Title: Server side validation and processing?
Last modified: August 21, 2016

---

# Server side validation and processing?

 *  [Noelle](https://wordpress.org/support/users/noelletowlergmailcom/)
 * (@noelletowlergmailcom)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/server-side-validation/)
 * I’m building a government website and they have strict standards for security.
 * They specify that: “validation of user input must occur server-side” and “process
   completion must not rely on client-side scripting or embedded objects”.
 * I can’t find any reference to this in the Contact Form 7 documentation and am
   wondering if someone can confirm this for me before I go ahead and install.
 * The guidelines say:
 * >  **More information**
   > Form validation is to take place on the server regardless of any client-side
   > capacity. Client-side validation can be easily bypassed and some users may 
   > not have client-side script available or enabled in their browser.
   > Client-side validation can be used to supplement server-side validation. Use
   > of client-side validation is encouraged as it can result in more timely feedback
   > to users and a more responsive user experience. It is important to ensure that
   > any client-side validation algorithms are consistent with the definitive server-
   > side validation algorithms.
   > It should also be noted that modal presentation of error messages is strongly
   > discouraged as they are likely to break the user’s train of thought and offer
   > limited opportunity for the user to review the error messages while trying 
   > to address them.
 * and
 * >  **More information**
   > The use of scripting to improve the user experience is encouraged; however 
   > users must be able to complete any process with client-side scripting disabled.
   > Techniques of progressive enhancement support a richer experience without compromising
   > accessibility.
   > This requirement also ensures universal access by all users, browsers and devices(
   > including mobile devices).
 * Thanks!

Viewing 1 replies (of 1 total)

 *  Plugin Author [Takayuki Miyoshi](https://wordpress.org/support/users/takayukister/)
 * (@takayukister)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/server-side-validation/#post-4273478)
 * Contact Form 7 uses server-side validation and can work in environments with 
   client-side scripting disabled. You can go ahead in safety.

Viewing 1 replies (of 1 total)

The topic ‘Server side validation and processing?’ is closed to new replies.

 * ![](https://ps.w.org/contact-form-7/assets/icon.svg?rev=2339255)
 * [Contact Form 7](https://wordpress.org/plugins/contact-form-7/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/contact-form-7/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/contact-form-7/)
 * [Active Topics](https://wordpress.org/support/plugin/contact-form-7/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/contact-form-7/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/contact-form-7/reviews/)

## Tags

 * [server-side](https://wordpress.org/support/topic-tag/server-side/)
 * [validation](https://wordpress.org/support/topic-tag/validation/)

 * 1 reply
 * 2 participants
 * Last reply from: [Takayuki Miyoshi](https://wordpress.org/support/users/takayukister/)
 * Last activity: [12 years, 7 months ago](https://wordpress.org/support/topic/server-side-validation/#post-4273478)
 * Status: not resolved