[FX.php List] FM accts vs. acct & password fields?

[william.downs]

Hi Joel,

I personally don't see any risk really or trouble in creating FM  
accounts - IF you assign a Privilege Set with only XML extended  
Privileges - which is scriptable anyway.

it's true that you may have a lot of Filemaker Accounts - but as it  
is used for Authentication I like that idea. The same script can  
create a User record in the Users table AND create an FM account -  
this then stops anyone from knowing the Users password - which would  
not be the case if it is stored in a table

After a successful login, I set the users login details in SESSION  
variables -

Of course, it has once again been over a week since I slept properly  
- so I may be (most likely) missing something - please feel free to  
call me a monkey.

Kindest Regards,

William

On 17 Jun 2008, at 03:43, Joel Shapiro wrote:
> Thanks Dale & Bob
>
> Yeah I agree that creating FM accts would be too much trouble and  
> too much unnecessary risk.  Plus, if there are gonna be a lot of  
> users, that would be a lot of FM accts, which just seems like  
> bulk.  Plus if the web file is separate from the data file, the  
> script would need to create the accounts in both -- and check for  
> uniqueness through FileMaker errors -- and... phew!
>
> Good.  You've helped me think it through more.
>
> -Joel
>
>
> On Jun 16, 2008, at 7:28 PM, Dale Bengston wrote:
>
>> Hi Joel,
>>
>> We do it table-based. Access to FileMaker accounts is not  
>> something I'd personally feel good about opening up to web users.
>>
>> Dale
>>
>> On Jun 16, 2008, at 8:47 PM, Joel Shapiro wrote:
>>
>>> Hi all
>>>
>>> A FileMaker colleague has asked me about a new php project of his  
>>> in which users will create their own accounts via the website.   
>>> He's thinking that the user accounts would be actual FileMaker  
>>> accounts.  I would think that a User table with username and  
>>> password fields would be the way to go, but I wanted to check if  
>>> anybody here creates FM accounts for website users.  Does  
>>> anybody??  Or anyone have any relevant comments?  (I don't know  
>>> their anticipated number of users.)
>>>
>>> TIA,
>>> -Joel
>>> _______________________________________________
>>> FX.php_List mailing list
>>> FX.php_List at mail.iviking.org
>>> http://www.iviking.org/mailman/listinfo/fx.php_list
>>
>> _______________________________________________
>> FX.php_List mailing list
>> FX.php_List at mail.iviking.org
>> http://www.iviking.org/mailman/listinfo/fx.php_list
>
> _______________________________________________
> FX.php_List mailing list
> FX.php_List at mail.iviking.org
> http://www.iviking.org/mailman/listinfo/fx.php_list