Contents
Why is it important to do form validation on both sides client-side and server side?
Which input validation should you use? Both. By validating on the client-side, you have a smoother user experience and by validating on the server-side you ensure any client-side restrictions that were by-passed are validated again before being stored or reflected back to the user.
Can we validate server-side?
Validations can be performed on the server side or on the client side ( web browser). The user input validation take place on the Server Side during a post back session is called Server Side Validation and the user input validation take place on the Client Side (web browser) is called Client Side Validation.
Why is client-side validation not enough?
Client-side validation is not enough because its scope of action is very restrict. The validation is performed in the browser user-interface only. A web server “listens” to and receives an HTTP request containing data from the browser, and then process it. A malicious user can send malicious HTTP requests by many ways.
Do you need client side or server side validation?
Yes, client side validation can be totally bypassed, always. You need to do both, client side to provide a better user experience, and server side to be sure that the input you get is actually validated and not just supposedly validated by the client.
What happens if client side validation is bypassed?
If client-side validation is bypassed, your server-side validations comes to rescue you from any potential damage to your server-side processing. In recent times, we have already heard lot of stories of SQL Injections and other sort of techniques that might be applied in order to gain some evil benefits.
Do You mimic the server-side Validation rule?
Do not mimic the server-side validation rule; provide your own gross, rule of thumb validation rule (ex. 200 characters on client-side; n on server-side dictated by a strong business rule). Server-side validation suits perfectly for preventing systematic errors; it will enforce business rules.
Can you do JSON validation on the server?
You can do Server side validation and send back a JSON object with the validation results for each field, keeping client Javascript to a minimum (just displaying results) and still having a user friendly experience without having to repeat yourself on both client and server.