Why is client-side validation not enough?

Client-side validation – I assume you are talking about web pages here – relies on JavaScript.

JavaScript powered validation can be turned off in the user’s browser, fail due to a scripting error, or be maliciously circumvented without much effort.

Also, the whole process of form submission can be faked.

Therefore, there is never a guarantee that what arrives server side, is clean and safe data.

Leave a Comment

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)