Re: MySQL Query
| From: | David Eisenhart | Date: | Wed, 05 Mar 2003 10:47:02 +0000 |
| Subject: | Re: MySQL Query | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-138249@lists.php.net to get a copy of this message | ||
If I understand your requirement correctly I would say that you are looking
in the wrong place to protect particular table fields from the user; the
user gets access to the underlying database only through your 'application'
pages (ie. your php pages) - it is your coding of these pages that
determines what the user can not and can not do in the underlying database
(ok, the database permissions also serve this kind of function, but as you
are talking about (dis)allowing editing of certain fields within particular
tables this will be determined by your 'application logic' as mentioned
above)
Hope this helps
David Eisenhart
"Shaun" <shaun@mania.plus.com> wrote in message
news:20030305003327.54601.qmail@pb1.pair.com...
> Hi,
>
> Is there a way of updating a table so that I can add some sort of
identifier
> to each field, something as simple as x=1 will do. I want to be able to
> modify the table so I can set a variable for each column so I can tell
> whether I can let a user modify that field. If I modify the fieldname then
> the web application wont work. The purpose of this is to create a content
> management system that will allow me to set which fields are editable by
the
> user. I don't want to add another field to each table because I want the
> system to be as portable and pluggable into other web sites as possible.
>
> Any ideas would be greatly appreciated.
>
> Thanks
>
>