Another question.
Should I have both form validation from client side and server side? One of my network guy told me that I should have client side and server side validation to prevent from hacker. If so I can know how to do on client side by javascript. How do I do on server side?
Again Thanks All Helps!!!

You can use some ASP validation functions in the language u use for ASP scripting (similar to functions on the client side).
Client side script prevent user's browser to send a form to the server if form fields aren't appropriate filled. In order to check form fields you can write javascript validation code, and prevent user to submit the form without the validation.
However, user can disable javascript functions for his browser, and in this case your client-side validation routines will not be executed, and user can submit the form w/o validation. That's the reason why you need server side validation if the fields validation is important to your app.


...but the Soon is eclipsed by the Moon