14 Aug 09 Validation and Sanitation

Is it validation and sanitation are the same? Nope. Validation is one thing and sanitation is another thing. I won’t write the definitions here. I’ll try to write some illustrations.

Validation is such “reject know bad” and “accept known good”. White list or black list, depends on the situation. While sanitation is such we do encode dangerous character.

We can do it both, the validation and sanitation, to the user input data. Example we black list the “<script>” text then we encode the single quote character.

Tags: sanitation, validation