CareerCup

i will try the following combinations of username and pwd:
1. right username and right pwd
2. right username and wrong pwd
3. wrong username and anything as pwd
4. right username and empty pwd
5. empty username and empty pwd

Apart from the above, here are few more.
1. Test if the username and the pswd are case sensitive
2. Test if all of kind of special characters can be used as username except '@'',' etc.
3. Test if all of kind of special characters can be used as pswd including '@' but except ';'',' etc
4. Test if the cookies are enables on the page so that there is an option of saving the password and username.
5. Test if there is no of characters limit specified on the username and password is enforced or not.
6. Test if after clicking the submit button, the user is taken to the next screen.

Equivalent partition can be used to partition the valid and invalid input for username and password (depending on what format is acceptable)

Also check for injecting malicious code in text input field..

Also test if username and password are same

Some other test cases:

- Supply incorrect credentials. Specific informative message must not be displayed to the user (e.g., your username is incorrect, or your password is incorrect)
- Verify that all links on the login page are fully functional (e.g., help links on how to recover passwords, etc)
- Verify that the page source code doesn't reveal any sensitive information as to how the login functionality is implemented
- Verify that the system for username recovery works fine
- Verify that the system for password recovery works fine
- Check if the website protects against automated attacks by providing captcha challenges, etc
- Check if the website supports i10.

{ test with
username:1'or'1'='1
password:1'or'1'='1
this returns always true
}

Functional testing

1) Check if the page is loaded
2) Check if password entered is masked
3) If login is remembered, check if closing the browser and relogging doesnt
take to login page
4) If login is not remembered check if cookies helps to remember the session
within the period
5) Check if user id and password is authenticated
6) If there is two step authentication check if it works
7) If javascript is disabled check if 'sign on' submit triggers the process
8) Check if sign-on page is reloaded after 'signing out'
9) Check if error-message is displayed when entered with incorrect input ie invalid user id or pwd
10) Check if error-message is displayed when password or user id is not entered
11) Check if after login, it doesn't take back to the login page when the website
is opened in a new tab
12) Check if password restrictions are applied when entering password ie integer 0-9,
characters and special characters etc,.

Usability testing

1) Availability of user id and password tab
2) Check if user id and password form field is long enough
3) If there is captcha, check if characters are visible and readable
4) If there is 'remember me' option, check if its a tick box
5) Check if 'sign on' button is available and clickable
6) Check if 'sign out' button is available and clickable
7) Check if the messages displayed ie 'Invalid user-id and password' are visible, clear
and is not truncated

Compatability:

1) Check if everything works in different browsers

Integration:

1) If cookie or history is cleaned, the sign-on page should be re-loaded
2) If browser is closed after sign-on check if the sign-on is not re-loaded on opening again
3) Check if sign-on page works in browser incognito mode.
4) Check if browser stores passwords in cookie during a session
5) Check if browser stores passwords in local desk when 'remember me' option is checked

Performance:

1) sign-on to the application with multiple user accounts at the same time and
capture latency of authentication

Appearance:

1) Check if images and favicon is loaded when the page is requested
2) Check if window is re-sized when browser size is changed