Re: Validation after HREF link clicked

[Alfredo Delgado <adelgado@xxxxxxxxxxxxxxxxx>]

Kent, you couldn't output a flag to the client and only rely on that if 
you want it to be secure. Once it's on the client a user can edit the flag.

How about you don't output the link if the user isn't authorize to view 
the details? Even then, the code/pages you're linking to should check 
that the request is from an authorized user otherwise an authorized user 
can share a link with an unauthorized user.

As far as disabling a link on the client side, you can set an onclick 
event listener to return false and that'll stop the browser from 
completing its actions. Here's on way to do that: <a href="foo.html" 
onclick="return false;">bar</a>

I hope this helps.

Alfred

Kent Hohlen wrote:

> Is there a way to do some validation after the user clicks a link but before
> the browser opens the link?
>
> What I want to do is show a list of "items".  Each "item" has a link to a
> detail view about that "item".  While the list is being built, I will flag
> each "item" if the user is authorized to view the detail for each "item".
> When the user clicks the detail link, I want to check the flag to see if
> they are authorized.  If they are, show the detail, if not, show a message
> box.
>
> Is there a way a way for JavaScript or something else to be executed when
> the link is clicked?
>
> TIA.
>
> Kent Hohlen
> Eagle Window & Door
>