Why is client-side validation not enough?

Client-side validation – I assume you are talking about web pages here – relies on JavaScript.

JavaScript powered validation can be turned off in the user’s browser, fail due to a scripting error, or be maliciously circumvented without much effort.

Also, the whole process of form submission can be faked.

Therefore, there is never a guarantee that what arrives server side, is clean and safe data.

Leave a Comment