Zenith
|
| Posted: 04/14/2002, 7:27 PM |
|
Hi, thanks to Richi Nivello i've been able to create a regform correctly.
My next question is:
When a users submits the regform, i'd want them to get an overview of what
they just submitted. I decided that the standard registrationview.php from
codecharge would be usefull. But somehow that page won't remember the values
that registration.php had.
For instance, the username field is unique, so when the user submits i want
my form to open registrationview.php with al the details that belongs to
"username". Untill now, the registrationview.php opens, but with no details
at all.
Codecharge generates a Default.php where you can login and find users in
your database by typing a username.Even this searchoption won't find the
users in the database. Its not really important for me that this search
option works, but it might have something to do with the fact that my form
doesn't remember values.
Any ideas?
Grtz, Zenith
|
|
|
 |
Alexey Alexapolsky
|
| Posted: 04/15/2002, 2:15 AM |
|
At registrationview.php you should obtain ID of last inserted record.
This can be done in Page/Open event via mysql_insert_id() function.
Other databases have their own functions. Then this page redirects to
itself with specified parameter , e.g.
$id = mysql_insert_id();
header("Location: registrationview.php?id=$id")
Provided that "id" is the name of Input variable specified in Grid
Form/Input tab in
registrationview page , a proper information should be displayed.
--
Alex
CodeCharge Developer
"Zenith" <webmaster@countzero.net> wrote in message
news:a9ddps$ng3$1@news.codecharge.com...
> Hi, thanks to Richi Nivello i've been able to create a regform correctly.
>
> My next question is:
> When a users submits the regform, i'd want them to get an overview of what
> they just submitted. I decided that the standard registrationview.php from
> codecharge would be usefull. But somehow that page won't remember the
values
> that registration.php had.
>
> For instance, the username field is unique, so when the user submits i
want
> my form to open registrationview.php with al the details that belongs to
> "username". Untill now, the registrationview.php opens, but with no
details
> at all.
> Codecharge generates a Default.php where you can login and find users in
> your database by typing a username.Even this searchoption won't find the
> users in the database. Its not really important for me that this search
> option works, but it might have something to do with the fact that my form
> doesn't remember values.
> Any ideas?
>
> Grtz, Zenith
>
>
>
|
|
|
|
Zenith
|
| Posted: 04/15/2002, 7:39 AM |
|
I'v tried that, but somehow i always get the same errors.
Warning: MySQL: A link to the server could not be established in c:\program
files\apache group\apache\htdocs\test\registrationview.php on line 38
Warning: Cannot add header information - headers already sent by (output
started at c:\program files\apache
group\apache\htdocs\test\registrationview.php:38) in c:\program files\apache
group\apache\htdocs\test\registrationview.php
Meanwhile i'v found a way to obtain the correct info when filling in the
userID behind the URL (http://localhost/test/registrationview.php?user_id=7)
But this isn't secure ofcourse. People wil see this URL and wil try other
user id's so they can look into other users profiles.
Is there a way to hide the userID in the URL?
And protect this function?
"Alexey Alexapolsky" <alexa@codecharge.com> schreef in bericht
news:a9e5mn$1ej$2@news.codecharge.com...
> At registrationview.php you should obtain ID of last inserted record.
> This can be done in Page/Open event via mysql_insert_id() function.
> Other databases have their own functions. Then this page redirects to
> itself with specified parameter , e.g.
>
> $id = mysql_insert_id();
> header("Location: registrationview.php?id=$id")
>
> Provided that "id" is the name of Input variable specified in Grid
> Form/Input tab in
> registrationview page , a proper information should be displayed.
>
> --
> Alex
> CodeCharge Developer
>
>
> "Zenith" <webmaster@countzero.net> wrote in message
>news:a9ddps$ng3$1@news.codecharge.com...
> > Hi, thanks to Richi Nivello i've been able to create a regform
correctly.
> >
> > My next question is:
> > When a users submits the regform, i'd want them to get an overview of
what
> > they just submitted. I decided that the standard registrationview.php
from
> > codecharge would be usefull. But somehow that page won't remember the
> values
> > that registration.php had.
> >
> > For instance, the username field is unique, so when the user submits i
> want
> > my form to open registrationview.php with al the details that belongs to
> > "username". Untill now, the registrationview.php opens, but with no
> details
> > at all.
> > Codecharge generates a Default.php where you can login and find users in
> > your database by typing a username.Even this searchoption won't find the
> > users in the database. Its not really important for me that this search
> > option works, but it might have something to do with the fact that my
form
> > doesn't remember values.
> > Any ideas?
> >
> > Grtz, Zenith
> >
> >
> >
>
>
|
|
|
|
Alexey Alexapolsky
|
| Posted: 04/16/2002, 2:28 AM |
|
You may passed encrypted user_id and decrypt it at Page/Open event,
it's available in $HTTP_GET_VARS array.
