web apps

Rainbow table

Hackers will make a table to common passwords and get all the hashes to check

salt

secret you add on to hash is called

MVC stands for

Model view control/controller

HMAC stands for

Hash-based Message Authentication Code

Regex stands for

regular expression

SQL Injection is best defined as

It puts html into your database and messes it up

Order of CCE

connection, cursor, execute

Primary key

designates column id as unique column

Databases

are optimized for multiple simultaneous random accesses (aka transitions)

Databases transactions are atomic

A single transactions either finishes completely, or nothing changes. No partial updates.

Databases transactions are consistent

Transactions do not violate any integrity constraints (i.e. do not put database in illegal state)

$

Matches the end of a string

Which would be the correct decorator function for the action

<form action=”/testform”>

@app.route(‘/testform’)

Which of the following statements are true

The information for the get method is in the request URL, the information for the post method is in the request header, the GET method is used by default

To enable logging to work you must first:

Put import logging at the top of your python file
Also add logging.basicConfig (level=loggingDEBUG)

crc32

fast, but not secure, useful for checksums

md5

widely used, fairly fast; but not secure (fairly easy to find an x that will hash into a known y).

sha1

popular, fairly secure, but showing vulnerabilities

sha256

good security, slow

Desirable properties of H(x):

it is improbable to generate a specific y, for a given y it is infeasible to find x, modifying x slightly will significantly modify y

{{ and }}

denote an expression that will be output to the final document

{% and %}

denotes a control flow statement like if and for

Major advantages of MVC architecture

Develop modules in parallel, Enhances code re-usability, Higher degree of cohesion, Lower degree of coupling, Scalability

SQL

Structured query language is a standard language for database creation and manipulation

URL routing

allows you to configure an application to accept request URLs that do not map to physical files