From: "Stuart Felenstein" <[EMAIL PROTECTED]>

I still want to pass the id's through hidden.

So the html in the first form looks like this:

<input name="hiddenField" type="hidden"
value="recordID">
<input name="hiddenField" type="hidden" value="user
id"></td>

Form is set to post.

Why would you pass UserID in the form when you turn around and pull it from the session in your code? It's a waste.


Also, with the above, if I were to change UserID to 5 (assuming that a valid userID) and recordID to 20 (assuming that's a valid recordID that userID 5 has access to), would I be able to see the record? I shouldn't be...

---John Holmes...

--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to