On Sun, Sep 12, 2010 at 3:04 PM, Tamara Temple <tamouse.li...@gmail.com> wrote:

> Actually, even the client-side aspect isn't good enough -- they could simply
> retype the same value in the field. Also, I'd like to not rely on JavaScript
> alone to indicate that there's been a change, since, as Ashley points out,
> someone could simply send up a form without bothering with JavaScript. I'm
> talking about checking whether the field has changed on the server-side of
> things, specifically.

Correct, javascript is simply useful for a nice user experience.
Always enforce on the server side, period.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to