使用了html5 required，后台还需要做 不为空的验证吗

Question

因为以前是用js做验证，但是别人禁掉js那么不为空的验证就没效了，所以后台也要加不为空的验证

但现在大部分都使用了html5 required了

那么后台还需要做不为空的验证吗？

Answer 1

Users can simulate browser operations and submit illegal data, which can be easily achieved with curl~

Answer 2

Answer 3

There is something called Firebug.

Answer 4

Must be verified before and after. For a user who understands the front-end, he can maliciously attack your website.

Answer 5

The backend still needs to be verified, and the front-end data is never trustworthy

Answer 6

What if I simulate a request?

So I have to add it!

Answer 7

It’s definitely necessary, so I’ll add one more point.
Some mobile versions of WeChat’s built-in browser cannot be used required

Answer 8

Of course you have to add
your review element and then remove required and try

Answer 9

Front-end verification is just for experience, the back-end is the real verification

Answer 10

Front-end verification is mainly for good user experience and fast response, but it is unreliable and can be bypassed; but background verification is the real verification of data legitimacy, so any front-end verification cannot Replaces background verification.