如何在编辑mysql记录时安全地存储记录索引 [英] how to securely store a record index when editing a mysql record

问题描述

大家好 - 我的主题几乎都说 - 它有一个安全的方式

来做这个吗？根据我的理解，非安全方式是将索引作为名称填充列表框，或者使用隐藏控件。

唯一安全的会话方式？我也在想也许

创建一个元表，说明谁正在编辑哪个记录正确

现在。有什么建议吗？


谢谢，

dino

hi everyone- my subject pretty much says it all- is there a secure way
to do this? the non-secure ways are, as i understand it, to populate
a listbox with indices as names, or maybe use a hidden control. is the
only secure way with sessions? i was also thinking about perhaps
creating a meta table that says who is editing which record right
now. any advice?

thanks,
dino

推荐答案

迪诺d。写道：

dino d. wrote:

大家好 - 我的主题几乎都说 - 它有一个安全的方式

来做这个吗？根据我的理解，非安全方式是将索引作为名称填充列表框，或者使用隐藏控件。

唯一安全的会话方式？我也在想也许

创建一个元表，说明谁正在编辑哪个记录正确

现在。任何建议？


谢谢，

dino

hi everyone- my subject pretty much says it all- is there a secure way
to do this? the non-secure ways are, as i understand it, to populate
a listbox with indices as names, or maybe use a hidden control. is the
only secure way with sessions? i was also thinking about perhaps
creating a meta table that says who is editing which record right
now. any advice?

thanks,
dino

定义编辑MySQL记录 。


例如，如果用户打开编辑表单然后关闭

计算机会怎样？


-

==================

删除x来自我的电子邮件地址

Jerry Stuckle

JDS计算机培训公司
js ******* @ attglobal.net

==================

Define "Editing a MySQL record".

What happens if the user brings up an edit form then shuts off the
computer, for instance?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
js*******@attglobal.net
==================

我真的最关心如何在帖子上传递

编辑记录的记录ID而不将记录ID暴露给html

来源。感谢您的帮助。


dino

3月9日晚上10点46分，Jerry Stuckle< jstuck ... @ attglobal.netwrote：

i''m really mostly concerned about how to pass the record id of the
edited record on post without exposing the record ID to the html
source. thanks for any help.

dino
On Mar 9, 10:46 pm, Jerry Stuckle <[e-mail]:

dino d。写道：

dino d. wrote:

大家好 - 我的主题几乎都说 - 它有一个安全的方式

来做这个吗？根据我的理解，非安全方式是将索引作为名称填充列表框，或者使用隐藏控件。

唯一安全的会话方式？我也在想也许

创建一个元表，说明谁正在编辑哪个记录正确

现在。任何建议？

hi everyone- my subject pretty much says it all- is there a secure way
to do this? the non-secure ways are, as i understand it, to populate
a listbox with indices as names, or maybe use a hidden control. is the
only secure way with sessions? i was also thinking about perhaps
creating a meta table that says who is editing which record right
now. any advice?

谢谢，

dino

thanks,
dino

定义"编辑MySQL记录。


如果用户打开编辑表单然后关闭

计算机，会发生什么？
< br $> b $ b -

==================

删除x来自我的电子邮件地址

Jerry Stuckle

JDS计算机培训公司

jstuck ... @ attglobal.net

==================

Define "Editing a MySQL record".

What happens if the user brings up an edit form then shuts off the
computer, for instance?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
[e-mail]
==================

dino d。写道：

dino d. wrote:

我真的最关心如何在帖子上传递

编辑记录的记录ID而不暴露记录ID为html

来源。

i''m really mostly concerned about how to pass the record id of the
edited record on post without exposing the record ID to the html
source.

你不是。您将该ID存储在会话变量中。


如果您在相同的

时间内编辑多条记录，则可能会出现问题。虽然。考虑使用ID哈希或随机票。


-

------------------ ----------------
$ b $bIvánSánchezOrtega-ivansanchez-algarroba-escomposlinux-punto-org-

Un ordenador no es un televisor ni un microondas，es una herramienta

compleja。

You don''t. You store that ID in a session variable.

This may become a problem if you are editing several records at the same
time. though. Think about using ID hashes, or random tickets.

--
----------------------------------
Iván Sánchez Ortega -ivansanchez-algarroba-escomposlinux-punto-org-

Un ordenador no es un televisor ni un microondas, es una herramienta
compleja.

这篇关于如何在编辑mysql记录时安全地存储记录索引的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！