[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: Re: Are the data users happy? Why not?

• To: ari@c... (K. Ari Krupnikov),Berend de Boer <berend@x...>
• Subject: Re: Re: Are the data users happy? Why not?
• From: "Alaric B. Snell" <alaric@a...>
• Date: Mon, 24 Feb 2003 10:49:17 +0000
• Cc: <michael.h.kay@n...>,<xml-dev@l...>
• In-reply-to: <f0f4r6uedl7.fsf@p...>
• References: <000701c2db85$b7328570$6401a8c0@pcukmka> <uel5yd4r1.fsf@x...> <f0f4r6uedl7.fsf@p...>

On Monday 24 February 2003 00:17, K. Ari Krupnikov wrote:

[enforcing constraints by using HTML form dropdowns]

> (*) as long as one doesn't construct the HTTP request manually -- I
> wonder how many sites check that.

Not enough! In my code I tend to enforce server-side form validation first, 
then throw in stuff in the HTML itself (even the cursed Javascript) if people 
demand it...

You can sometimes have fun with shopping sites that use third party credit 
card payment systems by getting to the page that has the form that submits to 
the third party, saving it to disk, editing the hidden fields for 'amount' to 
a smaller number but leaving the order number intact, then submitting it.

ABS

-- 
A city is like a large, complex, rabbit
 - ARP

• Follow-Ups:
  • OT: client vs. server-side validation (was: Are the data users happy? Why not?)
    • From: ari@c... (K. Ari Krupnikov)

• References:
  • RE: Re: Are the data users happy? Why not?
    • From: "Michael Kay" <michael.h.kay@n...>
  • Re: Re: Are the data users happy? Why not?
    • From: Berend de Boer <berend@x...>
  • Re: Re: Are the data users happy? Why not?
    • From: ari@c... (K. Ari Krupnikov)

• Prev by Date: Transformation Error , PLZ HELP
• Next by Date: Re: Transformation Error , PLZ HELP
• Previous by thread: Re: Re: Are the data users happy? Why not?
• Next by thread: OT: client vs. server-side validation (was: Are the data users happy? Why not?)
• Index(es):
  • Date
  • Thread