Javascript coding error - lesson learned
poincare101.blogspot.com
poincare101.blogspot.com
It should be never use client dates. The developers should have sent a server UTC time code to the client and all JavaScript dates should have used that date as there seed. We actually create an extension of the standard JavaScript date in our projects which is seeded off of a server time so the time since epoc comes from the server. Further, they still should not trust the clients data as submitted and check to see if it is in range.