Re: Form Design Advice - Mailing list pgsql-novice

From
Subject Re: Form Design Advice
Date
Msg-id 20050304235747.21916.qmail@web52405.mail.yahoo.com
Whole thread Raw
In response to Form Design Advice  (<operationsengineer1@yahoo.com>)
Responses Re: Form Design Advice
List pgsql-novice
--- Bruno Wolff III <bruno@wolff.to> wrote:
> On Fri, Mar 04, 2005 at 00:27:05 -0600,
>   Ross Gohlke <ross@grinz.com> wrote:
> >
> > Code your form manually with the proper element
> names. Add a hidden
> > element for each visible element to pass the
> field's type for validation
> > purposes.
>
> This should be in an additional table in the
> database, not on the form.
> Otherwise the end users can send back incorrect
> types to check against
> which could potentially be a security issue.

bruno, help me out here.  are you saying that a table
in the db should have columns for table, column name
and field type (same as data type, right?)?

Would the layout look as follows?

Table: t_form

Columns: table, column, data_type

Sample Entry: customer, customer_name, varchar
Sample Entry: customer, customer_phone, varchar

tia...

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

pgsql-novice by date:

Previous
From:
Date:
Subject: Re: Form Design Advice
Next
From: Afton & Ray Still
Date:
Subject: Re: PostgreSQL installation problem on Windows XP Home