Paul Cohen wrote: > Does anyone have any thoughts on the cost/benefits of server side > field validation vs. running it on the client side? > > Should both be done for security? I tend to do everything serverside, and roll the form back should any of the details not pass (presenting same form with all previous values filled in & any error msgs) Rick Kitty5 NewMedia http://Kitty5.co.uk POV-Ray News & Resources http://Povray.co.uk TEL : +44 (01270) 501101 - FAX : +44 (01270) 251105 - ICQ : 15776037 PGP Public Key http://pgpkeys.mit.edu:11371/pks/lookup?op=get&search=0x231E1CEA --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.426 / Virus Database: 239 - Release Date: 02/12/2002