Home/ Questions/Q 9000537
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-16T00:19:25+00:00

I should also add that I’m asking with the mysql extension in mind. I

  • 0

I should also add that I’m asking with the mysql extension in mind. I know that mysqli or PDO should be used. If I’m using jQuery Validationto validate client side (such as an email perhaps), should I also do it server side (make sure it’s not blank and is a valid email)?

I’m just wondering if I’m opening myself up to Cross-site scripting vulnerabilities or SQL injections or anything else for that matter by simply not validating server side or will I be okay as long as I’m taking security measures when form data is being submitted.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    YES YES always YES. Never trust anything that comes from the browser.

    In the most benign case, what if they had Javascript disabled?

    For a more devious case, what if they were manually posting the data with something like curl?

    • 0