Forums

This topic is locked

Problems with ID Login

Posted 29 Oct 2001 15:21:05
1
has voted
29 Oct 2001 15:21:05 Ricardo Ribeiro posted:
Hi...

When using UD4 user login system I'm facing a problem: driving the user for his details page goes fine. But if the user changes the ID in the URL line, then he goes straight to another user record and he actually can change other people data.

Anyone had this problem?

Replies

Replied 29 Oct 2001 19:29:47
29 Oct 2001 19:29:47 Joel Martinez replied:
don't use the "GET" method on the form that takes you there... use the "POST" method.

ie. &lt;form <b>method="POST"</b> action=....

This hides the information from the user, but still gives the script access to the value.

request.form("ID" as opposed to request.querystring("ID"

Joel Martinez [ ]
----------
E-Commerce Concepts with Ultradev...pre-order yours at
www.basic-ultradev.com/ecomm_concepts/

Reply to this topic