Welcome Guest, Not a member yet? Register   Sign In
Updating Data, Getting User ID?
#4

[eluser]CroNiX[/eluser]
Just a security concern with that, which may or may not apply to you. If you are passing along the user_id in your form and using that to update your records, it means that anyone with access to that form can change that user_id value in the form and overwrite stuff they may not, or should not, have permission for.

If you are using some sort of authentication where you are logging people in and storing the current user's data in session, I would use that data for retrieving the current users user_id instead of passing it around in a form, unless it doesn't apply to your case. All form/post values can be manipulated by the user using the browsers javascript console, among other ways, before submitting the form.


Messages In This Thread
Updating Data, Getting User ID? - by El Forum - 10-02-2013, 08:57 PM
Updating Data, Getting User ID? - by El Forum - 10-03-2013, 07:19 AM
Updating Data, Getting User ID? - by El Forum - 10-03-2013, 10:26 AM
Updating Data, Getting User ID? - by El Forum - 10-03-2013, 12:24 PM
Updating Data, Getting User ID? - by El Forum - 10-04-2013, 08:52 AM
Updating Data, Getting User ID? - by El Forum - 10-04-2013, 09:13 AM
Updating Data, Getting User ID? - by El Forum - 10-04-2013, 01:50 PM
Updating Data, Getting User ID? - by El Forum - 10-04-2013, 05:02 PM



Theme © iAndrew 2016 - Forum software by © MyBB