Search Again:

Re: Unsafe E-Mail Delete method

From: Shawn Hogan
Date: Tuesday, December 31, 2002
Time: 3:32:35 pm

ISP List wrote:

> In the Customer Web Interface, it allows a customer to delete their E-mail
> addresses if they are so inclined (and if you allow it in the Prefs). The
> way it appears to be done is that a temporary array/table is created inside
> OG of the customer's E-mail addresses, and each address is assigned a
> temporary Record ID. When the Delete button is pressed, this Record ID is
> passed to the CDML and then the "Emails Web" Script does the
> delete. Anyway, we've run in to these problems with that method:
>
> 1. If a customer deletes the address and the list of remaining E-mail
> addresses comes back up (the default behavior), and then they click Refresh
> in the browser (and choose Yes to repost to the page), the E-mail address
> which _now_ has the ID of the one they originally deleted gets deleted. Ouch.
>
> 2. If someone logs in to an account and someone else does so at the same
> time, a similiar scenario to the one above is also possible as the data
> integrity is not assured with two people in the account at once (e.g. if
> there are 5 addresses and person A deletes the fourth one, and person B
> tries to delete one, the record ID would have changed as a result of person
> A's actions and person B may be deleting the wrong address and not realize
> it).
>
> It seems to me the easy solution would be to pass the actual E-mail address
> itself instead of a Record ID to the "Emails Web" Script. Is there a
> reason this is not being done or ?

Mainly because the query is done within the customer file (not the services
file). So internally it "jumps" to email xx for that customer to perform
whatever actions are needed.

- Shawn

----------------------------------
Shawn D. Hogan
President, Digital Point Solutions
http://www.digitalpoint.com
(858) 452-3696


---------------------------------------------------
To subscribe, unsubscribe or to search list archive
please visit http://www.optigold.com/lists/isp.html
---------------------------------------------------



Messages In This Thread:



Return to Digital Point Solutions' Home Page