When server side validation is required?

Question

I am submitting a form using jquery like if a user clicks on the submit image it will submit the form. So in this case if the user will disable java script on the browser ,user can not submit the form.

So do I need server side validation for this form ? Because what i know is server side validation helpful when some one disable javascript on the browser , But as in my case the user can not submit the form after disabling the javascript, so why do i need server side validation.

If I am wrong, In which cases do i need server side validation?

http://stackoverflow.com/questions/162159/javascript-client-side-vs-server-side-validation — Ankit Tyagi, Oct 31 '13 at 06:15
http://stackoverflow.com/questions/4076927/why-do-we-need-server-side-as-well-as-client-side-validation-for-web-application — Ankit Tyagi, Oct 31 '13 at 06:15

score 3 · Answer 1 · edited May 23 '17 at 10:32

Because your client side validation may be subverted.

For example - on the web, if you are using javascript for validation, it is very easy to either turn javascript off, or change how it works using tools such as FireBug.

Event with other client/server methods, it is possible for the data link to be subverted and the "validated" data can be changed on the way to the server (Man In The Middle attack).

In general, the maxim "never trust the client" is the reason that you need to always validate on the server.

You may ask in that case, why validate on the client? In order to provide immediate feedback.

Why do we need server side as well as client side validation for Web applications?

checkout this

score 0 · Answer 2 · answered Oct 31 '13 at 06:15

0

Irrespective of your client side validations, we have to implement server side validations to maintain security else anyone can hack your URL and send data through URL. So having server side validations is very good practice

answered Oct 31 '13 at 06:15

Shoaib Chikate

8,665
12
47
70

1

But if javascript disabled how it will work? he describes that he have this case if the user will disable java script on the browser ,user can not submit the form. – Just code Oct 31 '13 at 06:19
1

You just dont need buttons to submit form.....many hacking techniques are there. So server side protection is mandantory. – Shoaib Chikate Oct 31 '13 at 06:46

score 0 · Answer 3 · answered Oct 31 '13 at 06:33

i have simple answer.. if user disabled client side script then dont show form/ content..so user will forcefully enabled script @ client end..

<html>
<body>
<noscript>
  Activate script for better result.. 
  <style>div { display:none; }</style>
</noscript>
<div>
u r form code goes here
</div>
</body>
</html>

When server side validation is required?

3 Answers3