note 60083 deleted from ref.mail by mazzanet
| From: | mazzanet@php.net | Date: | Sun, 25 Dec 2005 23:33:34 +0000 |
| Subject: | note 60083 deleted from ref.mail by mazzanet | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-100700@lists.php.net to get a copy of this message | ||
Note Submitter: recontrao at NOSPAM dot yahoo dot com
----
in response to the note below.
javascript is NOT a good choice for validations, sice it can be very easily bypassed.
A user coud read the HTML source code and create another html file with the same form but no
validation, and then input the data from there, and spoofing the HTTP Referrer is relatively easy.
To prevent DoS attacks you could implement a CAPTCHA, but CAPTCHA's are not flawless either.
Just my thoughts.