in reply to 3Re: Do I have to untaint all user input in a form?
in thread Do I have to untaint all user input in a form?
...but i still think that JS validation is waste of my time and my client's money.
I haven't used it, but CGI::FormBuilder looks like an easy way to automatically generate (in JavaScript) at least some of the client side validation and then do the server side validation (at least for the supported types of fields). It is supposed to easily plug into HTML::Template and Template-Toolkit.
|
|---|