php - Issues with form submission -


a few questions here have ask, first of all, matter whether put in form:

<form action="whatever.php" method="post"> 

instead of:

<form name="" action="$_server['php_self']" method="post"> 

i mean listing whatever.php because splits code instead of having massive files of code, , pass error messages etc session variables , destroy them instantly, curious advantages or disadvantages , if doing better?

next question form validation, told if not coming database, not bother server side validation , bother client side validation... seems bit odd not bother server side validation, feel should having both regardless of database or not.

the action in form doesn't matter much. if you're using framework router urls don't map directly php files. code lives shouldn't determined url, when more advanced code architecture.

if not coming database, not bother server side validation , bother client side validation

it's other way around. values database safe, user input never safe.


Comments

Popular posts from this blog

image - ClassNotFoundException when add a prebuilt apk into system.img in android -

I need to import mysql 5.1 to 5.5? -

Java, Hibernate, MySQL - store UTC date-time -