how to disable the form

chinna

hi..its me again...ok let me explain...
1stpage:userlogin-user login using their ID and password.
2ndpage-fill in page-in this page all the particular about user will display.How i do it..I select from database use $SESSION['ID'] and i got the output..the function was working so fine...but the problem is...i cant make the data fixed...that means..user cant edit the displayed data..

<input name="prepare_by" value="<? 
$sql10="Select * from employee where ID ='$_SESSION[username]'";
$query10 = mysql_query($sql10) or die mysql_error());
$result10 = mysql_fetch_assoc($query10);
echo $result10['prepare_by'];
?>"  />

if i do like this the data displayed in the form where u can edit it...and when i took out the form..

<? $sql10="Select * from employee where ID ='$_SESSION[username]'";
$query10 = mysql_query($sql10) or die mysql_error());
$result10 = mysql_fetch_assoc($query10);
echo $result10['prepare_by'];
?>

the data displayed without the form and it fixed...so the user cant edit it...but it not stored in the database...it was empty in database...i was confused...i try to google but cant find the answer...anyone out there can help me...thanks in advanced

HalfaBee

You might need to enclose $_SESSION['username'] in {}

<? $sql10="Select * from employee where ID ='{$_SESSION[username]}'";

I assume you have done a session_start() at the start of the script.

chinna

here the solutions

This an html issue. in the html code put


   <input type="text" disabled="disabled">

as a parameter for the textbox, textarea, etc you do not want them to edit
thanks for the help

bradgrafelman

Don't forget to mark this thread resolved.

EDIT: Also... why try to get the data from a disabled post field? This gives the users the opportunity to change it (FireFox's WebDeveloper plugin makes this very easy). Since you populate the field with data from a SESSION variable... why not just use that same variable when you process the form?

Weedpacket

Besides, disabled form fields are not included when a form is submitted, so you either don't get them back (because they were disabled) or someone has been messing with the form - as suggested by bradgrafelman - in order to change them (in which case you do not want them back).

If you're just displaying information to the user, and you have no intention of having them edit it, why not just display it as text? As bradgrafelman says, you already have the data, you don't need to ask for it again.

chinna

dear weed packet,

i just want to displaying information to the user....because the the system will tarce the user by the using ID which they used to log in....if want to process to second page all the data will be displayed must be stored in the database...i already try to displayed as text but i didnt stored in database....and new thing....when i do disabled...the data also not stored any suggestion?

Weedpacket

As bradgrafelman suggested: session variables. You're using them already.