The Little Guy Posted April 10, 2008 Share Posted April 10, 2008 Would It be fine to display to the user what a query looks like, as long as they don't have database user name and password? Link to comment https://forums.phpfreaks.com/topic/100518-show-query-to-members/ Share on other sites More sharing options...
cooldude832 Posted April 10, 2008 Share Posted April 10, 2008 Would It be fine to display to the user what a query looks like, as long as they don't have database user name and password? not unless you have a very good reason because injection can become easier when field names are known. Link to comment https://forums.phpfreaks.com/topic/100518-show-query-to-members/#findComment-514107 Share on other sites More sharing options...
The Little Guy Posted April 10, 2008 Author Share Posted April 10, 2008 they won't be able to make SQL queries, and the database user that does the querying has limited power (select,insert,update,delete). I basically would show them what the query would look like, then give them a certain code they use when they save their query. that will search the database for the query they are building, then exicute that from a browser. they are making a game, so the game will have a dll file they they need to download to extend Game Maker 7. In the DLL will be some functions, such as one that connects to a page on my website. the function would look like this: gmserver_get_values('837','827773','56542','jd8jkd8idkjd8did99jdjjcxp'); value 1: User id in my database value 2: Query id in my database value 3: Game id in my database value 4: Game stamp id in my database when the user uses that in his/her game it will connect to my site, make a query based on that information, make sure the info is correct, then return the results as an array. Link to comment https://forums.phpfreaks.com/topic/100518-show-query-to-members/#findComment-514124 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.