Doing it in Javascript, it can be maliciously tampered with. Doing it server-side, it cannot. There's no advantage to doing it twice, but doing it twice will make your application more confusing to...
You should be fine, as long as cleaning the string is the first thing you do in PHP. If you filter the string in JavaScript, a malicious user could edit the HTML (or use a tool like Firebug to alter...
Well, I guess it falls into two categories:
1. SQL - how to design the data model, and how to write the most efficient queries to return information stored in that model by performance tuning of...
If you do HTTP POST, can you clean the input in PHP? Maybe PHP's strip_tags function? Some of the comments in the PHP wiki doc (bottom of this page) may help:...
Try changing the onclick method to do an alert dialog of the group1 value. That lets you see what the current value is, and you can compare the value to button1, 2, 3 or whatever it is before any of...
Here's some example Javascript. To make a popup work, it uses a piece of HTML and CSS as well, but it sounds like the Z-index is your only problem. The important piece here is "ie6HackMouseOver(o)"...
You'll need to display an iframe under the popup regions of the list. It's the only fix I know of to stop select-tag input boxes from appearing above the text. Let me dig out some example code.
You could have two <input type="hidden"> tags, and have the submit button have an onclick function that splits the <select> statement's selected value into two parts, saving those parts into the...