Client-side validation can be trivially bypassed by disabling Javascript.
3
votes
Yes, also validating on the server is good practice.
This is because any user can take your HTML page and modify it anyway they choose, removing any and all restrictions and limitations. Double checking on the server prevents such abuse.
We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.OkRead more