I'm really starting to like the idea of three stage validation, validating on blur where possible, on submit where supported and then of course on the server as a backstop for users without Javascript and/or with malicious intent. There is a framework designed to make it easy to create on-blur validations and while it isn't exactly how I want to work, I think it's close enough that my first jQuery plug-in may well be based on this concept, although with support for a validation to be described once and then run both on blur and on submit.

Thoughts?

One of the biggest issues with developing sites is finding the most efficient ways of quickly prototyping sites. I just saw a posting about a new framework designed to quickly prototype AJAXy effects. The framework really doesn't quite fit what I'm trying to do, but it's an interesting approach.

I *still* haven't had a moment to fire up JQuery, but this looks like something to check with the AJAX framework guys to confirm if it is an issue and when a patch might be released for your framework of choice . . .

I didn't find the sample attack scenario to be sufficiently detailed to get my head around the actual level of concern this should evoke. Perhaps someone who's played with JS a little more than me might like to comment?