FOrms

**Jonathan N. Little** · Jul 10 '08, 02:15 PM

Re: FOrms

The Doctor wrote:

IS their a way to make a form behave as follows:
>
Initial submission, review for errors, either submit or go back?
>

Not via HTML. You do that via your receiving server-side script. Once
can additionally do an "optional"* precheck with JavaScript on the
forms's onsubmit event.

*I say "optional" because JavaScript may not always be available can be
not supported or disabled by client. It can only be used as an
additional option to server-side validation and not a replace for
server-side validation.

--
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO

Little Works Studio Site Maintainance

http://www.LittleWorksStudio.com

**Scott Bryce** · Jul 10 '08, 02:35 PM

Re: FOrms

The Doctor wrote:

IS their a way to make a form behave as follows:
>
Initial submission, review for errors, either submit or go back?

Yes.

This would require client side scripting, most likely in Javascript.

Be aware, though, that any data that is sent to the server should be
validated on the server before anything else is done with it. Validating
data on the client does not guarantee that data arriving at the server
is valid. Validation on the client does not replace validation on the
server.

**Scott Bryce** · Jul 10 '08, 02:45 PM

Re: FOrms

Jonathan N. Little wrote:

*I say "optional" because JavaScript may not always be available can
be not supported or disabled by client. It can only be used as an
additional option to server-side validation and not a replace for
server-side validation.

Another reason that client side data validation is not reliable is that
there is no guarantee that the data that arrives at the server came from
the form. It would be very easy for a malicious user to bypass the form
entirely.

Since server side scripts need to validate data and respond to bad data
anyway, I don't bother to validate data on the client. It is just an
extra step, and my Javascript is weak.

**Jonathan N. Little** · Jul 10 '08, 05:05 PM

Re: FOrms

Scott Bryce wrote:

Jonathan N. Little wrote:

>*I say "optional" because JavaScript may not always be available can
>be not supported or disabled by client. It can only be used as an
>additional option to server-side validation and not a replace for
>server-side validation.

>
Another reason that client side data validation is not reliable is that
there is no guarantee that the data that arrives at the server came from
the form. It would be very easy for a malicious user to bypass the form
entirely.
>
Since server side scripts need to validate data and respond to bad data
anyway, I don't bother to validate data on the client. It is just an
extra step, and my Javascript is weak.

All true, but what JavaScript can do since it is client-side is quickly
tipoff the user of an error without the trip to the server and back. But
again, only an artillery feature, all form data should *always*
validated server-side. Always.

--
Take care,

Jonathan
-------------------
LITTLE WORKS STUDIO

Little Works Studio Site Maintainance

http://www.LittleWorksStudio.com

**The Doctor** · Jul 10 '08, 10:15 PM

Re: FOrms

In article <1c707$48763ee9 $40cba7c9$9611@ NAXS.COM>,
Jonathan N. Little <lws4art@centra l.netwrote:

>Scott Bryce wrote:

>Jonathan N. Little wrote:

>>*I say "optional" because JavaScript may not always be available can
>>be not supported or disabled by client. It can only be used as an
>>additional option to server-side validation and not a replace for
>>server-side validation.

>>
>Another reason that client side data validation is not reliable is that
>there is no guarantee that the data that arrives at the server came from
>the form. It would be very easy for a malicious user to bypass the form
>entirely.
>>
>Since server side scripts need to validate data and respond to bad data
>anyway, I don't bother to validate data on the client. It is just an
>extra step, and my Javascript is weak.

>
>All true, but what JavaScript can do since it is client-side is quickly
>tipoff the user of an error without the trip to the server and back. But
>again, only an artillery feature, all form data should *always*
>validated server-side. Always.
>

What about PHP?
--
Member - Liberal International
This is doctor@nl2k.ab. ca Ici doctor@nl2k.ab. ca
God, Queen and country! Beware Anti-Christ rising!
USA petition for dissolution of your nation!

**Scott Bryce** · Jul 11 '08, 12:15 AM

Re: FOrms

The Doctor wrote:

What about PHP?

If you have to ask that question, I wouldn't expect you to be able to do
form data validation.

PHP runs on the server, so it could not be used to do client side data
validation. It can be used to do validation on the server.

**Ed Jay** · Jul 11 '08, 12:25 AM

Re: FOrms

The Doctor wrote:

>In article <1c707$48763ee9 $40cba7c9$9611@ NAXS.COM>,
>Jonathan N. Little <lws4art@centra l.netwrote:

>>Scott Bryce wrote:

>>Jonathan N. Little wrote:
>>>*I say "optional" because JavaScript may not always be available can
>>>be not supported or disabled by client. It can only be used as an
>>>additional option to server-side validation and not a replace for
>>>server-side validation.
>>>
>>Another reason that client side data validation is not reliable is that
>>there is no guarantee that the data that arrives at the server came from
>>the form. It would be very easy for a malicious user to bypass the form
>>entirely.
>>>
>>Since server side scripts need to validate data and respond to bad data
>>anyway, I don't bother to validate data on the client. It is just an
>>extra step, and my Javascript is weak.

>>
>>All true, but what JavaScript can do since it is client-side is quickly
>>tipoff the user of an error without the trip to the server and back. But
>>again, only an artillery feature, all form data should *always*
>>validated server-side. Always.
>>

>
>What about PHP?

Yes.

--
Ed Jay (remove 'M' to reply by email)

Win the War Against Breast Cancer.
Knowing the facts could save your life.

http://www.breastthermography.info

**Guy Macon** · Jul 11 '08, 07:05 PM

Re: FOrms

Jonathan N. Little wrote:

>What JavaScript can do since it is client-side is quickly
>tipoff the user of an error without the trip to the server
>and back. But again, only an artillery feature, all form
>data should *always* validated server-side. Always.

Tell me more about this "artillery feature"! I always
thought of JavaScript client-side validation as an
*ancillary feature... :)

I knew a fellow who worked as a human cannonball once,
but they fired him. I don't know where they are going
to find a replacement of his caliber...

The spell-checker song:

I have a spelling checker.
It came with my pea sea.
It plane lee Mark's four my re-view
Miss steaks aye can knot C.

Iran this poem threw it.
Your sure lee glad two no.
It is core wrecked in every weigh,
My checker tolled me sew.

A checker is a bless sing.
It freeze yew lodes of thyme.
It helps me right stiles ewe can reed,
And AIDS me when aye rime.

Each frays come posed up on my screen
Is trussed two bee a joule.
The checker pours o'er every word
To cheque sum spelling rule.

Bee fore a veiling checkers
Hour spelling mite decline,
If wee R. lacks oar have a laps,
We wood bee maid two wine.

Butt now bee cause my spelling
Is checked with such grate flare,
There are know faults with in my cite,
Of nun eye AM a wear.

Now spelling does knot phase me,
It does knot bring a tier.
My pay purrs awl due glad den
With words sew fare too here.

To rite with care is quite a feet
Of witch won should bee proud,
And wee mussed dew the best wee Can.,
Sew flaws R knot aloud.

Sow ewe can sea why aye dew prays
Such soft wear four pee sees,
And why eye brake in 2 averse
With righting sure too please.

--
Guy Macon
<http://www.GuyMacon.co m/>

FOrms

FOrms

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment