Form Validation-Client and Server Verifying your visitors form submissions Jon Brundage  CF developer/Section 508/web accessibility 

Why validate? Safety protects your database and site Better user experience Makes your site more professional Saves time Less submits and page calls

Two types of Validation Client Via Scripting Javascript most common May be defeated by disabling JS in browser Poses risks but convenient Saves server load Server Via CGI/ASP etc This discussion focuses on the power of CF Can’t be defeated by changes in browser settings Safer but less convenient

Client validation CFFORM Writes Javascript validation for you CFINPUT tag  hotfix.htm hotfix for CFMX hotfix.htm Javascript Write your own Many free scripts available on the Web     (DHTML)

Test for state of scripting on client Inside the FORM tag, add a NOSCRIPT tag with a hidden form field Use Isdefined(form.scriptOff) in action page with a CFIF tag to determine if you need to apply server side validation.

Server validation CF functions CF tags CF custom tags- developers exchange CF structures and arrays

CF STRUCTURE Contain variables called keys Create with a CFSET statement A structure with elements contained in it will have a count similar to query recordcount

CF STRUCTURE cont. Structures may be looped. #formErrors[errorType]#

Using a structure to hold errors as errors encountered, add to structure At the end of processing form errors, display by looping over the structure: #formErrors[errorType]#

Make use of CF functions IsNumeric Verify numeric fields Findoneof Look at characters And others! Use you creativity.

THANK YOU Remember, CF has many tools at your disposal. Have fun, be creative and don’t worry too much about “being right” Many ways to solve problems. Questions/comments-