输入验证在哪里属于MVC应用程序？ [英] Where does input validation belong in an MVC application?

问题描述

我有一个MVC应用程序接收来自表单的输入。

这是一个登录表单，所以唯一必要的验证是检查输入是否为非空。

现在我把它传递给模型之前，我在控制器中验证它。

这是最好的做法吗？它属于模型？

I have a MVC application that receives an input from a form.
This is a login form so the only validation that is necessary is to check whether the input is non-empty.
Right now before I pass it to the model I validate it in the controller.
Is this a best practice or not? Does it belong to the model?

推荐答案

我不认为有一个官方最佳实践限制验证的任何单一部分MVC模式。例如，您的视图可以（并且应该）使用Javascript进行一些预先验证。您的控制器还应提供相同类型的验证，以及更多与业务逻辑相关的验证。该模型还可以提供验证的形式，即，设置器不允许空值。

I don't think there's an official best practice limiting validation to any single part of the MVC pattern. For example, your view can (and should) do some up-front validation using Javascript. Your controller should also offer the same types of validation, as well as more business-logic related validation. The model can also offer forms of validation, i.e., setters not allowing null values.

这有一个有趣的讨论 at joelonsoftware 。

这篇关于输入验证在哪里属于MVC应用程序？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！