Table name coming from a form...

[boboli]

Hi all....
I'm very new to PHP/MySql... but I'm trying to applicate to my site for what I need....this is my problem

I have 8 vendors sending data to the DB
Every single vendor has a table (let's name it vendor_1 etc...)
They all send data through the same form...

is it possible to name the CORRECT TABLE as the first field of the form (it will be a select field with the 8 names) so that I can use the same form for all the vendors and they will send data to the correct table (I need to have 1 separate table per vendor.....)

• if possible how can I add a password field ??? I would like to be sure that each vendor is sending data ONLY to his own table and not to someone else....(an authentication so that I will not pay commissions to the wrong vendor..... )

thank you for all your help.... 😃

Roberto

[lostcarpark]

The obvious way to do it would be to store the table name in a hidden field:

<input type="hidden" name="table" value="vendor_1">

However, this is generally not recommended, as someone could edit the HTML locally to change the table being submitted to.

Password protecting is probably essential, if you don't want your system to be abused. There are lots of ways to achieve this. One relatively easy way is to set the have a login form to accept a username and password, and to store these in _SESSION variables while the user is logged in.

You should probably set up a table to store the Username, Password and the Vendor table names. Then it will be a relatively easy matter to look up the table name for the logged in user before inserting the record to that table.

Hipe that helps,

James