sandy1028 — 2013-10-10T01:32:20-04:00 — #1
spacephoenix — 2013-10-10T02:13:39-04:00 — #2
system — 2013-10-10T05:17:55-04:00 — #3
I don't know how to validate a site's form.
solidcodes — 2013-10-10T13:51:44-04:00 — #4
The question is filter_var is enough?
ralphm — 2013-10-10T18:02:42-04:00 — #5
Yes indeed, as explained above. JS validation is just for convenience (user gets prompted without page refreshes). But the user can turn off JS with the click of a button, and bots can bypass it too. So in terms of security, it's like putting a protective fence around your house by no lock on the gate.