Client-side validation Javascript or Server Side validation PHP

Question

I have a form which submits data which is entered in the database. Is is recommended to perform both client side and server side validation ?

Andrew White · Accepted Answer · 2010-12-10 04:22:53Z

10

A lot of answers here deal with trust but that's not exactly what the OP is asking.

Is [it] recommended to perform both client side and server side validation ?

Yes, in modern web applications users expect fast responses and if you can do some simple data quality checks up front, do them. Doing so can only make the user's life better. On the same token you must do server side validation for security reasons. I live by the following rule...

Do client side checking for usability and do server side checking for data integrity and security.

answered Dec 10, 2010 at 4:22

Andrew White

53.7k20 gold badges116 silver badges138 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

deceze Over a year ago

Since the OP put server side validation second only, the point that server side validation is the primary validation needed to be driven home first. ;o) Good answer though, +1.

Hoàng Long · Accepted Answer · 2010-12-10 04:19:41Z

4

Yes. Client-side validation is to help customer enter correct data, instead waiting for a time and then receive an error message from server. Then server-side validation is used to stop malicious attack, such as SQL-injection by fake request.

answered Dec 10, 2010 at 4:19

Hoàng Long

10.9k21 gold badges81 silver badges128 bronze badges

Comments

Weston C · Accepted Answer · 2010-12-10 04:07:45Z

2

Yes. Client-side validation is only for the convenience of avoiding a round-trip for the user. It absolutely can't be relied on in any way to keep data clean for the web app.

answered Dec 10, 2010 at 4:07

Weston C

3,6522 gold badges28 silver badges33 bronze badges

Comments

deceze · Accepted Answer · 2010-12-10 04:09:53Z

2

Validation always happens server side.
Duplicating the validation in Javascript is nice for the user experience, but it's not validation!

answered Dec 10, 2010 at 4:09

deceze♦

525k89 gold badges807 silver badges954 bronze badges

Comments

Nik · Accepted Answer · 2010-12-10 04:13:33Z

2

You should go with server side validation because never ever trust user input. Client side validation can be by passed so it is always better to have it server side.

answered Dec 10, 2010 at 4:13

Nik

4,0653 gold badges23 silver badges16 bronze badges

Comments

Jacob Relkin · Accepted Answer · 2010-12-10 04:16:51Z

2

Never trust client side validation. Ever.

Client side validation is only there for one reason: to prevent data that does not fit into a certain condition from even being submitted to the server in order to save server-side processing that will always return false, so why submit it in the first place?

If you don't have server-side validation, you don't have validation. That is all.

answered Dec 10, 2010 at 4:16

Jacob Relkin

164k34 gold badges352 silver badges321 bronze badges

Comments

Imran Naqvi · Accepted Answer · 2010-12-10 05:31:54Z

0

Both, Client Side for user convenience and server side for our.

answered Dec 10, 2010 at 5:31

Imran Naqvi

2,2326 gold badges27 silver badges53 bronze badges

Collectives™ on Stack Overflow

Client-side validation Javascript or Server Side validation PHP

7 Answers 7

1 Comment

Comments

Comments

Comments

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

7 Answers 7

1 Comment

Comments

Comments

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related