所有应用程序都需要验证用户输入的数据。
All applications need to validate the data that users enter.
用户所输入的值会与这些验证规则进行比较。
Values entered by the user are compared to the validation rules.
验证通常用于对单个文本字段或多组文本字段的用户输入。
Validation is usually used for user entry on a single text field or groups of text fields.
您需要通过现有代码来跟踪用户输入，而不能用验证函数包装您看到的每个变量。
You need to trace user input through existing code to see if the application behaves securely, instead of wrapping every variable you see in a validation function.
如果输入不正确的值，标签将变成红色，警告用户验证错误。
If an incorrect value is entered, the label will become red to alert the user of a validation error.
为了生成运行更加快捷并易于维护的代码，使用散列表存储命令行选项并使用散列验证用户指定的输入，这种方法非常有帮助。
To produce code that runs faster and is easy to maintain, it makes far more sense to use a hash table that stores the command-line options, then USES the hash to validate the user-specified input.
用户输入要求及验证会因语言环境的不同而有所变化。
User input requirements and validation vary with the locale.
认证主要是用来验证用户的身份，典型的方法是在网站中弹出一个密码输入对话框。
Authentication is about verifying user identity. A typical website prompts for a password.
Struts和Rails都提供了验证用户输入的机制。
Both Struts and Rails provide mechanisms to validate user input.
在Authenticationprofile字段中，输入用于验证远程用户凭证的认证方法。
In the authentication Profile field, enter the authentication method to use to validate remote user credentials.
这个表单bean还将处理任何用户输入域中必需的验证。
The form bean will also handle any validation that is necessary on the user input fields.
当前用户的Windows证书自动从这个平台获取并用于验证，以免您再次输入这个信息。
The current user's Windows credentials are automatically obtained from the platform and used for authentication, saving you from having to re-enter this information.
如果把pam_deny . so替换为pam_unix . so，就应用标准的身份验证方法(输入用户名和密码)。
With pam_unix.so, the standard authentication method (enter a user name and password) will be applied.
这种做法不是很理想，因为它要求用户做更多的工作，而且还要求必须要编写另一个验证规则来确保用户能正确输入。
This isn't ideal because it forces users to do more work and forces you to write another validation rule to make sure that they did it correctly.
通过适当过滤和验证所接收的输入以及适当编码或过滤返回给用户的输出，可以实现这一点。
This can be accomplished by properly filtering and validating the input received and properly encoding or filtering the output returned to the user.
在接下来的几节中，您将对这三个文件进行一些修改，从而完成整个表单，添加用户输入的验证方法并处理验证错误。
You will make some changes to the three files in the following sections, to complete the form, add user inputs validation methods and process the validation errors.
提供表单验证：输入验证是开发人员和用户都十分头痛的问题。
Provide form validation: Input validation is one of the biggest headaches for both developers and users.
表单上的一个常见行为是进行验证以确保用户正输入的内容的格式是一种可接受的格式。
A common action on the form is validation to ensure the content the user is entering is in an accepted format.
利用客户端验证，您可以增强用户体验，而服务器端验证能够真正维护应用程序输入数据的完整性。
You can enhance the user experience with client-side validation, while server-side validation provides the true maintenance of the application's inputted data integrity.
例如，这可能意味着用户需要选择要身份验证的名称空间或输入凭证。
This for example could mean the user needs to select a namespace for authentication or enter credentials.
要消除这种漏洞，可以执行输入验证，或者确保用户所提交的数据总是在显示之前已被html转义。
To get rid of this vulnerability, you can either perform input validation or ensure that user-submitted data is always HTML-escaped before displaying it.
第一点是需要呈现本地化后的页面内容，第二点是验证用户输入以及本地化后的验证消息显示。
The first point is the need to present localized page content, and the second point is the validation of user inputs and localized validation message display.
登录的方式通常都需要用户输入用户名和密码，然后根据在尝试登录之前建立的数据库对用户名和密码进行验证。
Typical approaches to logging in require the user to enter a username and password that are then authenticated against a database set up prior to the login attempt.
从根本上说，它允许开发人员将某些操作标记为安全验证，并要求用户在访问该操作之前输入一组有效的登录凭证。
Fundamentally, it allows the developer to mark certain actions as secure, and requires the user to enter a valid set of login credentials before granting access to that action.
这个问题实际上是与用户输入验证相关的一类更大问题的一个特例。
This problem is actually a special case of a much larger class of problems related to user input validation.
多个用户所输入的数据量会很快超过您为验证而必须传输的数据量。
The amount of data entered by various users will quickly exceed the amount of data you actually must transmit for validation.
许多用户发现密码的特定输入时间要求不会给验证过程带来太多困扰。
Many users find the requirement for a specific duration of password to be a nonburdensome addition to their authentication process.
基本的身份验证是简单的用户名身份验证和口令身份验证，系统会提示用户输入其用户名和口令。
Basic authentication is simple user name and password authentication. Users are prompted to enter in their user name and password.
当用户被要求输入验证码时，用户可以看到两个单词：一个是已知的单词（控制单词），另一个是OCR软件无法确认的单词。
When users solve a CAPTCHA through reCAPTCHA, the software will give users two words: one with a known answer (the control word) and one where the OCR software wasn't quite sure what the word was.
但是由于用户很有可能在输入数据时出错，因此，验证逻辑应能立即用恰当的消息提示用户。
However, it is highly possible that the user will make a mistake in entering the correct data. Therefore, the validation logic should immediately prompt the user with an appropriate message.
应用推荐