if use option "a", i wouldn't access my database... CMIW :) or you have another plans to access database via javascript? ( FYI, i run MySQL v4.0.24-10 with PHP v4.3.10-15 @ Debian linux ) maybe at another case (datepicker) we can use javascript..... i'll try the 2nd option & ask another question(s) if meet some trouble :) thank's b4... rgds, d3n. On 2/13/06, Julien Bonastre <julien@xxxxxxxxxxxxxxxx> wrote: > there are many ways to skin a cat > > here are the first few suggestions or plans of attack I would look at: > > a) the popup window calls upon a form/page which once a value is > selected sends the value back to the parent window via javascript and > closes popup or something > > b) use a session variable. On this popup when a user takes action, > selects value or whatever, it submits the form in the popup which the > page handles and saves the chosen value/s to a session. > then closes the window or whatever, back on the main form, you can > continue processing and fetch that session var later when they submit > that form > > I'd probably go option a.. > > ---oOo--- Allowing users to execute CGI scripts in any directory should > only be considered if: ... a.. You have no users, and nobody ever visits > your server. ... Extracted Quote: Security Tips - Apache HTTP > Server ---oOo--- ------oOo---------------oOo------ Julien Bonastre > [The_RadiX] The-Spectrum Network CEO ABN: 64 235 749 494 > julien@xxxxxxxxxxxxxxxx > www.the-spectrum.org ------oOo---------------oOo------ > ----- Original Message ----- > From: "r0md0n1" <d3n1.euy@xxxxxxxxx> > To: <php-db@xxxxxxxxxxxxx> > Sent: Monday, February 13, 2006 8:00 PM > Subject: data picker > > > hi all.... > > I'm trying to create a smalll application to pick data from pop-up > window into a form (like when inserting email address @ yahoo-mail or > date-picker :).... > here's some ilustration : when i click a hyperlink then comes pop-up > window to browse data's, after found desired data i want to pick the > data-id into the form (textbox, etc..)... > anyone give me a clue pls...... > > rgds, > d3n. > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > > > -- > No virus found in this incoming message. > Checked by AVG Anti-Virus. > Version: 7.1.375 / Virus Database: 267.15.6/257 - Release Date: > 10/02/2006 > > > > > -- > No virus found in this outgoing message. > Checked by AVG Anti-Virus. > Version: 7.1.375 / Virus Database: 267.15.6/257 - Release Date: 10/02/2006 > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php