Sign of the case design
First, the basic function of test points:
- Enter the correct user name and password success
- Enter the incorrect username and password to log failure
- The correct user name and password wrong, if prompted for a password wrong?
- User name wrong, normal password, if prompted for a user name wrong?
- User names and passwords are wrong, whether there is a corresponding prompt?
- Username Password empty, if there are appropriate tips?
- If the user is not registered, please register prompt, and then log
- Login failed for user has been canceled, prompt and friendly?
- Whether encrypted password box is displayed?
- Username whether to support Chinese, special characters?
- Are there user name length limit?
- Whether to support the Chinese password, special characters?
- Is there a password length limit?
- The password is case-sensitive?
- When the password is simple common strings, whether prompted changes? Such as: 123456
- Password storage? Encrypt?
- Whether the login function to enter a verification code?
- Code valid time?
- Verification code input errors, login failed, a message is friendly?
- Enter expired verify that you can log in successfully?
- Verification code is easy to identify?
- Code change a feature is available? Click on the picture verification code if you can replace the verification code?
- User system: for example, sub-systems of ordinary users, advanced users, the different users different permissions can log in.
- If you use a third-party account how (QQ, Weibo account) logged in, third-party accounts and account system of the present system of correspondence between the save? First login totalitarian and other needs
Second, the test page:
- Login page display is normal? Text and image displays, corresponding prompt information is correct, and set the arrangement of buttons is normal, whether the page is simple and spectacular and so on.
- The default page if the focus is positioned in the user name input box
- Whether the appropriate input box is empty when you first log in? Or if there is a default copy, the default program disappears when you click on the input box?
- The appropriate buttons such as logging, reset, etc., is available; page forward and backward, the Refresh button is available?
- Shortcuts Tab, Esc, Enter, etc., can control the use of
- Compatibility test: different browsers, different operating systems, different screen resolution under normal
Three , security testing:
- Without logging in: browser, enter the address of the log in directly to see if you can go directly to
- Generated after a successful login Cookie, whether it is httponly (or likely to be stolen script)
-
User name and password are encrypted by the way, is sent to the Web server
- Verify the user name and password, and server-side validation should be used, not just on the client side with javascript validation
- Enter the user name and password box should be shielded SQL injection attacks
- Enter the user name and password box, and enter the script should be banned (to prevent XSS attacks)
- Error landing limit the number (to prevent brute force)
- Consider whether to support multi-user login on the same machine;
- Consider a user is logged on multiple machines
Four performance tests:
- Response time single-user sign-on system meets the "3-5-8" principle
- The number of concurrent users log on whether it can meet the "3-5-8" principle at the critical point
- Pressure: a large number of concurrent users log on response time, the system is how much? The system downtime, memory leaks, cpu saturation, can not log it?
- Stability: The system can handle the number of concurrent users to log N time successive scenes within the critical point?
Five , other tests:
- Continuous input the wrong password three times or more, if the record is locked by a certain time (eg: 15 minutes)? Not allowed to log time, beyond the point of time if you can continue to log on.
- After the user session expires, whether it can return to re-login session expired before this page?
- User name and password input box is a matter of support for keyboard shortcuts? Such as: Undo, Copy, Paste, etc.
- Whether to allow users to log in to operate the same name? Consider web and app simultaneously log
- When the phone log, first determine whether the network is available?
- When the phone log, first determine whether there is a new version of the app?
- Whether to support single sign-on?
- Is there a point buried interfaces
Upload case design
1. Functional
Testing
(1) Select the file to meet the requirements, upload -------- uploaded successfully;
(2) a successful upload the file names appear ---------- display properly (on demand)
(3) viewing, downloading a successful upload files -------- uploaded files to view or download
(4) deleted successfully uploaded files can be deleted -------------
(5) the replacement of a successful upload files ------------- alternative
If (6) to upload files to support Chinese name -------- depending on demand
If (7) a file path can be entered manually as required depending ----------
(8) to manually enter the correct file path, upload ----- successfully uploaded
(9) to manually enter the wrong file path, upload ----- tips, can not upload
2. File size test
(1) conform to the format, the total size is slightly smaller than limit the size of files uploaded successfully ------
(2) the documents and the total size limit is equal to the size of the file uploaded successfully --------
(3) meet the total file size limit is slightly larger than the size of the file -------- prompt early attachment is too large to upload
(4) for the small 0kb can not upload the txt file -----------------------
3. File Name Test
(1) File name is too long. Win2000 Standard: 255 characters (refer to the English character), if it is not more than 127 Chinese characters ----- Tips for too long
(2) the maximum length of the file name (Chinese, English, or mixed) After uploading name display, page layout ----------- pages display properly
(3) file name contains a special character depending on demand -------------
(4) file names are all Chinese -------------------- depending on demand
(5) -------------------- English file names are all dependent on demand
(6) file name is in Chinese, English mixed ----------------- depending on demand
4. File Format test
(1) ----------------- uploaded successfully uploaded in the correct format
(2) does not allow the upload can not upload format -------------- Tips
(3) upload rar, zip and other packaged files (multiple files compressed) --------- depending on demand
5. Safety tests
(1) upload executable files (exe files) ----------------- depending on demand
(2) common Trojan file upload can not upload ------------------------ tips
(3) When the upload server is full ---------------------- prompted
6. Performance Testing
(1) When the upload speed is very slow (speed limit) ----------------- when more than a certain time, suggesting
(2) off the net -------------------------- upload process has successfully prompted to upload
(3) the upload process server to stop wage ------------------ prompted whether a successful upload
Resource utilization (4) --------------- upload process server in the normal range
7. Interface testing
(1) Interface aesthetics, ease of use (the keyboard and mouse operation, the correct order of the tab jump) ---------- normal display (on demand)
(2) -------------- button text is correct correct
(3) correct / error text is correct --------------- correct
(4) descriptive text is correct ----------------------- correct
8. Other tests
(1) When there are multiple upload box, upload the file of the same name according to the requirements set ---------------
(2) upload a file being opened can upload -------------------------
(3) manually inputs the file path if the constraint length of a certain length limits ----------------
Is there a file is being uploaded Cancel function (4) the upload process has -----------
(5) there has been a good choice when you save, but not uploaded file ----------- prompted to upload
() Choose a good but not uploaded file can be deselected ------------ deselect