masking
hiding visible data
replaces data with something else
e.g. when a person enters a password and it is seen as dots
this protects the actual password
input sanitisation
the process of checking entered data and removing dangerous inputs which could otherwise be used to cause damage to a program
example of input sanitisation
someone might try to gain access to a site’s data through a website form using an SQL injection hack - where an SQL command is entered into a website form
input sanitisation could be used to remove any SQL commands from the inputted data