Javascript and Security

[Rommeo]

Hey Guys;

 

i was blogging by using online blog services. Since my blog become popular i decided to build my own website. I had coded a website by using php. But i dont have that much information about javascript.

 

So things that i wonder are;

1) Do you really need javascript for to make your website secure ?

2) What kind of things should i learn to make my website more secure ? My friend's advice about his question is :"hiding links by javascript(posting)" is there any other things that i should know ?

 

Of course i have chance to make domain redirection, wordpress etc. But my aim here is to learn something new.

So thanks in advance for your answers.

[Adam]

Heh, got that backwards my friend. JavaScript is insecure. Never trust JS. It can be disabled & manipulated by any user. Any form of validation or security, must be performed by a server-side technology/programming language, like PHP. I think what he's talking about with 'hiding links' is cross-site scripting (or XSS). I recommend reading the following tutorial for a good insight into security...

 

http://www.phpfreaks.com/tutorial/php-security