Appnovation Technologies: A few points about form validation

Mon, Apr 19, 2010 by Steve

Form validation is very common and important in web development. It can be done on client side or server side.

Client-side form validation (eg. using Javascript) can help improve usability and performance as errors/anomalies can be identified and corrected before the form is submitted to the server for processing. However, while it's useful, one can't rely on client-side validation. Even if form data have passed the client-side validation, it's not difficult for someone to alter the data after that. Tools such as WebScarab (http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project) can be used as an intercepting proxy for this purpose. Even without the use of such tools, a malicious user can still download the HTML code of the original form, modify it and then submit the altered form. So it's a good idea and often necessary to repeat the validation process on the server side.

آخر المشاركات

 

المناقشات النشطة
المزيد

 

أوسمة الموقع
المزيد