in reply to cgi::formbuilder submit button non-editable form

It's just a general principle qn. The form is only for use by a small team (where I work), all techies, and on a private ip-range lan.
Hacking is not something I'm worried about, some of them (apart from the boss) could just hack the DB anyway.
It's a small asset mgr system, so basic forms 'cos I'm not a CGI prog, just in the job when the requirement came up.
I'd just like for them to be able to check the details of the rec before it's deleted, but it'd be nice if the field contents were non-editable (and I'd like to know for future ref).
OTOH, the rec id is non-editable on this form, so it's not critical.

Chris

  • Comment on Re: cgi::formbuilder submit button non-editable form

Replies are listed 'Best First'.
Re^2: cgi::formbuilder submit button non-editable form
by wfsp (Abbot) on Mar 05, 2008 at 08:40 UTC
    Do you need a form at all?

    All you're after is a yes or no from the user. Perhaps display the data in a table and add two links

    <a href="delete.cgi?confirm=1">confirm</a> <a href="delete.cgi?confirm=0">cancel</a>
    Have the script take care of if and what is to be deleted. You really need to heed quester's note of caution about authorisation though.