Why client-side verification is bad

Re:Why client-side verification is bad by chris_engel on Wednesday July 06, 2011 @04:12AM (#2732967)

This is obvious, isn't it?! Everything the user has access to can be manipulated.

[ Parent | on HN ]

Re:Why client-side verification is bad by wladimir on Wednesday July 06, 2011 @04:25AM (#2732999)

You'd be surprised how many applications and web sites still rely solely on client-side validation, even these days. Either don't think at all about threat scenarios ,or they trust their "Do not reverse engineer" EULA to protect them :-)

[ Parent | on HN ]

Re:Why client-side verification is bad by chris_engel on Wednesday July 06, 2011 @04:47AM (#2733044)

wow, I suppose we shouldn't begin to talk about sql sanitation...

[ Parent | on HN ]