Why do we need both client side and server side validation? [closed]

by

Client-side validation just avoids the client from going “but I filled this all in and it didn’t tell me anything!”. It’s not actually mandatory, and in reality, client-side validation is a very new thing (read: 5 years old or less). In practice, all it does is prevent your client (with JS enabled) to know whether the form is okay before reloading a page.
If AJAX is in the game, it is different – it allows you to save bandwidth as well as to provide user with feedback before submission.
Finally, if you’re building strictly client-side, peer-to-peer exchange apps (think games), you’ll want client-side validation to keep the clients from cheating.

Server-side validation is also crucial due to the fact that client-side validation can be completely bypassed by turning off JavaScript. In a way, JS-driven validation is a convenience and an aesthetic/cosmetic improvement and should not be relied upon. Furthermore, it is trivial to edit the source of a page locally in order to disable or bypass even the most complex of JS validation.

What could a user do if you do not server-side validate? Anything, depending on how you use their data. You could be allowing users to drop entire databases (or worse, leak them), modify anything they like (or worse, read anything they like. Directory traversal flaws are extremely common entrance points for naughty people), and elevate their privileges at will. Do you want to run this risk? Not validating user input is like trusting people and not installing locks on your house.

More Related Contents:

  1. My form’s validate() is not working
  2. How to decide when to use Node.js?
  3. JavaScript: client-side vs. server-side validation
  4. How to validate a date?
  5. Required field validations not working in JQuery Popup MVC 4
  6. JavaScript; communication between tabs/windows with same origin [duplicate]
  7. Validation of file extension before uploading file
  8. onclick function runs automatically
  9. Set Value of Input Using Javascript Function
  10. Regular expression for URL validation (in JavaScript)
  11. Validating user’s UTF-8 name in Javascript
  12. Check if a number has a decimal place/is a whole number
  13. jQuery add required to input fields
  14. Javascript regular expression to validate URL
  15. Web app in tvOS
  16. javascript regex for password containing at least 8 characters, 1 number, 1 upper and 1 lowercase [duplicate]
  17. How to get old Value with onchange() event in text box
  18. Enable/Disable submit button if checkbox is checked/unchecked?
  19. Recommendation for javascript form validation library [closed]
  20. jquery only allow input float number
  21. Example of a regular expression for phone numbers
  22. Best way to alphanumeric check in JavaScript
  23. Embedding Google Apps Script in an iFrame
  24. What is jQuery Unobtrusive Validation?
  25. Angular form validation ng-disabled not working
  26. Google Script HTML form from Library throws error Uncaught
  27. Add content of showModalDialog() to the clipboard Google Script
  28. Max characters in textarea with jquery
  29. JavaScript validation issue with international characters
  30. Why does setting ng-model to undefined not make the form/input valid again?

Leave a Comment