RE: [PHP-DB] Pay Slips
| From: | Matt Schroebel | Date: | Fri, 25 Apr 2003 13:13:01 +0000 |
| Subject: | RE: [PHP-DB] Pay Slips | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-27350@lists.php.net to get a copy of this message | ||
> -----Original Message-----
> From: Gavin Nouwens [mailto:gnouwens@zip.com.au]
> Sent: Friday, April 25, 2003 9:05 AM
> To: 'Achieve IT'; php-db@lists.php.net
> Subject: RE: [PHP-DB] Pay Slips
>
>
> Hi Declan,
>
> As a suggestion, producing the payslip in a pdf format or
> similar would
> be a good idea as it further reduces the chance of it being
> edited/altered.
>
> The e-mail idea is definitely an idea worth looking into!
>
> I'd be keen to know what you come up with!
>
> -gav.
The email attachment would have to be password protected, and encrypted
for confidentiality purposes. It seems to me that there are lots of
uncomfortable thoughts about the use of email combined with the word
confidentiality. There's lots of evil things that can be done with
aliases, and the like.
The solution that comes to my mind is to store the data in a db, with
restricted access to users own pay account, and producing a html or pdf
paystub using ssl/https. Also some robust security checks are in order
before implementation. Then the confidentiality falls on the employee
when they choose to print it.