From: "Stuart Felenstein" <stuart4m@xxxxxxxxx>
I still want to pass the id's through hidden.
So the html in the first form looks like this:
<input name="hiddenField" type="hidden" value="recordID"> <input name="hiddenField" type="hidden" value="user id"></td>
Form is set to post.
Why would you pass UserID in the form when you turn around and pull it from the session in your code? It's a waste.
Also, with the above, if I were to change UserID to 5 (assuming that a valid userID) and recordID to 20 (assuming that's a valid recordID that userID 5 has access to), would I be able to see the record? I shouldn't be...
---John Holmes...
-- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
