RES: Why validate on the server side and not on the client side u s ing JavaScript???? help

["Carlos Eduardo V. O. Cruz" <ce...@cits.br>]

It´s not safe doing validation on the client side.

That´s the best thing you can say to yous peers.

Validations is required when you care about security, so you have to use the
safest way.

Carlos

-----Mensagem original-----
De: Trieu, Danny [mailto:DTrieu@downeysavings.com]
Enviada em: terça-feira, 15 de abril de 2003 15:53
Para: 'Struts Users Mailing List'
Assunto: RE: Why validate on the server side and not on the client side
us ing JavaScript???? help


I guess what I need is a list of all the convincing fact to make suggestion
to my peers to do validation on the server side and not the on the client
side, and not even on both the server and the client side.

Thanks,

danny

-----Original Message-----
From: David Graham [mailto:dgraham1980@hotmail.com] 
Sent: Tuesday, April 15, 2003 11:47 AM
To: struts-user@jakarta.apache.org
Subject: Re: Why validate on the server side and not on the client side
using JavaScript???? help


One thing you can do is to setup your non validating app in a test 
environment.  Prepare a program that hacks your webapp and corrupts your 
data and demonstrate it in a meeting.  Or, even easier, just turn off your 
javascript and submit a form with bad data.

David


>From: "Trieu, Danny" <DT...@downeysavings.com>
>Reply-To: "Struts Users Mailing List" <st...@jakarta.apache.org>
>To: "'struts-user@jakarta.apache.org'" <st...@jakarta.apache.org>
>Subject: Why validate on the server side and not on the client side using 
>JavaScript???? help
>Date: Tue, 15 Apr 2003 11:14:07 -0700
>
>Hi all,
>
>Can you help point out references to materials that will convince people to
>validate inputs on the server side.
>
>Thanks,
>
>danny


_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online  
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org

---------------------------------------------------------------------
To unsubscribe, e-mail: struts-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-user-help@jakarta.apache.org