Re: Session tracking and multiple form updates

Hi, Monday, July 5, 2004, 1:27:12 PM, you wrote: MG> Hello, MG> I am working on a web site that is available only over HTTPS and am MG> using session tracking. MG> So far I am only saving the person's display name (different then MG> login), site role and e-mail address in the "$_SESSION" data. MG> The rest of the site is dynamic, now the question is on three particular MG> pages the user fills in a form and hit's submit. Now at the moment on MG> each page is a hidden variable containing a db primary key for which the MG> data is getting updated. MG> I know that hidden values are not a good idea since the user can change MG> them ... so I was going to store the hidden value in a "$_SESSION" MG> variable but then the problem is ... what happens when the user has two MG> - three windows open and they are updating two - three different items. MG> Each having it's own db key ? MG> If I stored the key in a session variable the last one opened would over MG> write any previous one. MG> I hope I explained this correctly ... multiple updates and access to the MG> site is allowed and can not be changed. MG> Thanks. MG> Michael. store it in the session like: $_SESSION[session_id()]['dbkey'] = $dbkey; then get it back with $dbkey = (isset($_SESSION[session_id()]['dbkey']))? $_SESSION[session_id()]['dbkey'] : 0; -- regards, Tom