Dependent on Server Side

[Trizen]

ok im curious why some people want to make they PHP do the validation when they can do it with Javascript and it will make your code less bulky and your site faster. cause i under the impression less communication with the server and more client side= faster.

 

Im just curious.

[Alex]

The bottom line is that JavaScript can be disabled. Although JavaScript validation is often a nice touch, there should always be server-side validation in place just in case.

[Trizen]

can you just detect if javascript is disabled and instead of doing validation on the app you just have it validate if javascript is working and if not redirect them to a page that says they cant view or use the site without it to reduce the amount of communication?

[Alex]

That's not a good idea either, because JavaScript can be easily edited. It's not really an issue of communication, when the form is submitted there's only 1 request to the server, and one response. The amount of time that some quick PHP validation will take is insignificant.

[PFMaBiSmAd]

ALL external data (post/files/get/cookie) cannot be trusted and must be validated on the server. There is no guarantee that YOUR form or any form at all was used to submit data to your form processing code.