Hi Kevin

Looking at how the page comment component is set up and considering you already 
have a live site, I don't see any better way other than replacing the 
freemarker script for the component (original is located in commenting module 
under 
src/main/resources/info/magnolia/module/commenting/frontend/comments.ftl), 
adding your honeypot definition to it and updating the component definition to 
point to your new template script.

As for the "problem": what do you feel is the issue with client-side validation 
in this case? JS validation is a nice quick-feedback solution for non-critical 
data and wherever you want do provide some immediate feedback to the user 
without having to send the whole form data to the server to validate it. Of 
course it also has drawbacks if you do have critical data in the form (personal 
infos, contract numbers, etc) then one should definitely use server side 
validation in order to avoid man-in-the-middle attacks/client side tampering 
with the data that is being sent. But maybe you have a specific use case where 
server side would be more fitting?

Considering that page comments can be moderated, the server side validation 
could be avoided in this case, since it does not contain critical data. Just my 
opinion on this matter.

Natascha

-- 
Context is everything: 
http://forum.magnolia-cms.com/forum/thread.html?threadId=852c0343-bbc0-44c1-b2c6-253949cdfcf0


----------------------------------------------------------------
For list details, see http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to