Validating Forms with JavaScript
JavaScript is not a true security measure in itself, but rather an added level of security and a convenience to your users. Because JavaScript is a client-side technology (whereas PHP is server-side), incorporating it into your pages can save users the hassle of having to submit a form to the Web server, have it checked by PHP, and have the data sent back upon errors. Instead, you can use JavaScript to immediately run through some tests and then, if the data passes, send the form information along to PHP. However, JavaScript does this at the cost of a larger file size for the user to initially download.
I say that JavaScript in itself is not a security measure because it can be easily turned off in a user's browser ...
Get PHP Advanced for the World Wide Web: Visual QuickPro Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.