Posted by Gordon Burditt on 10/16/06 23:22

>Basically, im redesigning a form page on our website.
>
>Currently the user submits the form, it does a few javascript checks
>and either submits to the "processstuff.php" page, or gives the user a
>JS error message.. where they have to go back and fill the details in.

Remember, spammers, bots, viruses, and other nasties tend not to
use Javascript. And anyone can turn it off.

>Im trying to optimise and make this form/page as best as it can be.
>
>Do you think it would be a better idea to continue using JS or use JS
>then submit to the php page(where it checks some other details(postcode
>validation) and submits, or just solely use php validation?

You *MUST* use php validation for security. Javascript is useful
for excluding users who refuse to turn it on or don't know how to
turn it on, and it can make the page a bit friendlier.

[Back to original message]