web based application testing is 3 tire testing which 
contain business layer,presentation layer and enviroment 
layer.

Webbased Application testing :
1) Functionality Testing
    * Test the outgoing links from all the pages from
specific domain under test.
    * Test all internal links.
    * Test links jumping on the same pages.
    * Test links used to send the email to admin or other
users from web pages.
    * Test to check if there are any orphan pages.
    * Lastly in link checking, check for broken links in 
 Cookies testing:
Cookies are small files stored on user machine. These are
basically used to maintain the session mainly login
sessions. Test the application by enabling or disabling the
cookies in your browser options. Test if the cookies are
encrypted before writing to user machine. If you are testing
the session cookies (i.e. cookies expire after the sessions
ends) check for login sessions and user stats after session
end. Check effect on application security by deleting the
cookies. (I will soon write separate article on cookie testing)

Validate your HTML/CSS:
If you are optimizing your site for Search engines then
HTML/CSS validation is very important. Mainly validate the
site for HTML syntax errors. Check if site is crawlable to
different search engines.

Database testing:
Data consistency is very important in web application. Check
for data integrity and errors while you edit, delete, modify
the forms or do any DB related functionality.
Check if all the database queries are executing correctly,
data is retrieved correctly and also updated correctly. More
on database testing could be load on DB, we will address
this in web load or performance testing below.

2) Usability testing
3) Interface testing
4) Compatibility testing
Compatibility of your web site is very important testing
aspect. See which compatibility test to be executed:

    * Browser compatibility
    * Operating system compatibility
    * Mobile browsing
    * Printing options


5) Performance testing
     Web application should sustain to heavy load. Web
performance testing should include:
  Web Load Testing
  Web Stress Testing
6) Security testing
    ollowing are some test cases for web security testing:

    * Test by pasting internal url directly into browser
address bar without login. Internal pages should not open.
    * If you are logged in using username and password and
browsing internal pages then try changing url options
directly. I.e. If you are checking some publisher site
statistics with publisher site ID= 123. Try directly
changing the url site ID parameter to different site ID
which is not related to logged in user. Access should denied
for this user to view others stats.
    * Try some invalid inputs in input fields like login
username, password, input text boxes. Check the system
reaction on all invalid inputs.
    * Web directories or files should not be accessible
directly unless given download option.
    * Test the CAPTCHA for automates scripts logins.
    * Test if SSL is used for security measures. If used
proper message should get displayed when user switch from
non-secure http:// pages to secure https:// pages and vice
versa.
    * All transactions, error messages, security breach
attempts should get logged in log files somewhere on web server.




-anjanitesting@gmail.com