From: "Stuart Felenstein" <[EMAIL PROTECTED]>

I still want to pass the id's through hidden.

So the html in the first form looks like this:

<input name="hiddenField" type="hidden"
<input name="hiddenField" type="hidden" value="user

Form is set to post.

Why would you pass UserID in the form when you turn around and pull it from the session in your code? It's a waste.

Also, with the above, if I were to change UserID to 5 (assuming that a valid userID) and recordID to 20 (assuming that's a valid recordID that userID 5 has access to), would I be able to see the record? I shouldn't be...

---John Holmes...

PHP Database Mailing List (
To unsubscribe, visit:

Reply via email to