validation.md

Server-side Validation Discussion

1. What is server-side validation?
2. How can server-side validation help prevent security vulnerabilities?
3. What is the role of client-side validation?
4. If we have client-side validation, why do we even need a server-side validation?
5. How does the express-validator package simplify server-side validation in Node.js applications?

Cansu, Mohammad, Motaz

1. Server-side validation, also known as server-side form validation, is a process of validating user input on a web application's server-side, rather than on the client-side. It involves checking and validating user-submitted data on the server before processing it or storing it in a database.
2. server-side validation is an essential security measure in web applications that helps prevent security vulnerabilities, protects against attacks, and ensures the integrity and accuracy of user-submitted data:
   1. Data integrity
   2. Input validation
   3. Business rule validation
   4. Error handling
   5. Defense in depth
3. Client-side validation is a process of validating user input on the client-side, typically within a web browser, before data is submitted to the server for processing. It involves using JavaScript or other client-side scripting languages to validate data entered by users in web forms or other input fields.
4. Client-side validation can provide immediate feedback to users and help improve user experience in web applications, it is not sufficient on its own for ensuring security and data integrity.
5. express-validator package simplifies server-side validation in Node.js applications by providing a comprehensive set of validation functions, error handling, sanitization, and customization capabilities. It integrates seamlessly with Express middleware and allows you to create robust and secure validation logic for your application with ease.

1. Server-side validation is a process that checks the validity of user input on the server.
2. with validation we enforce the user to input a valid data, and prevent him form input string instead number for example.
3. client-side validation check the validity of the user input in the client side without communicating with the server(email typography validation for example).
4. with server side validation we wrote the validation rules in one place for all the clients (web browser, mobile)
5. we don't know :)

@MuhammedHasan