page on the interface
- Basically have a previous page the next page number is on the
- If it is a page that needs to be counted then it should come out of the total number of such data, do not need statistical data paging can be carried out sequentially
- Paging must be aware that the search conditions can be properly carried
- Pagination inside the data if there is a pop-up editing and so on should not jump in the current page, and after editing will automatically refresh the data
Search
- Generally recommended to take a search will only change the data search condition does not refresh with
- Whether to prompt when blank record
- Search condition interval problem
- The search button cannot be dimmed after it is clicked.
Form
- Whether the tab key between multiple elements of the form can be switched normally by specification
- Whether to support ESC, enter (general login is required to support the form to support the Enter single page) key
- Simulate commit fiddler to modify the critical page itself to not let the modified data see if it can be modified successfully
- Is the permissions controlled?
Input box
- Whether there is a need for comment in a vague and obscure place
- The necessary validation specification is that the front-and-back test can only be tested at the foreground, but the focus is on the backend validation
- Do you have HTML restrictions such as input
<script>alert("fsdfds")</script> that will run correctly on the page (script attack)
- If it is login and so on can do some general SQL injection validation such as or 1 = 1 These keywords
How to submit
- Submissions are divided into forms for direct submission and AJAX submissions regardless of the type of submission, click submit button to disable state
- If it is important that critical data is not allowed to be duplicated, you also need to simulate HTTP multiple commits to verify duplicate commit
function on
- Multi-vision environment, web products often want to imagine that more than one person at the same time, including multiple users with an account, more people with different accounts to operate the same resource will bring related problems
- The web system must have the corresponding operation log whenever the data is modified.
Data on
- Database Insert Expected value
- Judgment of the data type
- Pay special attention to the data of the funds must be clear data sheet
Authority aspects
- The first principle of self-operation to view their own data on the page is not easy to see the need to do some HTTP simulation submission
Performance aspects
- Learn to use simple AB for stress testing
- General page Speed 300--600 milliseconds normal is higher than 600 slow needs proper optimization
Security
- The online environment must not be directly reported to the code error problem
- Cannot read directory directly
- Try a rar or zip with the same name as the site to see if there is a ready-made download package
Test what the general needs to test
