Josh,

>I wrote myself a validation CFC to handle as wide a range of form
>validations as possible.
>
>In the form I'm submitting, I include a hidden input field that looks sorta
>like this:
>
><input type="hidden" name="validate_config" value="
>firstname^First Name^yes^string|
>lastname^Last Name^yes^string|
>email^Email^yes^email">

You should never rely on the client to provide server-side validation rules.
Reponses from the client can be easily altered which could cause your
server-side validation rules to be overwritten and ignored.

The end user should never be able to alter server-side validation rules you
need to enforce the logic of the form they're filling out. 

In today's plug-in based world, it far too easy for your every-day-Joe to go
mucking around and changing the values of hidden form fields.

-Dan 


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Check out the new features and enhancements in the
latest product release - download the "What's New PDF" now
http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:286164
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

Reply via email to