On Sun, Sep 12, 2010 at 3:04 PM, Tamara Temple <tamouse.lists@xxxxxxxxx> wrote: > Actually, even the client-side aspect isn't good enough -- they could simply > retype the same value in the field. Also, I'd like to not rely on JavaScript > alone to indicate that there's been a change, since, as Ashley points out, > someone could simply send up a form without bothering with JavaScript. I'm > talking about checking whether the field has changed on the server-side of > things, specifically. Correct, javascript is simply useful for a nice user experience. Always enforce on the server side, period. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php