Free! - Secure - Dreameaver Record Update Wizard Support
If you use the Dreameaver Record Update Wizard on a membership site - Look out!
Scenario, you have classified ads website where users can update their ads or their user profiles.
Dreamweaver uses a hidden form variable for associated Primary Key
Since it's a hidden variable:
- a user can download the page and change it.
- use Firefox with the Web Developer Toolbar and change it right on the site
View
Size: 6.29
Date Created: 2006-01-08
Overview
Before starting this tutorial you should have a PHP page with
- a detailed recordset, defined by a session variable:
- $_SESSION['MM_Username']
- not a query string
This tutorial uses PHP however the methods and procedures are the same for ASP VB Script/ JavaScript
Chief software architect at SimpleTick.com
SimpleTick is an ASP.Net e-Ticketing Application.
You can install SimpleTick on any Windows 2008 server.
If you are a PHP guru - have no fear. SimpleTick works well with WebHooks. SimpleTick is written in C#.
There's an open source version!
See All Postings From Aron K >>
Reviews
Easy Way
According to me the easy way is to store the user ID on a session variable when the user log in and use this session variable on Dreameaver Record Update.
RE: Easy Way
Right, that would be similar to solution A
Updating records
I see how this helps if you are updating a users details, once they have logged in and can call on their Username, but how does this help with ordinary records, which have an ID..? and which your scenario points to..?
Are you recommending creating a Session everytime you move from a record list to the record update page..?
RE: Updating records
You really only need to do this in an application were you have "users" updating records.
ie
Classified Ads site: users updatng their ads
Portal, like DMX Zone: users updatng their profile
You must me logged in to write a review.
