On Sat, 30 Nov 2013, Andrew Brunner wrote:
On 11/30/2013 02:08 AM, Martin Schreiber wrote:
How MSEifi-remote works: -
That's not how it *should* be done. Any logic code that can be executed
should be executed by way of the client. If you use HTTPS as the transport
mechanism, you can assume code is secure and just execute it.
The more server off-loading the better. Data submission is important and
validation should be done on the client side with some framework safety
checks before posting transactional data to the backend-database.
I don't think Lazarus should follow this particular mantra.
Exactly.
Michael.
--
_______________________________________________
Lazarus mailing list
[email protected]
http://lists.lazarus.freepascal.org/mailman/listinfo/lazarus