Re: [phplib] Registering form variables From: Jens Benecke (phplib <email protected>)
Date: 09/12/00

On Tue, Sep 12, 2000 at 11:30:43PM +0200, Maurice Jumelet wrote:

> I'll give an example: Suppose you have an shop with an item shoe (price
> $35)
...
> problem with this is, that you cannot trust the internet user, for a
> malicious user it would be easy to order this shoe for an other price bij
> simply going to
> http://domain.com/order.php3?amount=1&itm_id=1001&price=10
>
> What you should do is use the ID for the product id and lookup up the
> price in your database in the order.php3 script.

Sorry to jump in, but this interests me. What would I do if I have a
multi-page "information collection" tunnel, e.g.

User goes to page1.php
Step 1: enter name & address and press "continue" -> page2.php
Step 2: enter hobbies and travel preferences and press... etc.

etc. I need to allow users to navigate freely via "step 1 .. step n"
buttons on the bottom of the page, forward, first, next, and last buttons,
and a "Finished" button which verifies all entries of all pages and if
errors occured, goes to the specified page, displays a red error message
above the respective input field and lets the user correct it.

The trouble is, I'm told the user must be able to do page 1 -> page 4 ->
page 5 -> page 2 -> page 6, and all information must be preserved. Doing
this with hidden form items is somewhat awkward, can I not use session data
there?

  

-- 
`Man sollte dem Verantwortlichen für ILOVEYOU alles     http://www.linuxfaq.de  
 mögliche antun, aber wahrscheinlich wird bloß       http://www.hitchhikers.de    
 seine Firma zweigeteilt." -- Usenet             http://www.pinguin.conetix.de
  • application/pgp-signature attachment: stored