Posted by Schraalhans Keukenmeester on 04/29/06 13:28

Gordon Burditt wrote:
>>Although I am all pro-serverside coding, I'd rather implement these
>>simple input type checks on the client side, using Javascript.
>
>
> I hope you mean you'd rather implement these checks ALSO on the client
> side.
>
>
>>Much more
>>user-friendly than filling out forms and after each submit be told it's
>>wrong.
>
>
> User-friendly should not substitute for security and data integrity.
> You still need the checks on the server side. Nothing wrong with
> doing it on the client also.
>
> Gordon L. Burditt

Correct on both accounts. I never assume anything to be safe sent by a
client. In fact I think I can be categorized under the 'paranoid'
section wrt security issues. Professional deformity I guess...

Thx
Sh.

Sh.

--
Love is what you've been through with somebody.
-- James Thurber

[Back to original message]