That depends. If I'm using a framework I'll try to test the functionality internally first, then validate the form and submit it to make sure it all works. I'd

That depends. If I'm using a framework I'll try to test the functionality internally first, then validate the form and submit it to make sure it all works. I'd probably automate this with something like urllib2 and beautifulsoup, but that's just me. For more complicated clientside things you have selenium. For website security testing I use Nikto and Netsparker to save a bit of time, Skipfish and Burp Professional.