View Single Post
  #3 (permalink)  
Old 09-14-06, 09:55 AM
End User's Avatar
End User End User is offline
Level II Curmudgeon
 
Join Date: Dec 2004
Posts: 3,027
Thanks: 14
Thanked 35 Times in 33 Posts
Quote:
Originally Posted by sharad
I am working on a PHP project. Most of the PHP pages use the javascript validation.
As nico said, you should never rely on javascript except as a first line of defense. Data should *always* be validated on the server end. Always. It's trivial to turn off javascript and then stuff all sorts of illegal and/or malicious data in the form fields.
__________________
I don't live on the edge, but sometimes I go there to visit.
-------------------------------------------------------------------------
Sanitize Your Data | Oracle Date & Substring Functions | Code Snippet Library | [url=http://www.codmb.com/Call Of Duty[/url]
Reply With Quote