At 9:48 PM -0500 5/14/08, Chris W wrote:
I was wondering what others think of my approach to form validation.
I know many use Java script to do various validation. However,
since there is no way to be sure the data sent to the server is
actually valid, you have to check it in your php code on the server
anyway. Granted you don't have to, but if you don't, you are just
asking for someone to hack your system, or at the very least screw
up your data. So my question is since you have to do a validity
check on the server, why bother with the Java script? The only
advantage I can see to doing it with Java script is it will cut down
on the errors in data that get to the server and then in turn reduce
the number for resubmits and keep traffic down a little. However
since none of the projects I have worked on are very high traffic
sites, that hasn't been much of a concern.
Any thoughts?
Use javascript to enhance the user experience, but always validate server-side.
If you are clever, you can tie the two together via ajax and present
a nice data collection scheme that is both user-friendly and secure.
Cheers,
tedd
--
-------
http://sperling.com http://ancientstones.com http://earthstones.com
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php