php - Issues with form submission -
a few questions here have ask, first of all, matter whether put in form:
<form action="whatever.php" method="post">
instead of:
<form name="" action="$_server['php_self']" method="post">
i mean listing whatever.php because splits code instead of having massive files of code, , pass error messages etc session variables , destroy them instantly, curious advantages or disadvantages , if doing better?
next question form validation, told if not coming database, not bother server side validation , bother client side validation... seems bit odd not bother server side validation, feel should having both regardless of database or not.
the action in form doesn't matter much. if you're using framework router urls don't map directly php files. code lives shouldn't determined url, when more advanced code architecture.
if not coming database, not bother server side validation , bother client side validation
it's other way around. values database safe, user input never safe.
Comments
Post a Comment