On Sun, 9 May 2004, Puneet Kishor wrote:

PK>since you asked for suggestions on improving the approach, my
PK>suggestion would be to not use H-T/Perl for this at all. Use
PK>JavaScript. I am assuming that you are using the cgi params to send
PK>back in case errors are found because you are not using any db work for
PK>error checking. If that is the case, check it _before_ the user submits
PK>the form. JavaScript is a great language with wonderful capabilities,
PK>and checking at the user end insures that you don't have unnecessary
PK>traffic at all. Of course, one argument would be "what if the user has
PK>js turned off...?" well, then.... don't use my suggestion.

I've said it before, and I'll say it again:  JavaScript is great for
PRE-submission checking, but the script can never, MUST never rely on it
to do final verification.  Even if you assume all the users you care about
use Javascript, you're also assuming that all the users who can submit
data are honest.

They're not.

-- 
Karen J. Cravens  [EMAIL PROTECTED]



-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Html-template-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/html-template-users

Reply via email to