WEEK 9–10: CodeIgniter Security Practices

What is the main purpose of user authentication in a web application?

• To encrypt user data

• To create user profiles

• To verify the identity of users

• To improve performance

Which method adds an extra layer of authentication security by requiring more than one verification factor?

• Social Login

• CAPTCHA

• Multi-Factor Authentication (MFA)

• Single Sign-On (SSO)

What is the correct way to enable CSRF protection in CodeIgniter?

• csrf_protection = false in config.php

• Add CSRF token to URL

• Set 'csrf_protection' => TRUE in config.php

• Use session flash data

Which function in CodeIgniter can be used to add a CSRF token to a form?

• csrf_token()

• form_token()

• form_hidden()

• csrf_input()

What is the main function of Role-Based Access Control (RBAC)?

• Speed up application loading

• Manage database backups

• Grant access based on user roles

• Encrypt communication

What is the safest way to handle SQL queries in CodeIgniter?

• Manual string concatenation

• Inline SQL

• Prepared statements

• GET parameters

What is the purpose of the xss_clean() function in CodeIgniter?

• Encrypt user passwords

• Prevent SQL injection

• Remove cross-site scripting threats

• Format database queries

Which of the following is an example of a web security threat?

• Session timeout

• SQL injection

• File download

• Email verification

What should you do before storing user passwords in the database?

• Encrypt them with AES

• Convert to base64

• Hash them using a secure algorithm

• Store them as plain text

Which CodeIgniter component is used to handle user sessions?

• Form Helper

• Query Builder

• Session Library

• Validation Library