How to Avoid Common Coding Pitfalls? | KnowledgeCity

This video is from the Programming and Cybersecurity online training course. Click here to view full course: https://www.knowledgecity.com/en/library/L373363199/programming-and-cybersecurity/ You’ve probably seen code that works but still puts a system at risk. It passes tests and gets deployed. It seems to work as expected, but under the surface, it contains flaws most users never see. Insecure coding practices don’t always cause immediate problems. But they often lead to weaknesses that attackers know how to spot and exploit. These are often simple: a missed validation check or an overly trusting system. But these can be easy to miss without a prevention strategy. Secure coding means thinking about security while you’re building. Let’s look at two common habits that create risk and what to do instead. First are hardcoded credentials. During testing, it might seem harmless to drop a password or API key—a unique code used to authenticate and authorize software communication—that allows software to communicate with each other directly into the code. But if that code gets pushed to a shared repository or deployed to production, those secrets go along with it. In one case, a WiFi router model shipped with a hardcoded admin password in its configuration. Anyone who found the service could easily connect to the device. To avoid this problem, never store secrets in the code. Use environment variables that exist outside the code. For even better protection, use a secrets vault, like AWS Secrets Manager, a cloud-based service that stores and manages sensitive credentials, which is like a safe for your data. Rotate those credentials on a regular basis so that even if one leaks, it doesn’t stay valid for long. Another problem is skipping data validation. If your system doesn’t check input data properly, it might treat it as a command or pass it somewhere it doesn’t belong. That can lead to serious issues like data exposure or broken functionality. We can’t assume all user inp