• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Disabling a form element server-side
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Disabling a form element server-side


  • Subject: Disabling a form element server-side
  • From: Dan Grec <email@hidden>
  • Date: Thu, 12 Jun 2008 17:13:25 -0600

All,

We're currently using the "disabled" binding (and thus HTML) to stop text entry into fields when a user doesn't have access.
(i.e. WOTextField, WOCheckbox, etc)


This presents a problem, as users can use an inline proxy or firebug to submit the data anyway, which gets saved.
Our customers are complaining this is a security risk, so we have to do something.


We're trying to come up with a way to handle the disabling on the server side, rather than letter the browser deal with it.
We thought about conditionally rending them as a text equivelant (ie WOString instead of WOTextField) but this will be pretty annoying for WOCheckbox & WORadioButton.


Does anyone have any suggestions?

Thanks,
-Dan

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


  • Follow-Ups:
    • Re: Disabling a form element server-side
      • From: Don Lindsay <email@hidden>
    • Re: Disabling a form element server-side
      • From: John Baldwin <email@hidden>
    • Re: Disabling a form element server-side
      • From: Rams <email@hidden>
  • Prev by Date: Re: [OT] WWDC--where is our resident singer/composer?
  • Next by Date: Re: [OT] WWDC--where is our resident singer/composer?
  • Previous by thread: Re: [OT] WWDC--where is our resident singer/composer?
  • Next by thread: Re: Disabling a form element server-side
  • Index(es):
    • Date
    • Thread