web测试种类（Web test categories）.doc

web测试种类（Web test categories） Web application system security test area mainly: (1) now the Web application system basically adopts the method of registering first and then landing. Therefore, you must test valid and invalid user names and passwords, note that case sensitive, you can try the number of restrictions, whether you can not login and browse a page directly. (2) does the Web application have a timeout limit, that is, the user does not click any page for a certain period of time (for example, 15 minutes), and does it need to be re logged in order to use it properly?. (3) log files are critical in order to ensure the security of Web application systems. You need to test whether the relevant information is written into the log file and whether it can be traced. (4) when you use a secure socket, you also need to test whether the encryption is correct and check the integrity of the information. (5) server-side scripts often constitute security vulnerabilities that are often exploited by hackers. So you also need to test the problem of not being able to place and edit scripts on the server side without authorization. Navigation: navigation test? Describes the operation of a user in a page in the way, between the different user interface controls such as buttons, dialog box, list and window; or in a different connection between pages. By considering the following issues, you can determine whether a Web application system is easy to navigate: is navigation intuitive? Is the main part of the Web system accessible through the home page? Does the Web system need site maps, search engines, or other navigational aids? Too much information on a page is often the opposite of what is expected. Users of Web applications tend to target drivers, and quickly scan a Web application to see if they have the information they need, and if not, they will leave soon. Very few users are willing to take the time to familiarize themselves with the structure of the Web application system