[RESOLVED] Session to Preview and Edit Text

dispratt

Is it OK to use a session to preview and edit text? Users are entering their bio in a cms and will likely go back and forth before saving it. Only when they're done does anything get inserted into the db table. Kinda like this:

Form
1. User enters text, clicks preview
2. Text is saved in $_SESSION['bio']
3. Send to Preview (like a modal window or new page, etc.)

Preview
1. User reviews text, clicks edit to fix an error
2. Send back to Form

Form
1. $SESSION['bio'] gets saved as $bio and session is unset
2. Echo $bio in the textarea
3. User makes changes, clicks preview
4. Text is saved in a new $SESSION['bio']
5. Send to Preview

Preview
1. User reviews text, clicks save
2. $_SESSION['bio'] is escaped and inserted into db table

I found a similar discussion on this forum from about 2000 (they were talking about 28k modems, fer cryin' out loud!). But it's almost 2010, so I thought the topic was due for another looksee. Thanks!

djjjozsi

and other users can see the bio values ? If yes you should save these values in a database, and track the last modification date-time. Once a user replied on that value you should not allow the modifications. Or restrict the modify action in a time. You can easily count the elapsed time from the table (if it is not null).

Or just add 'active' field to the table, while its inactive the user can edit this post.

dispratt

Thanks djjjozsi... I see your point... if the CMS is being used by a number of people in a company, then maybe sessions is not such a good idea. In that case, an active/inactive field sounds like a reasonable solution.

I was trying to be efficient and minimize queries to the db, but it shouldn't be at the cost of privacy or security.

But if the CMS is just being used by one person for their consulting business, then would sessions still be a viable option or just a bad idea overall?

Thanks!

djjjozsi

Session is good enough till you make multy-user programs.