Let's consider a simple scenario: A create album button is used to input album data into the database.
- I disable the button while the request is being processed, then re-enable it upon completion.
- Once the processing is finished, the user can repeatedly click the button and potentially add duplicate information to the database. Would it be advisable to compare the album title, for instance, in order to prevent this?
If the button is disabled on the client side using JavaScript, wouldn't it be possible for someone to bypass this security measure by modifying the code through tools like Firebug?
Are any safeguards implemented on the client side truly secure (particularly in regard to disabling buttons or overlaying a div
on the page to block additional clicks)?