Page 1 of 1

Edit page without validated IDs

Posted: Sun Jun 12, 2016 11:45 pm
by straightlight
Each edit page without validated IDs from the database should automatically be redirected to the previous page of the route - with log entries.

Re: Edit page without validated IDs

Posted: Sun Jun 26, 2016 6:06 pm
by villagedefrance
Ok, but I don't really get it.
If the link (or button) is written correctly, it should validate only if the ID is present?
Do you mean external links trying to get in?

.. and how would you call/describe the log file?

Re: Edit page without validated IDs

Posted: Sun Jun 26, 2016 7:12 pm
by straightlight
Page redirections won't do it straight, more is needed. Let me re-explain the problem.

As we know, many administrators / users can edit and delete pages. The problem is there are no session-control regarding pages that are either edited but only deleted but even deleted won't notify the next users if the page is already gone which means the action will be leaded to a page not found. Easy solution, right? Just refresh the page? WRONG !

If multiple users works on the same page and each users saves the form simultaneously, how do we know which information should be the right one without consulting each users? The problem is, opencart saves the event but not the specific user but another problem is that even if we have a specific user, the user groups are only handled by page access and write access. What happens when multiple users have the access? By then, it's already out of control. On that end, it would be to create a top user that can only write on the page? If so, what is the point to create user groups?

Solution: We would need three forms instead of two forms in the user groups. One for access, one for editing and one to delete to avoid confusion between users when saving the data.

Let's think about this for a second. Default currencies and languages are provided since the Opencart installation so that nobody can entirely delete the values for both subjects. Otherwise, it would as well confused the platform, not just the users and customers without including the affiliates. An alternative solution would be to set a first priority access to users to whomever first accesses the page, aside the top user's access, would be in control to edit the page and the rest of the people that needs to edit the page, again aside the top user's access, would need to wait untll the preceeded user has finished editing. If the preceeded user has no activity, the top users should be able to handle the expiry time until the next one can get in; in case multiple users would be stucked in the waiting queue.