[Javascript] action="insert"

[Falls, Travis D (HTSC, CASD)]

Good point Dave, It is hard to measure the saving in a server side check.  Compile code usually runs pretty fast.  I guess the time is in the page coming back stating you need to validate... ajax could fix that up though.

Travis D. Falls | Consultant   RAFT.Net   IT | 860.547.4070 | travis.falls at thehartford.com


-----Original Message-----
From: javascript-bounces at LaTech.edu
[mailto:javascript-bounces at LaTech.edu]On Behalf Of David Dorward
Sent: Friday, February 10, 2006 10:06 AM
To: [JavaScript List]
Subject: Re: [Javascript] action="insert"


On Fri, Feb 10, 2006 at 09:35:18AM -0500, Falls, Travis D (HTSC, CASD) wrote:
>    Here's a question (that I don't know the answer to) would it be prudent to
>    check to see if javascript and cookies are turned on in the beginning
>    render of a page, if so use an AJAX-ish method to communicate with the
>    server and say... we are all set no need to do server side checks or... do
>    them if javascript is off?

A simpler alternative which would have the same result would be to
just dynamically generate <input type="hidden" name="checkOnServer"
value="no"> ... a lovely invite the malicious user to add that himself
along with whatever other data would normally be caught by the sanity
checks.

Besides, if you've written the server side checks, the amount of
resources needed to run them is going to be minimal anyway, so you
wouldn't get much of a saving.


-- 
David Dorward                                      http://dorward.me.uk

_______________________________________________
Javascript mailing list
Javascript at LaTech.edu
https://lists.LaTech.edu/mailman/listinfo/javascript


*************************************************************************
This communication, including attachments, is
for the exclusive use of addressee and may contain proprietary,
confidential and/or privileged information.  If you are not the intended
recipient, any use, copying, disclosure, dissemination or distribution is
strictly prohibited.  If you are not the intended recipient, please notify
the sender immediately by return e-mail, delete this communication and
destroy all copies.
*************************************************************************