On 15 Jun 2011, at 12:40, Stephen Booth wrote:


My question is, do I need to validate the input (for malicious attempts, etc) or does the theyworkforyou back-end handle that? I'm aware that perhaps it could be argued that I should simply validate anyway. However, I don't want to re-invent the wheel, nor spend development time if the work has
already been done.

The guidance I've always been given, and pass on, is to validate where
ever possible.

I guess I knew this already. You're right, thanks for response.

Simon


_______________________________________________
developers-public mailing list
[email protected]
https://secure.mysociety.org/admin/lists/mailman/listinfo/developers-public

Unsubscribe: 
https://secure.mysociety.org/admin/lists/mailman/options/developers-public/archive%40mail-archive.com

Reply via email to