0
votes

i am developing an asp.net site and i made validation for the web form using javascript and validation controls.

my question is: is it necessary before inserting data into the database to validate them in server side too or it's not??

3

3 Answers

4
votes

Yes, it is.

Client-side validation can be trivially bypassed by disabling Javascript.

3
votes

Yes, also validating on the server is good practice.

This is because any user can take your HTML page and modify it anyway they choose, removing any and all restrictions and limitations. Double checking on the server prevents such abuse.