Hi,

Monday, July 5, 2004, 1:27:12 PM, you wrote:
MG> Hello,

MG>     I am working on a web site that is available only over HTTPS and am
MG> using session tracking.

MG> So far I am only saving the person's display name (different then
MG> login), site role and e-mail address in the "$_SESSION" data. 

MG> The rest of the site is dynamic, now the question is on three particular
MG> pages the user fills in a form and hit's submit. Now at the moment on
MG> each page is a hidden variable containing a db primary key for which the
MG> data is getting updated.

MG> I know that hidden values are not a good idea since the user can change
MG> them ... so I was going to store the hidden value in a "$_SESSION"
MG> variable but then the problem is ... what happens when the user has two
MG> - three windows open and they are updating two - three different items.
MG> Each having it's own db key ?

MG> If I stored the key in a session variable the last one opened would over
MG> write any previous one.

MG> I hope I explained this correctly ... multiple updates and access to the
MG> site is allowed and can not be changed.

MG> Thanks.

MG> Michael.


store it in the session like:

$_SESSION[session_id()]['dbkey'] = $dbkey;

then get it back with

$dbkey = (isset($_SESSION[session_id()]['dbkey']))? $_SESSION[session_id()]['dbkey'] : 
0;

-- 
regards,
Tom

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to