Does SmartForms validation use server-side validation or client-side?
SmartForms uses Frontend validation, your form can be modified on the frontend to remove elements or validation rules and will submit the modified responses to your email.
Thank you for such a speedy response. Is the validation logic kept in a .js file kept client-side or sent to a REST endpoint on the SmartForms server?
SmartForms works by adding the following attributes to the <form> tag on your site:
| attribute | what it stores |
|---|---|
| data-bss-recipient | This is an id that relates to your email address held by Bootstrap Studio on their SmartForms backend. |
| data-bss-subject | Stores what the title of your email will be when it is sent to you. |
Once you click on a Submit button for your form, the SmartForms JS will look at each field in your form, extracts the input names, for instance: name="email address" and then builds a response in JSON that is submitted to Bootstrap Studios SmartForms backend. It then looks up your email from your email ID and posts you the responses.
The Bootstrap Studio backend does not know what form fields you have, so you cannot implement bullet proof validation.
In short, SmartForms does not offer any actual validation at all and relies solely on the visitors browser based validation, such as making sure all fields with the required tag are filled in, but SmartForms cannot stop users using Inspect Element to remove the required tag and still submit the form to your email.
I hope this information helps
1 Like