[TYPO3-core] RFC #9553: Bug: Form validation script jsfunc.validateform.js sometimes fails in IE

[Dmitry Dulepov]

Hi!

Vladimir Podkovanov wrote:
> Yes, I think it is good way and IMHO it should be configurable from 
> content element and in FORM cObj - choosing client side processing, 
> server side processing or both should be used.

Server side processing must be always used. Client side is an addition, it can be switched off. But server side cannot and must not be switched off. This is security measure. It is possible to send form data using even telnet. If there is no server side checks, there is a big security risk for the system.

-- 
Dmitry Dulepov
TYPO3 Core team
My TYPO3 book: http://www.packtpub.com/typo3-extension-development/book
In the blog: http://typo3bloke.net/post-details/iphone_as_productivity_tool/