Thursday, May 19, 2005

Scripting - form validation

I've made a decision regarding my automated form validation scripts. Previously I had set it up to not run server-side validation when client-side validation occurred. I'm reconsidering this decision, though. I've decided that the minor save in server load is not worth the potential problems caused by people circumventing both validations with little effort (at least for someone technically saavy). From now on I'll run both client and server-side validations.

At any rate, the real benefit to client-side validation is the immediate feedback provided to the user. On the applications and pages we produce server-based authentication barely registers a blip on server load thanks to low concurrent usage of pages that require it.