Client code can be changed

greg — Thu, 11 Sep 2008 16:24:24 +0000

Client code can be changed by clients, server side can only be changed by hackers who would likely get into your server anyway, regardless.

Which is why I have form validation done with PHP. Regardless of what, or how, they send data to the process page, the PHP ensures it is all acceptable data.

IMO, if you have time to do

Greg K — Thu, 11 Sep 2008 02:03:01 +0000

IMO, if you have time to do it, have both Client-Side and Server-Side

-Greg

Yeah, I am working on a site

decibel.places — Thu, 11 Sep 2008 01:46:13 +0000

Yeah, I am working on a site that has to be section 508 accessible, therefore NO JS - but for quick client stuff, usually I go with JS (keep the server reqs down)

Fantastic! Works like a ..

greg — Wed, 10 Sep 2008 21:40:34 +0000

Fantastic! Works like a .. well, a bit of php code that works.

Thanks Greg.

(thanks debical too, your solution would have been great had I been able to use JS)

Try this: if

Greg K — Wed, 10 Sep 2008 19:23:03 +0000

Try this:

if (preg_match('/\s{2}/',$_POST['inputname'])) {
  echo "There was muliple whitespaces together";
}
else {
  echo "You are good to go";
}

the \s tells it any whitespace character, the {2} tells it repeated twice.

-Greg

Thanks, but I was hoping for

greg — Wed, 10 Sep 2008 15:04:44 +0000

Thanks, but I was hoping for a PHP method (I should have perhaps stated that).
I can't use JS for security checking as my form checking scripts don't issue any output to the users browser, just determine if all ok do else send back to form with error.

Thanks anyway though

wouldn't this work?
decibel.places — Mon, 08 Sep 2008 23:54:52 +0000

wouldn't this work?

`<script type="text/javascript"> if(yourstring.indexOf(" ") || (yourstring.substring(0,2) == " ")){ alert("you typed a doublespace!"); getelementbyid('formelementid').focus(); } </script>`

the substring test is if the string starts with the doublespace...

checked it:

`<html> <body> <script type="text/javascript"> var str = " Hello world!"; if (str.indexOf(" ") || str.substr(0,2) == " ") alert('bingo'); </script> </body> </html>`