I’ve provided two discussions about Validation Page that need to be responded separately.
After watching the video, “Form validation with JavaScript” and reading the assigned materials for this week, elaborate on the importance of including validations on your login and registration pages. Include examples of when you might not need validations.
Validations should be included in the Login page to avoid user providing any kind of input and also to display user-friendly error messages to make the user understand the exact which is blocking the form submission. There are a few important validations which should be included.
1) Check for Empty input in a User name or Password field :
A user may click on submit without providing any input in the username or password. Javascript validation should catch this issue and alert the user. If the form is submitted without validating the login or registration page, then the form will be submitted to the server and error will be returned from the server.
2) Username should accept alphanumeric characters: User may provide a user name which is a combination of numbers and characters. If the input field accepts the only character, then the form cannot capture complete username. Validation should be added to ensure form accepts alphanumeric characters
3) Password and Repeat Password fields should match: In the registration page, the user may create own password. However, the user might provide different values in Password and Repeat Password. Validation should be in place to ensure both the fields match.
4) Email ID format for Registration page: Validation should be in place to ensure that email id provided by the user is in the correct format. Else user may provide a dummy value for email id and this may lead to fake registrations.
5) Validation in the client side should not check whether the username and password are correct. The user account verification will be done in the server. Javascript and HTML should be used to validate if any valid input is provided in all the required form fields while registering and logging in.
References
1) https://www.the-art-of-web.com/javascript/validate…
2) https://www.smashingmagazine.com/2009/07/web-form-…
D-2)Importance of Validations on Login and Registration Pages
Form validation is important on login and registration pages as it helps us to ensure that users fill out forms in the correct format, making sure that submitted data will work successfully with our applications.
The importance of validations are described as follows:
- Whitelist based form validation ensures appropriate data is received from web page.
- It protects user accounts and confidential information.
- Proper form validation prevents web form abuse by malicious users. However, improper form validation leads to security vulnerabilities and attacks like header injections, cross-site scripting, and SQL injections. Header injection attacks are used to send email spam from web server, cross-site scripting enables attackers to publish any data to web site and SQL injection will corrupt backend database of web site.
Examples of when you might not need validations:
Form validation are commonly bypassed or constraints are reduced in the registration pages where server side validations are used evaluate user inputs. When cardinality of input fields are not known and all input data is required to capture, like designation, role etc.
Reference:
Ferdinandi, Chris (2017, Jun 26). Form Validation Part 1: Constraint Validation in HTML.
Retrieved from https://css-tricks.com/form-validation-part-1-constraint-validation-html/
Syronex(2019). Form Validation. Retrieved from https://formsmarts.com/form-validation
