Still disagree
Server-side *validation* is required if you are coding defensively
(and not just for security reasons)
- it is for data integrity, process integrity, and often security too
It means always check any user supplied values before using them
(or even presuming they were provided)
And any developer should know that you always "check" Any critical user supplied values as close to the source as possible (right
after they are supposed to be provided),
- so they can be "corrected" by user, if not valid, before going any further
Closest thing to the source is client side validation (before the user sends it)
Second closest thing to the source is server side validation (right after the user sends it)
--
_____________________________________________
SBR @ ENJOY (-: [ Microsoft MVP - FrontPage ]
"Warning - Using the F1 Key will not break anything!" (-;
To find the best Newsgroup for FrontPage support see:
http://www.frontpagemvps.com/FrontPageNewsGroups/tabid/53/Default.aspx
_____________________________________________
|> The people you need code defensively for are usually
| > - those that know exactly how to circumvent client side scripting
| > deliberately
| > (usually to cause harm or try to break something)
|
| Coding defensively is a good thing. Server-side defensive programming is a
| security issue. Server-side *validation* is usually unnecessary. Tow
| different topics. Two different solutions.
|
| --
| HTH,
|
| Kevin Spencer
| Microsoft MVP
| .Net Developer
|
| Presuming that God is "only an idea" -
| Ideas exist.
| Therefore, God exists.
|
| | > Disagree w/ you and agree w/ Murray
| > The people you need code defensively for are usually
| > - those that know exactly how to circumvent client side scripting
| > deliberately
| > (usually to cause harm or try to break something)
| > - those that are too "computer impaired" to follow any directions
| > (can also break something)
| >
| > --
| >
| > _____________________________________________
| > SBR @ ENJOY (-: [ Microsoft MVP - FrontPage ]
| > "Warning - Using the F1 Key will not break anything!" (-;
| > To find the best Newsgroup for FrontPage support see:
| >
http://www.frontpagemvps.com/FrontPageNewsGroups/tabid/53/Default.aspx
| > _____________________________________________
| >
| >
| > | > |> Bad attitude. Any important form that doesn't use server-side
| > validation
| > | > is BEGGING for trouble.
| > |
| > | Nah.
| > |
| > | > You'd be surprised who surfs with js turned off.
| > |
| > | I doubt it.
| > |
| > | --
| > | ;-),
| > |
| > | Kevin Spencer
| > | Microsoft MVP
| > | .Net Developer
| > |
| > | Presuming that God is "only an idea" -
| > | Ideas exist.
| > | Therefore, God exists.
| > |
| > | | > | > Bad attitude. Any important form that doesn't use server-side
| > validation
| > | > is BEGGING for trouble.
| > | >
| > | > You'd be surprised who surfs with js turned off.
| > | >
| > | > --
| > | > Murray
| > | > --------------
| > | > MVP FrontPage
| > | >
| > | >
| > | > | > | >> They have JavaScript turned off in their browsers. But don't worry.
| > If
| > | >> they have JavaScript turned off in their browsers, they are not
| > | >> intelligent enough to be worth the trouble of accomodating.
| > | >>
| > | >> --
| > | >> HTH,
| > | >>
| > | >> Kevin Spencer
| > | >> Microsoft MVP
| > | >> .Net Developer
| > | >>
| > | >> Presuming that God is "only an idea" -
| > | >> Ideas exist.
| > | >> Therefore, God exists.
| > | >>
| > | >> | > | >>> We got two records today where the First Name, Last Name and Company
| > | >>> fields
| > | >>> were blank on
| > | >>>
http://www.orbisoft.com/products/taskmanager/2005/dl01ref.aspx.
| > | >>>
| > | >>> How are people still doing this when we have FrontPage form field
| > | >>> validation
| > | >>> set up?
| > | >>>
| > | >>> Regards
| > | >>> Mark Brownlee
| > | >>>
| > | >>>
| > | >>>
| > | >>>
| > | >>
| > | >>
| > | >
| > | >
| > |
| > |
| >
| >
|
|
