|
|
Posted by mbstevens on 10/24/05 15:54
SmilingPolitely wrote:
>
> if the browser is not JavaScript enabled and therefore unable to see my
> .js headers and footers, then how can I expect them to fill in a form
> that is validated using JavaScript?
JavaScript is fine for checking forms client side, but you always need
to do taint checking and further validation server side. Crackers can
easily subvert client side checks.
The client side checks will save a few moments for visitors who have
JavaScript enabled, which is one of the good uses for that technology.
>
> Is there a way to account for all users and their browsers, or do I aim
> somewhere in the middle, html headers and footers but with JavaScript
> form validation?
>
Yes, use server side programming. Perl/CGI (my favorite) or PHP are
common. A few services are also starting to support Python and Ruby.
There are also some monopolized solutions from Mordor$oft, whose names I
shall not utter here. <dog howls in the background> For headers and
footers that repeat on each page, you can use a preprocessor, generate
the pages server side, or use SSI (which is also a way of generating
pages server side).
I believe that many people avoid server side solutions because they
think it will somehow be too hard (it's not), or they don't have
privileges on their host. I can only say -- get a host that allows you
to do server side programming, and start collecting information on
server side programming.
--
mbstevens
http://www.mbstevens.com/preprocessor/
Navigation:
[Reply to this message]
|