Re: How to handle a submitted form with no changes -- best practices sought
| From: | Michael Shadle | Date: | Sun, 12 Sep 2010 22:08:10 +0000 |
| Subject: | Re: How to handle a submitted form with no changes -- best practices sought | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-308003@lists.php.net to get a copy of this message | ||
On Sun, Sep 12, 2010 at 3:04 PM, Tamara Temple <tamouse.lists@gmail.com> wrote:
> Actually, even the client-side aspect isn't good enough -- they could simply
> retype the same value in the field. Also, I'd like to not rely on JavaScript
> alone to indicate that there's been a change, since, as Ashley points out,
> someone could simply send up a form without bothering with JavaScript. I'm
> talking about checking whether the field has changed on the server-side of
> things, specifically.
Correct, javascript is simply useful for a nice user experience.
Always enforce on the server side, period.