Re: Form validation: client- or server-side?
| From: | Peter Vertes | Date: | Fri, 09 Jan 2004 19:41:37 +0000 |
| Subject: | Re: Form validation: client- or server-side? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-174167@lists.php.net to get a copy of this message | ||
On Fri, 2004-01-09 at 14:22, Chris Shiflett wrote:
> But, no matter what, always validate data on the server. Otherwise, it's
> like being a teacher and having your students grade their own work; it
> only works when everyone is honest (and I can guarantee you that won't be
> the case on a public Web site).
Just to play devil's advocate; why would you validate data on the server
if you have a JavaScript that checked the user's input before it gets
submitted to the server ? I mean the whole point of you having that
JavaScript is to make sure the the correct data gets entered so why
bother checking it once again on the server-side with PHP ? Wouldn't
that be redundant and a waste of resources ?
-Pete
--
perl -e 'print pack("H*", "70766572746573406E79632E72722E636F6D0A")'
Attachment: [application/pgp-signature] This is a digitally signed message part signature.asc
Attachment: [application/pgp-signature] This is a digitally signed message part signature.asc