Search Again:

Unsafe E-Mail Delete method

From: Mike Bacher
Date: Tuesday, December 31, 2002
Time: 3:23:39 pm

Question..

In the Customer Web Interface, it allows a customer to delete their E-mail
addresses if they are so inclined (and if you allow it in the Prefs). The
way it appears to be done is that a temporary array/table is created inside
OG of the customer's E-mail addresses, and each address is assigned a
temporary Record ID. When the Delete button is pressed, this Record ID is
passed to the CDML and then the "Emails Web" Script does the
delete. Anyway, we've run in to these problems with that method:

1. If a customer deletes the address and the list of remaining E-mail
addresses comes back up (the default behavior), and then they click Refresh
in the browser (and choose Yes to repost to the page), the E-mail address
which _now_ has the ID of the one they originally deleted gets deleted. Ouch.

2. If someone logs in to an account and someone else does so at the same
time, a similiar scenario to the one above is also possible as the data
integrity is not assured with two people in the account at once (e.g. if
there are 5 addresses and person A deletes the fourth one, and person B
tries to delete one, the record ID would have changed as a result of person
A's actions and person B may be deleting the wrong address and not realize it).

It seems to me the easy solution would be to pass the actual E-mail address
itself instead of a Record ID to the "Emails Web" Script. Is there a
reason this is not being done or ?

--Mike


---------------------------------------------------
To subscribe, unsubscribe or to search list archive
please visit http://www.optigold.com/lists/isp.html
---------------------------------------------------



Messages In This Thread:



Return to Digital Point Solutions' Home Page