Adobe 38043740 - ColdFusion Standard - Mac Development Manual page 751

DEVELOPING COLDFUSION 9 APPLICATIONS
Requesting and Presenting Information
Validation technique
mask
( attribute)
mask
onBlur
( validateat="onBlur" attribute)
onSubmit
( validateat="onSubmit" attribute)
onServer
( attribute)
validateat="onServer"
Hidden form field
JavaScript
(
onValidate = "function"
attribute)
IsValid function
cfparam tag
tag
cfargument
Features Considerations
Directly controls user input. Limited to
Provides limited control over
user input patterns.
Provides immediate Limited to
feedback if a user enters cftextarea
invalid data. or XML format, requires the
browser to enable JavaScript.
All entered data is available Limited to
to the user; only the invalid
cftextarea
data needs reentering. format, is identical to onBlur.
In HTML or XML format,
validates after all fields have
been entered, and requires
the browser to enable
JavaScript.
Does not require browser Limited to
support.
cftextarea
Does not require browser Limited to forms.
support. Can be used with
HTML or CFML form
elements.
Allows all on-client Limited to specific
processing supported by the ColdFusion form tags. Calls a
browser. Can be used with single JavaScript function.
HTML or CFML form JavaScript levels of support
elements. can vary among browsers,
and users can disable
JavaScript in their browsers.
Can be used for any variable, When used with a form field,
not just form fields. Returns a runs after the data is
Yes or No result that you use submitted. Must be used
to determine further each time a variable needs to
processing. be validated. Provides some
data type checks not
available in forms validation
techniques.
Can be used for any variable, When used with a form field,
not just form fields. The tag the tag runs after the data is
can set a default value in submitted. You respond to
addition to validating data. validation failures using
error-handling code.
Used for arguments to Runs when the function is
functions written using the called on the server. You
tag. respond to validation failures
cffunction
using error-handling code.
Last updated 1/20/2012
Security issues
tags. In HTML and XML format, can be
cfinput
circumvented because JavaScript
runs directly in the browser.
cfinput and In HTML and XML format, can be
tags. In HTML circumvented because JavaScript
runs directly in the browser.
and In HTML and XML format, can be
cfinput
tags. In Flash circumvented because JavaScript
runs directly in the browser.
and Can be circumvented because
cfinput
tags. validation rules are submitted with
the form.
Can be circumvented because
validation rules are submitted with
the form.
Can be circumvented because
JavaScript runs directly in the
browser.
None
None
None
746