Is it possible for a user to accidentally get another users input?

dougmcc1

Let me give an example before I describe my problem.

Let's say a user submits a form, and then they're sent to a confirmation screen where they are asked if their information is correct. (If yes, then a new page is created with the information they entered into the form)

But lets pretend when the confirmation screen comes up, they leave for a few minutes. During that time, another user enters data into the form and confirms it and his page is created with the data.

The orignial user comes back and clicks confirm...

Will his page display the information he entered into the form, or will it display the information that the new user entered into the form?

drag0n

You mean another user using the same computer?
If you mean someone else using say form.php then NO lol because PHP generates html so it uses the code on form.php to generate a new html page every time someone excutes it...

Gary_King

Originally posted by drag0n
You mean another user using the same computer?
If you mean someone else using say form.php then NO lol because PHP generates html so it uses the code on form.php to generate a new html page every time someone excutes it...

Yep, agreed.

Unless there's some sort of session involved where one person has the same session as someone else, which might be what you are talking about.

dougmcc1

"You mean another user using the same computer? "
No, I mean on two different computers.

"PHP generates html"
I know that PHP gets parsed before it is served to the user and I think that's where my question is. I was thinking maybe User2 could change the contents of the variable before User1 confirms because by the time they confirm, someone else has entered something different into the same variable.

But I guess it doesn't work like that, so that's reassuring. I was thinking I would have to use session ID's or $_SERVER or something to distinguish one user from another so I'm glad I don't need to do all that.

Is there any case where I would run into this problem? What if I had hundreds of users submitting information every second?

I know this is probably a silly question but I'm really new at this and I have to ask, so bear with me. But I'll probably have a laugh with you if I ever see this post again 🙂

tekky

Originally posted by drag0n
.....If you mean someone else using say form.php then NO lol because PHP generates html so it uses the code on form.php to generate a new html page every time someone excutes it...

What he's saying is....

once the page is displayed to the user, no matter how long afterwards that they click "confirm"

the next PHP to handle that information (unless you did something REALLLY WHACKED (yes there is always exceptions right? :p)) will be derived from the $_POST variables of the form inputs on the page they let sit for however long, therefor, THEIR information will always go to THEM 😉