The javascript function formValidator() must return false if any
errors are formed.

>>The PHP only runs if the fields are set by testing using ‘isset”.
You should definitely have a better validation than that. Remember
that all users dont have javascript enabled. Moreover it is very easy
to modify the request variables.

>> However, if the server-side evaluation fails and the page is refreshed, then 
>> all the previous values are lost -- UNLESS -- you keep them in a cookie, 
>> database, or session. I suggest using a session.
This is true when the page is refreshed but I doubt that is the case
here. Since $_SERVER['PHP_SELF'] is being used I think value="<?php
echo $_POST[...] ?>" will be sufficient

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to