Cs6515 Exam 2 Comprehensive Study Guide 2026 Questions With Solutions Graded A+

CS6515 COMPREHENSIVE TEST PAPER 3
VERSION C 2026 FULL QUESTIONS AND
CORRECT SOLUTIONS GRADED A+

⩥Referring to the figures above, if the user submitted the name as
"<h1>Pam</h1>" and howmany as 4 , the browser would display: "Pam
ordered 4 widgets." Answer: False
(htmlspecialchars() converts < into &lt; and > into &gt;, so the echo
statement outputs "<p>&lt;h1&gt;Pam&lt;/h1&gt; ordered 4
widgets.</p>". The browser displays &lt; and &gt; as < and >, so the
browser displays "<h1>Pam</h1> ordered 4 widgets.")


⩥An attacker could use an XSS attack to redirect the user's browser to a
malicious website. Answer: True
(JavaScript in an XSS attack can redirect a browser to any URL.)


⩥The following code uses the getData() function from the figure above
and provides sufficient data validation for a 16 digit credit card number.


$creditCardNum = getData("creditCardNum");


if (strlen($creditCardNum) == 16) {
// Valid number

,} else {
// Invalid number
} Answer: False
(The code does not ensure that $creditCardNum contains only digits, and
$creditCardNum could contain spaces between the numbers, so the
length could be longer than 16 characters. A regular expression
(discussed elsewhere) is ideal for checking text against an expected
pattern.)


⩥What is $_SERVER["REQUEST_METHOD"] the first time a script is
loaded in the web browser?
a) GET
b) POST Answer: a
(The browser sends an HTTP GET request the first time a script is
loaded in the browser.)


⩥Referring to the figure above, what is
$_SERVER["REQUEST_METHOD"] when the user clicks the "Guess"
button a second time?
a) GET
b) POST Answer: b
(Every time the user presses "Guess", the form posts back to the script,
setting the request method to POST.)

,⩥Where should the data validation code be placed?
if ($_POST["num"] == "") {
echo "<p>You didn't type a number.</p>";
}


a) Before
if ($_SERVER["REQUEST_METHOD"] == "POST") {
...
}
b) Inside
if ($_SERVER["REQUEST_METHOD"] == "POST") {
...
}
c) After
if ($_SERVER["REQUEST_METHOD"] ==
"POST") {
...
} Answer: b
(Only when the request method is POST should $_POST["num"] be
checked for a number.)


⩥True or False?

, The regex /run/ matches the string "pruning". Answer: True
(The characters "run" appear in consecutive order in "pruning".)


⩥The regex /run/ matches the string "pr uning". Answer: False
(The space between "r" and "un" causes the regex not to match)


⩥What regex matches the string "Regular Expression"?
a) /Exp/
b) /exp/ Answer: a
(Regular expressions are case sensitive, so "Exp" matches the capital
"E" in "Expression")


⩥What regex matches the string "PHP"?
a) /php/
b) /php/i Answer: b
(The "i" makes the regular expressions case insensitive, so the regex
matches "php" or "PHP")


⩥What value is $x?$x = preg_match("/regex/", "regular expression");
a) 1
b) 0 Answer: b
(The characters "regex" do not appear in consecutive order in "regular
expression")