What do i do to prevent other Users of my database get information just by changing the url with another id number....
example;
User ONE has access to subdirectory 1.
To get access, she need to enter her Username and Passord:
<!-- w --><a class="postlink" href="http://www.domain.com/database/sub1/index.html?id=1">www.domain.com/database/sub1/index.html?id=1</a><!-- w -->
User TWO has access to subdirectory 2.
To get access, he need to enter his (another) Username and Passord:
<!-- w --><a class="postlink" href="http://www.domain.com/database/sub2/index.html?id=2">www.domain.com/database/sub2/index.html?id=2</a><!-- w -->
BUT..... if User ONE changes "?id=1" in "?id=2"
she gets access to the information of User TWO....
not good!!!
now what do i do....!!!??
thank in advance
Helena Duiten from Holland
example;
User ONE has access to subdirectory 1.
To get access, she need to enter her Username and Passord:
<!-- w --><a class="postlink" href="http://www.domain.com/database/sub1/index.html?id=1">www.domain.com/database/sub1/index.html?id=1</a><!-- w -->
User TWO has access to subdirectory 2.
To get access, he need to enter his (another) Username and Passord:
<!-- w --><a class="postlink" href="http://www.domain.com/database/sub2/index.html?id=2">www.domain.com/database/sub2/index.html?id=2</a><!-- w -->
BUT..... if User ONE changes "?id=1" in "?id=2"
she gets access to the information of User TWO....
not good!!!
now what do i do....!!!??
thank in advance
Helena Duiten from Holland