Re: Complicated Question (maybe)?
| From: | Chris | Date: | Tue, 11 Jan 2005 06:09:02 +0000 |
| Subject: | Re: Complicated Question (maybe)? | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-38099@lists.php.net to get a copy of this message | ||
As long as I'm understanding you correctly, this is able to be done with the mysql privileges.
Just create a user that isn't allowed to update that column, then use that user in your PHP code.
The wording of your message makes it look like you're using a webform to specify a columnname-value combination to update int he database. This is inherently insecure.
Chris
JeRRy wrote:
Hi, I have my reasons in asking this. But instead of going on about it I'll make it quick. Is there a way to BLOCK an update to a column in a databasefrom a webform or php page? What I mean is this. A user registers for a site. They enter details like their address, username and etc. I want to BLOCK any possible updates from a webform or php page to the address field. Or even halt any sort of update/modification from mysql to that column but have it possible to unblock by admin. Is this possible? Sure I could refuse an mysql update to do this but I want to lock out everyone to ensure no sneaky activity or changes are made. Is it possible or am I talking too much? J Find local movie times and trailers on Yahoo! Movies. http://au.movies.yahoo.com