lesson
Storage location and access checks both matter
1 · Learn
A private upload should not become public merely because its URL is hard to guess. Store it outside an openly served directory or use an equivalent protected mechanism, and authorise each download. Cache behaviour also needs to respect privacy.
File type and size validation help manage risk, but they do not establish ownership. A successful upload must remain associated with the correct user and organisation.
2 · Worked example
Two students can each upload a PDF, but one student's authenticated session must not automatically read the other's file.
3 · Your turn
Why is an unpredictable filename insufficient as the only privacy control?
Check your answer
Anyone who obtains the URL could use it unless access is checked independently.
4 · Apply your learning
Design an isolated test with two invented accounts and verify the denied cross-account download.
Adult guidance and safety
Use an approved sandbox, invented data and test accounts. Do not probe other systems or expose credentials. Retain test evidence and accessibility checks; these teaching models are not a completed practical project or a specified GCSE qualification.
Open your writing and drawing pad
Write, draw or show your working. Use a mouse, pen or finger. This pad is not a submitted answer.
Not saved to your account. Download your drawing as PNG and your typed notes as TXT before leaving or refreshing. They are separate files. Do not enter private information.
Open a picture saved on this device to draw on it again. Opening replaces the drawing, but Undo can restore it. PNG only, up to 4 MB and 4096 × 4096 pixels. The picture stays in this browser; it is not uploaded. Paper lines in a saved picture become part of that picture.
Clear the drawing? Your typed notes will stay. You can undo this action.
Your pad is empty.
Open a UTF-8 TXT file from this device, up to 40 KB and 10,000 characters. It stays in this browser. Opening can be undone until you type again. Downloads keep a new copy; they do not change the file you opened.
Replace the notes on this page with the opened file? Download the current notes first if you want to keep them.
Typed notes are not submitted answers.
Check a calculation · Year 5 onward
Use this only when your teacher or adult allows a calculator for the task. Show your thinking first. It does not replace mental or written arithmetic and does not mark your lesson answer.
Powers, roots and trigonometry · Year 7 onward
Use only when the task allows a calculator. Choose one operation at a time and record your working. Trigonometry here always uses degrees (DEG), not radians. Inverse sine, cosine and tangent return an angle, not a reciprocal. Keep exact fractions and π in answers when requested.
Approximate numerical results use up to 12 significant digits. Inverse sine returns −90° to 90°, inverse cosine 0° to 180°, and inverse tangent −90° to 90°; these are principal values, not every possible solution of a trigonometric equation.
Practice this lesson
Lesson resources
Browse the available practice activities and worksheets for this lesson.
Your progress