On Thu, 10 Jan 2002, Howard Lowndes wrote: > I think JS has it's place on the web, but we don't see too many examples > of it's correct use. > > One that readily springs to mind is in pre-parsing submission forms - make > sure that the data entered has some semblance of validity. It saves the > annoying practice of submitting a form and then having the rejection come > back for re-submission.
However, the web server better not rely on that JS for data validation - not only does that prohibit anyone without JS from using the form, but it's a possible intrusion vector if some form of incorrect data can trigger a major fault. And if someone wants to do that, no amount of client-side JS (why does that bear a large resemblance to BS? <g>) is going to stop them. It's *got* to be server-side. -- ----------------------------------------------------------------------- #include <disclaimer.h> Matthew Palmer [EMAIL PROTECTED] -- SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
