On Tue, Mar 01, 2005 at 17:53:30 -0800,
operationsengineer1@yahoo.com wrote:
>
> frank, i didn't mention it, but i do validate the data
> using javascript. i will eventually add in regular
> expressions, too, but that's down the road a bit.
While that is OK in some uses, in general you shouldn't be trusting data
validated by the client. You can use that to save a round trip, but the
data should be validated by the server as well.