Posted by Rob McAninch on 12/21/05 21:13

Dima Gofman>:
> Having
> standard names paves the way to simpler server-side data validation
> tools e.g. a field is called "email" so it should be *@*.* and so on,

That 'regex' looking thing won't validate an email BTW. Most form
fields that could possibly be standardized are just going to be
things like a Real Name (where you moreless have to accept whatever
it is). Usernames, passwords, addresses, all those are going to have
various restrictions depending on what you are doing with them on
the server. E.g. database design or shippable addresses.

It is rather trivial to see what field names are being submitted by
a HTML form. Or examine the source of a server generated form. Then
you validate for your needs and security.

--
Rob McAninch
http://rock13.com

[Back to original message]