baseportal
Start

baseportal message board

Welcome to the baseportal message board...

Please read the FAQ.

 
 Selected message: To the list 
    Message from madman on 12/10 2006, 13:47 +00:00

    Re: Password Protection for Single Entries has a serious flaw!


      "Password Protection2 with User Database,session-Id, timout,Logout +add " is not working either. Here you can not delete others' entries, but you can modify others entries!
      --------------------------------
      It's unbelievable, in 2 days I could not find anything what solves the most basic thing:

      Each and every user of the database (except the owner) is able to modify and/or delete only the own data!
      All others can just see and search all the entries.

      I guess we are not given this sollution because we must pay for it.
      OK, than how much is that?

      I am desperately needing to put up this database, nobody can help me?

    Your reply:

    Name: EMail: WWW:
    Subject:
    Text:
    Timezone:

    Post a new message


 All messages from this thread: To the list 
    Message from madman on 12/9 2006, 19:32 +00:00

    Password Protection for Single Entries has a serious flaw!


      The
      "Password Protection for Single Entries" as it is in the "Library" (so automatically included in the software if we make a field in our database called "Password") has a very serious flaw:

      OK, to modify the data of individual entries just the person can modify who knows that individual password.

      But anybody can delete any other people's data too, because the system does not asks for the password in this case!

      How can be this solved? To be possible to delete only for those who know the password (and of course the database owner), so they don't mess with other people's data?
     Post a reply
    Message from madman on 12/9 2006, 19:33 +00:00

    Re: Password Protection for Single Entries has a serious flaw!


      I forget to add I would need help ASAP in solving this problem!
      Thanks....
     Post a reply
    Message from madman on 12/10 2006, 13:47 +00:00

    Re: Password Protection for Single Entries has a serious flaw!


      "Password Protection2 with User Database,session-Id, timout,Logout +add " is not working either. Here you can not delete others' entries, but you can modify others entries!
      --------------------------------
      It's unbelievable, in 2 days I could not find anything what solves the most basic thing:

      Each and every user of the database (except the owner) is able to modify and/or delete only the own data!
      All others can just see and search all the entries.

      I guess we are not given this sollution because we must pay for it.
      OK, than how much is that?

      I am desperately needing to put up this database, nobody can help me?

     Post a reply

    Message from Claus on 12/14 2006, 13:45 +01:00

    Re: Password Protection for Single Entries has a serious flaw!


      okay,

      normally I don't like to programm anything for free, but in this case...;-))

      if you want to allow "delete", maybe this can help. Change the code like this:

      if ($cmd eq "del")

      {

      get "Id==$_get{Id}", "adresses2";

      if ($name_in ne $responsible)

      {
      $cmd="";
      out "Acces denied!!!";

      }
      }


      hth

      Greetings from Hamburg

      Claus

      PS: not testet;-)

     Post a reply
     
 Newest 150 Threads: To the input form 
To the input form | Older messages > | Oldest messages >>

Back to the homepage

© baseportal.com. All rights reserved. Terms of use



powered in 0.15s by baseportal.com
Get your own Web Database - for FREE!