I have about 20 client websites who send their data via forms to my web server for database storage and other processes. Right now all the processing code is in a file on each of their servers, but I'd rather have the processing code on my server so that I will not have to update each of their files when I add/subtract code from the processing script.
That being said, I decided to use fsockopen to POST the form data to my server. Should I do the server side validation on my server or validate on their servers before sending the data? Also, any concerns about my new idea to have the processing script in one centralized location?
Thanks for the reply. I guess I'll do it in both places then. Some of my clients forms are different than other client forms, so the variables coming in will differ. That's why for sure I want to do validation on their server first to make sure we don't have to open a connection if the data is invalid. Once it makes it through the first validation process on their server, then I guess I'll send the data over to my server for another round of validation, database storage, other processes such as email, then finally return the results back to the client's server and show a success page.
Any other helpful tips about what I'm thinking of doing would be very helpful. I want to get this all done right so that I don't have to spend time in the future redoing this stuff!