jquery form validation: what if the user disables javascript?

Question

I used jQuery form validation to make sure the data entered by the user are of correct format. However, the user may disable his/her browser's javascript and enters garbage data. How can I solve this problem?

Always validate on the server too. – James Allardice Apr 29 '13 at 07:21 — James Allardice, Apr 29 '13 at 07:21
Still people disable javascript in browser? – arjuncc Apr 29 '13 at 07:22 — arjuncc, Apr 29 '13 at 07:22
@arjuncc, I guess they just want to hack into the system. – Randy Tang Apr 29 '13 at 11:40 — Randy Tang, Apr 29 '13 at 11:40

score 5 · Accepted Answer · edited May 23 '17 at 11:57

It is always a good practise to do serverside validation also.Don't depend on client too much.

You SHOULD NOT assume the validation successfully done at client side is 100% perfect. No matter even if it serves less than 50 users. You never know which of your user/emplyee turn into an "evil" and do some harmful activity knowing you dont have proper validations in place.

I recommend you to go through:JavaScript: client-side vs. server-side validation

6339 · Answer 2 · 2013-04-29T11:57:56.260

0

If you want to force the user to use JavaScript, you can use

<body>

<noscript>
Javascript is disabled.
<meta HTTP-EQUIV="REFRESH" content="0; url=http://www.yourweb.com/message_page"> 
</noscript>

</body>

HTML 5 have some validation features, but most of the modern browser doesn't fully support it.

edited Apr 29 '13 at 11:57

answered Apr 29 '13 at 09:51

6339

475
3
16

Interesting... Where should I put the code? in the `` element? – Randy Tang Apr 29 '13 at 11:39
@Tang you can put it in the body part of the page. – 6339 Apr 29 '13 at 11:57
Even if you do this, you _can't_ trust the client. – John Dvorak Apr 29 '13 at 12:00
@JanDvorak yep, we can't trust the user! – 6339 Apr 29 '13 at 12:03

jquery form validation: what if the user disables javascript?

2 Answers2