You ABSOLUTELY MUST validate after submission on the server. And if
you want to stop duplicate submissions, this must be done server
side. ANY client side validation is trivial to bypass.
-dhs
Dean H. Saxe, CISSP, CEH
[EMAIL PROTECTED]
"Dissent is the purest form of patriotism."
--Thomas Jefferson
On Mar 20, 2008, at 11:12 AM, Kevin Hellriegel wrote:
I think validating before submitting makes sense (less bandwidth if
users are submitting large files for example). I use mxAjax [http://www.indiankey.com/mxajax/
] for simple validations/lookups in applications I've written. It is
fairly simple to set up and use. You create a CFC, add it to the
settings in mxAjax and then you can call it via javascript. There
are some good docs on there and if you choose to go with it, I can
help you out.
Kevin
On Thu, Mar 20, 2008 at 10:51 AM, Jeff Howard <[EMAIL PROTECTED]>
wrote:
I'm working on an application where a form is submitted along with
various attachments (doc, pdf, xls, etc). Apparently users are
submitting the same request several times and I've been asked to
address this issue. At first thought, it seemed quick and simple to
me, but as I've started working on it I can't decide exactly how to
handle the attachments in associated with the form in the most
efficient way.
That brings me here. I was looking for suggestions on how to handle
the attachments while I run validation on the db to see if the input
from the form already exists in the db. It seems like something
that would be perfect for AJAX to handle, but my AJAX skills are
virtually nonexistent. So, without using AJAX (or if you can break
it down using AJAX for a novice) how would you handle the situation?
The main issue I'm having, is that if I do the validation after the
form submission, CF is assigning a temp directory to my attachment
file. So what is submitted as this: "C:\Documents and Settings
\JHoward\Desktop\PO Request mods.doc" ends up as this after
submission and validation: "C:\ColdFusion8\runtime\servers\coldfusion
\SERVER-INF\temp\wwwroot-tmp\neotmp13963.tmp " and then when I pass
it to the CFFILE, it tells me the file doesn't exist.
I'm really just looking at the different ways other people would
handle this situation to try and decide so any input would be great.
Thanks in advance.
Jeff
-------------------------------------------------------------
Annual Sponsor - Figleaf Software
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform
For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-------------------------------------------------------------
-------------------------------------------------------------
Annual Sponsor - Figleaf Software
To unsubscribe from this list, manage your profile @
http://www.acfug.org?fa=login.edituserform
For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by FusionLink
-------------------------------------------------------------
