Image transcripion: shows a red sign with white text that says “STRICTLY NO ACCESS” mounted on a metal gate. The gate appears to be part of a fence around a park, with trees visible in the background but there is no fence around the gate or anywhere else
(Originally published earlier today on mastodon.social)
There’s a difference between ‘I would rather the user didn’t do that’ and ‘We must not allow this to happen’.
User enters the empty string for their password recovery question? Don’t care. Let the Frontend handle this. If the user is capable enough to disable the frontend validation, they’re capable to remember their password.
User enters SQL as their password recovery question? Validate in the backend.
The issue with your example is that it could be that there was a bug and the user didn’t disable the validation and intend to send an empty string.
@nixCraft
The key-code to open the gate is: 1234@nixCraft they mean for wheelchairs.
Some fat cop in riot gear with mace and baton waiting behind the bushes. Like uh oh, 6 year old. Better use Mace Jr and the little pink nightstick.
@nixCraft window.isAuthenicated = true;
@nixCraft
Reminds me of an “App” me and two of my friends made for an assignment in university :blobfoxblush:It’s a suggestion, and just enough enforcement to stop people from accidentally wandering that way. Who knows, it might actually be a “don’t go this way, there’s something dangerous” kind of thing, or they could have actual security further along.
@nixCraft I generally use this picture to explain client-side security to an unsuspecting audience
Joke’s on them. The number I wanted to dial was 1-999-999-9999.
Whose that number?
