Database validation probably comes into play in a couple ways. #1 - datatypes and constraints (including things like foreign keys) provide some level of database validation. #2 - if you're using stored procedures to perform actions, stored procedures can sometimes have business logic validation in them as well.
Of course we all use database validation like #1. Although I've written a few stored procedures, I've neve really put any validation in them. Server validation protects you against a number of things that client validation absolutely cannot do. - bugs in client side validation - hackers/spambots who aren't using the web client that you built and try to post things directly to your server side scripts, cfcs, etc. Rick ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Order the Adobe Coldfusion Anthology now! http://www.amazon.com/Adobe-Coldfusion-Anthology-Michael-Dinowitz/dp/1430272155/?tag=houseoffusion Archive: http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:337367 Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm
