MOD for the modify page - Lite version
Well, I'm not sure if it is good technique or not but I don't like the way the modify a listing feature currently works. I don't think that just anyone should be able to see the modify page merely by typing in the URL address.
So what I did was to change the opening screen so that instead of just typing in the URL, the user must type in the link ID and the password. If the user correctly enters these two items, only then will he/she be allowed to see the actual modify page. No password is required on submission of the actual modify page.
Personally, I would create a username field in the link table and either one of two alternatives:
•add the username as a requirement along with the ID and password or
•replace the ID with the username variable.
The advantage of the first method would be to allow one link owner to have multiple listings (i.e., IDs) but just one username and password.
I have attached the files. They are for the free lite version but should be enough to also point you in the right direction for the paid version.
In general what I had to do was:
In modify.php
•In the LookupUrl() function delete the references to URL and replace it with the link_id and password.
•Early on I was getting an error msg that I corrected by moving the ShowFormModifyLink($lid) function before the ProcessLookupUrl() function.
•Modify the ProcessLookupUrl() function to verify the link_id lookup by trying to find the link_id instead of the Url.
•I moved the section that dealt with the password verification from the ProcessFormModifyLink() function to the ProcessLookupUrl() function. The password verification should come after the link_id lookup
In the modify_lookup.html file
•Delete the reference to the URL and replace it with the link_id
•Add an input statement for the password – see the modify_form.html file
In the modify_form.html file
•Delete the reference to the password field and the send forgotten password feature.
•I added the link_id field as a read-only type field.
Now for the send forgotten password feature. Obviously, it can not be part of the modify_form.html file – You need the password to get to that page! So it needs to be part of the modify_lookup.html file. Clicking on the feature should probably take the user to another page where he could be specifically instructed to enter the link ID. With appropriate failure/success routines/pages to send the email to email address in the record.
I'm sure I have overlooked something so this is just a idea.
.
.
.