--
Alex
CodeCharge Developer
"Zenith" <webmaster@countzero.net> wrote in message
news:a9eom6$5ro$1@news.codecharge.com...
> I'v tried that, but somehow i always get the same errors.
>
> Warning: MySQL: A link to the server could not be established in
c:\program
> files\apache group\apache\htdocs\test\registrationview.php on line 38
>
> Warning: Cannot add header information - headers already sent by (output
> started at c:\program files\apache
> group\apache\htdocs\test\registrationview.php:38) in c:\program
files\apache
> group\apache\htdocs\test\registrationview.php
>
> Meanwhile i'v found a way to obtain the correct info when filling in the
> userID behind the URL
(http://localhost/test/registrationview.php?user_id=7)
> But this isn't secure ofcourse. People wil see this URL and wil try other
> user id's so they can look into other users profiles.
> Is there a way to hide the userID in the URL?
> And protect this function?
>
>
> "Alexey Alexapolsky" <alexa@codecharge.com> schreef in bericht
>news:a9e5mn$1ej$2@news.codecharge.com...
> > At registrationview.php you should obtain ID of last inserted record.
> > This can be done in Page/Open event via mysql_insert_id() function.
> > Other databases have their own functions. Then this page redirects to
> > itself with specified parameter , e.g.
> >
> > $id = mysql_insert_id();
> > header("Location: registrationview.php?id=$id")
> >
> > Provided that "id" is the name of Input variable specified in Grid
> > Form/Input tab in
> > registrationview page , a proper information should be displayed.
> >
> > --
> > Alex
> > CodeCharge Developer
> >
> >
> > "Zenith" <webmaster@countzero.net> wrote in message
> >news:a9ddps$ng3$1@news.codecharge.com...
> > > Hi, thanks to Richi Nivello i've been able to create a regform
> correctly.
> > >
> > > My next question is:
> > > When a users submits the regform, i'd want them to get an overview of
> what
> > > they just submitted. I decided that the standard registrationview.php
> from
> > > codecharge would be usefull. But somehow that page won't remember the
> > values
> > > that registration.php had.
> > >
> > > For instance, the username field is unique, so when the user submits i
> > want
> > > my form to open registrationview.php with al the details that belongs
to
> > > "username". Untill now, the registrationview.php opens, but with no
> > details
> > > at all.
> > > Codecharge generates a Default.php where you can login and find users
in
> > > your database by typing a username.Even this searchoption won't find
the
> > > users in the database. Its not really important for me that this
search
> > > option works, but it might have something to do with the fact that my
> form
> > > doesn't remember values.
> > > Any ideas?
> > >
> > > Grtz, Zenith
> > >
> > >
> > >
> >
> >
>
>
|
|
|
|
Erik Slooff
|
| Posted: 04/18/2002, 12:49 AM |
|
Hi,
Wouldn't this be a security risk? User can change the value of the variable
in the URL and that way see all data from the table. Wouldn't it be better
to set a session variable and send the user to a new page where the session
variable is "required input"?
Just my 2 cts,
Erik
"Alexey Alexapolsky" <alexa@codecharge.com> wrote in message
news:a9e5mn$1ej$2@news.codecharge.com...
> At registrationview.php you should obtain ID of last inserted record.
> This can be done in Page/Open event via mysql_insert_id() function.
> Other databases have their own functions. Then this page redirects to
> itself with specified parameter , e.g.
>
> $id = mysql_insert_id();
> header("Location: registrationview.php?id=$id")
>
> Provided that "id" is the name of Input variable specified in Grid
> Form/Input tab in
> registrationview page , a proper information should be displayed.
>
> --
> Alex
> CodeCharge Developer
>
>
> "Zenith" <webmaster@countzero.net> wrote in message
>news:a9ddps$ng3$1@news.codecharge.com...
> > Hi, thanks to Richi Nivello i've been able to create a regform
correctly.
> >
> > My next question is:
> > When a users submits the regform, i'd want them to get an overview of
what
> > they just submitted. I decided that the standard registrationview.php
from
> > codecharge would be usefull. But somehow that page won't remember the
> values
> > that registration.php had.
> >
> > For instance, the username field is unique, so when the user submits i
> want
> > my form to open registrationview.php with al the details that belongs to
> > "username". Untill now, the registrationview.php opens, but with no
> details
> > at all.
> > Codecharge generates a Default.php where you can login and find users in
> > your database by typing a username.Even this searchoption won't find the
> > users in the database. Its not really important for me that this search
> > option works, but it might have something to do with the fact that my
form
> > doesn't remember values.
> > Any ideas?
> >
> > Grtz, Zenith
> >
> >
> >
>
>
|
|
|
|
|
