html - How to disable specific CSS styles from Firebug/IE developer tool -
i have following html code:
<input type="text" value="test value" readonly/>
this input element non-editable since has readonly
attribute. it's still possible make field editable inspecting element using firebug tool in firefox. there way make attribute non-editable?
this not possible. find way around because code executed on client. if secured client (web browser) there still way post , tamper read-only fields using proxy server fiddler. have 2 choices.
1)remove item field list , make text element. valid solution if don't need information in post.
2) keep item read (or hidden) check content has not changed on server side. best security practice anyway. should validate on server if validate on client. reason people can work aound client side validation. there different approaches server side validation according end language. in case, if using php or asp.net, can stick value in session variable before serve page , check posted value against session value when form submitted.
Comments
Post a Comment