Brett Parker wrote:
> On Mon, Feb 20, 2006 at 10:36:38PM +0000, Graham King wrote:
>>   You could make the form invisible using css:
>>
>> #theFormId {
>>    display: none;
>> }
>>
>>   then use Javascript to change this to display = block. If they don't 
>> have Javascript the form won't appear.
>>
>>   Or you could use Javascript to write the form out, as in:
>> <script>
>> document.write('<form>');
>> </script>
>>   but the CSS version is much cleaner.
>>
>>   And yes, you should also make sure you check the data on the server 
>> side, otherwise something nasty is bound to happen.
> 
> Unfortunate side effect of the CSS method, however, is what happens when
> the user isn't using a browser that supports CSS, say a text based
> browser. You'll then get the form displayed, which probably isn't the
> right way to go ;)
> 
> The javascript, although not the cleanest way, is probably best for the
> case that you really do not want the form to be displayed.
> 

thanks for the help.

at the end, i did the followin:

- no javascript-visibility tricks
- the form's submit buttons are written out using document.write
- i added a <noscript> tag to warn the user to enable javascript

this way, if javascript is disabled, the user cannot submit the form. he 
can still see it, but cannot submit (so cannot break anything).

gabor

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users
-~----------~----~----~----~------~----~------~--~---

Reply via email to