Server-Side vs.

Client-Side Execution and

Validation
In a modern client/server environment, data can be checked for
compliance
with input/output requirements either on the server or on the client.
There are
advantages to verifying data elements on a client before sending them
to the
server—namely, efficiency. Doing checks on the client saves a round
trip,
and its delays, before the user is alerted to a problem. This can improve
the
usability of software interfaces.
The client is not a suitable place to perform any critical value checks or
security checks. The reasons for this are twofold. First, the client can
change
anything after the check. Second, the data can be altered while in transit
or at
an intermediary proxy. For all checks that are essential, either for
business
reasons or for security, the verification steps should be performed on
the
server side, where the data is free from unauthorized alterations. Input
validation checks can be safely performed only on the server side.
EXAM