part of this document may be reproduced stored in or introduced into a retrieval system or transmitted in any form or by any means electronic mechanical photocopying recording or otherwise or for any purpose without the express written permission of Microsoft Corporation. Microsoft may have patents patent applications trademarks copyrights or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft the furnishing of this document does not give you any license to these patents trademarks copyrights or other intellectual property. 2002 Microsoft Corporation. All rights reserved. Microsoft MS-DOS Windows Windows NT ActiveX Active Directory Authenticode Hotmail JScript Microsoft Press MSDN PowerPoint Visual Basic Visual C Visual Studio and Windows Media are either registered trademarks or trademarks of Microsoft Corporation in the United States and or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners. Module 3 Validating User Input iii Instructor Notes Presentation 90 minutes This module .
