java - web前台传参已经经过验证了，后台还需要验证么?

Question

MVC架构的web项目

web前台传参已经经过验证了，后台还需要验证么?

如果不需要的话，那我直接通过api调用会绕过你前台的参数验证，这样数据不合法也没关系了，就会出问题，这个你们公司开发的时候是怎么处理的?

比如具体点的springmvc处理的话会需要么

Answer 1

Even if the front-end does not perform verification, the back-end still needs verification. The verification of the front-end is for the user experience and to reduce unnecessary overhead of the back-end. The verification of the back-end is to ensure the security and authenticity of the data. This is related to the language and framework Nothing to do.

This is a scoring question.

Answer 2

The client is not trustworthy

Answer 3

Hey, the answer is yes, the main function of front-end verification is to reduce the number of requests to the server due to incorrect data entry, and some verification rules on the front-end can be modified, while the back-end is the verification of data correctness

Answer 4

Required. Because the front-end data verification is of no use to experienced IT drivers. Therefore, the backend needs to add verification

Answer 5

I hope that all the experts can think more when answering the question. You don’t need the description that others have already answered. You can do this, but please add your own opinions instead of simply answering the same as others. Does this make sense?

Answer 6

The front-end verification is generally based on rules, such as whether your parameters comply with the rules, while the back-end verification is authenticity and whether the data exists